Cookie Policy

What we set

Signing in (strictly necessary)

Session cookies set by our authentication service, which keep you signed in for the length of your session. The app does not work without them.

vl_app (strictly necessary)

Remembers which of your applications you were last working on. 1 year.

vl_preview (strictly necessary)

Lets you see a preview you asked for. 7 days.

vl_repo_install, vl_repo_pick and vl_hosting_signin (strictly necessary)

Protect the step where you connect a repository or a hosting account against forgery. 15 minutes.

vl_terms (strictly necessary)

Carries your tick agreeing to the Terms from the sign-up page to your new account, where it is recorded. It holds only the version of the terms. Up to 1 hour, cleared once recorded.

vl-admin-auth (strictly necessary)

Used only on our administration site, by our own staff. 12 hours.

vl.pending-sign-in (strictly necessary, session storage)

Holds the email address you typed while a sign-in link is on its way, so the page can resend it. Cleared when you close the tab.

Preferences (local storage)

vibelock-theme, vl_sidebar_collapsed, and records that you dismissed a survey or read what is new. They remember choices you made, stay until you clear your browser storage, and are never sent to us.

Install prompt (local and session storage)

Inside the app, pwa-install-dismissed records, for this browser session only, that you closed the offer to install the app, so that we do not offer it again in the same session. It stays in your browser and is never sent to us.

Offline use and alerts

Inside the app, your browser may keep an offline copy of some pages so the incident guide works without a connection, and, only if you turn on alerts, a push subscription for your device. Both are there because you asked for the feature.

Payment

Our payment processor may set cookies on its own checkout pages for fraud prevention, governed by its own policy. The store that sells our digital products does the same on its own pages.

What we do not set

• Advertising or retargeting cookies.
• Cross-site tracking cookies.
• Third-party analytics on the marketing site. Our content security policy blocks third-party scripts outright.

Controlling cookies

We do not show a cookie banner, because we set nothing for advertising, analytics or tracking: everything listed above either makes the site and the app work, or stays in your browser to remember a setting or decide when to show a notice. If we ever add anything that needs your consent, we will ask first, on every page where it would be set, and a Global Privacy Control signal will count as a refusal. You can also block or delete cookies in your browser settings, though blocking strictly necessary cookies will stop you signing in.

We honour Global Privacy Control signals where legally required.