Cookie notice | Vendira

1. Cookies we set

Cookies set by this site
Name	Purpose	Lifetime	Type
`sid`	Identifies your signed-in session. Without it, every page would ask you to sign in again	30 days from last use, or until you sign out	Strictly necessary

Its properties, because they are the part that matters:

The value is an opaque random identifier. It contains no personal data, no account details and nothing readable. It is a reference to a session record held on our server.
HttpOnly, so no script running in the page can read it.
Secure, so browsers only send it over HTTPS.
SameSite=Lax, so the browser withholds it when another site tries to make your browser act as you.
First-party. It is set by this site and sent to no one else.

2. Consent

Under the EU ePrivacy rules, consent is required for cookies that are not strictly necessary to provide a service you asked for. A cookie that keeps you signed in is strictly necessary, so it is exempt. We have no other cookies, so there is nothing left to ask you about.

A consent banner on a site with one session cookie would be theatre. If we ever add a cookie that is not strictly necessary, we will ask you first and this page will change before it does.

3. Local storage

The application remembers a few interface preferences using your browser's local storage. This never leaves your device and is never sent to us, but it is your device, so you should know it is there.

Whether you have chosen the light or dark theme.
Which marketplace filter you last selected, and which charts and panels you had open.
Targets and thresholds you set yourself, such as a monthly revenue goal or a campaign budget target.
Which notifications you have dismissed, so a dismissed one stays dismissed.

Clearing your browser's site data removes all of it. Nothing important is lost, and the application will simply return to its defaults.

4. Third-party cookies

There are none on this site. We have no analytics, no advertising pixels, no embedded social media, no third-party support widget and no externally hosted fonts or scripts. Loading a page here does not make a request to anyone but us.

One exception is worth naming because it is not on our site at all: when you pay, you are taken to Stripe's own checkout page, which sets its own cookies under Stripe's policies. That happens on Stripe's domain, not ours. See the Sub-processors page.

5. Managing cookies

You can block or delete cookies in your browser settings. If you block the session cookie you will not be able to sign in, because there would be nothing to remember you by. Signing out from within the application deletes both the cookie and the session record behind it, which is the more thorough way to do it.

This notice forms part of our Privacy Policy.