COOKIE POLICY
Last updated: June 2026 · Effective at launch.
WHAT ARE COOKIES?
Cookies and similar technologies (including browser localStorage) are small pieces of data stored on your device when you visit VibeVault. We use them to keep you signed in, remember your privacy choices, and — only if you allow it — understand how the service is used so we can improve it.
THE TWO CATEGORIES WE USE
We keep this simple. VibeVault uses exactly two categories, and we set no third-party advertising or marketing trackers.
Essential— strictly necessary for the service to work (signing in, security, and remembering your cookie choice). These are always on and can't be turned off, because the app can't function without them.
Analytics — optional. We run PostHog on our own infrastructure (not a third-party ad network). Events are pseudonymized. This category is off until you opt in via the consent banner, and you can change your mind any time below.
COOKIES & STORAGE WE SET
| Name | Category | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Essential | Keeps you signed in (Supabase Auth session & refresh token). | Session + refresh lifetime |
| vv_consent_v2 | Essential | Remembers your cookie choice so we don't re-ask every visit. | 12 months (local storage) |
| ph_* (PostHog) | Analytics | Pseudonymized, self-hosted product analytics. Set only if you opt in. | Up to 12 months |
THIRD-PARTY FLOWS
When you connect Spotify or pay through Stripe, those providers may set their own cookies within their embedded sign-in / payment flows. Those are governed by Spotify's Privacy Policy and Stripe's Privacy Policy. We don't control those cookies.
YOUR CHOICES
Analytics are off until you opt in. You can accept all, reject non-essential, or pick per-category in the consent banner — and revisit that choice here whenever you like:
You can also control cookies through your browser settings, but blocking essential cookies will prevent you from signing in.
CONTACT
Questions about cookies or our data practices: [email protected]. We aim to respond within two business days.