Legal

Cookie policy

Effective · 24 April 2026Last updated · 24 April 2026

The short version. Our website uses a handful of cookies — the ones we need to log you in and a few analytics cookies to understand which features work. We don't run advertising cookies and we don't let other companies track you across the internet through Veyago. In the EU and UK, analytics cookies are off by default until you opt in.

1. What cookies are

Cookies are small text files stored on your device by your browser when you visit a website. We also use similar technologies (local storage, session storage) that behave like cookies. Everything in this policy that refers to "cookies" covers those technologies too.

This Cookie Policy applies to our website veyago.app. Our mobile apps don't use cookies; they use the device's local storage for session state and a mobile analytics SDK. See the Privacy Policy for what the apps collect.

2. Our approach

We keep it minimal. Veyago does not run advertising cookies, does not use social media tracking pixels (no Meta Pixel, no TikTok Pixel, no LinkedIn Insight Tag), and does not allow third parties to track you across other websites through our site.

We use cookies for two things:

Essential — to keep the website working and to keep you signed in.
Analytics — to understand how people use Veyago so we can improve it.

3. The cookies we use

Cookie / key	Category	Purpose	Provider	Expires
`sb-access-token`	Essential	Keeps you signed in during your session	Supabase (first-party)	Session
`sb-refresh-token`	Essential	Refreshes your sign-in so you don't have to log in every hour	Supabase (first-party)	30 days
`__cf_bm`	Essential	Bot detection and basic DDoS protection	Cloudflare	30 minutes
`cf_clearance`	Essential	Records that your browser has passed a security challenge	Cloudflare	Up to 30 days
`veyago_consent`	Essential	Remembers your cookie choices so we don't ask again	Veyago (first-party)	12 months
`ph_*` (various)	Analytics	Product analytics — feature usage, performance, errors	PostHog (EU Cloud)	Up to 12 months

Essential cookies are necessary for the website to function and are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive. Analytics cookies are set only after you give consent (EU/UK) or if you have not opted out (elsewhere).

4. Your choices

You control the analytics cookies. Essential cookies can't be turned off because the site won't work without them.

In the EU, UK, and EEA: when you first visit our website you see a cookie banner with two equally prominent options — Accept all and Reject all. You can change your choice at any time by clicking Cookie settings in the website footer.

Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a valid opt-out of non-essential cookies and will not set analytics cookies.

Browser controls. You can also block or delete cookies in your browser settings. If you block essential cookies, parts of the website won't work.

5. Third-party cookies

PostHog, Supabase, and Cloudflare are our service providers. The cookies they set on our behalf are first-party cookies from our domain. None of these providers uses your data for their own advertising purposes, and none of them shares it with advertising networks.

We do not set any third-party advertising cookies.

6. Changes to this policy

We'll update this page when we add or remove cookies, and update the "Last updated" date above. Material changes (for example, adding a new analytics provider) will trigger a fresh consent prompt in the EU and UK.

7. Contact

Questions: hello@veyago.app. Full details of how we use the data collected through cookies are in our Privacy Policy.