Cookie Policy

This policy explains what we store on your device when you use vbtnl.com (the website) and app.vbtnl.com (the dashboard), and how you control it. It supplements our Privacy Policy. “Cookies” here includes similar technologies such as local and session storage.

1. What we use

Name	Set by	Purpose	Type	Lifetime	Consent
`refresh_token`	app.vbtnl.com	Keeps you signed in to the dashboard; rotated on every use	Strictly necessary	7 days	Not required
session storage: access token, return path	app.vbtnl.com (browser session storage)	Your current session and where to return after signing in	Strictly necessary	Until you close the tab	Not required
`cf_clearance`, `__cf_bm` and similar	Cloudflare	Security: distinguishes people from bots on protected pages and on the signup and password-reset forms (Turnstile)	Strictly necessary	Up to 30 minutes / as set by Cloudflare	Not required
cookie choice	vbtnl.com	Remembers whether you accepted or declined analytics cookies, so we do not ask again	Strictly necessary (stores your choice)	6 months	Not required
`_ga`, `_ga_<id>`	Google Analytics (Google LLC)	Website statistics on vbtnl.com: pages, sources, campaigns	Analytics	Up to 2 years (`_ga`), 24 hours (`_ga_<id>`)	Required in the EU, EEA, UK and Switzerland; loaded only after you accept

The dashboard uses no analytics cookies at all.

We use no advertising cookies and no tracking pixels. If that changes, this policy and the banner change first.

2. Your choice

If you visit vbtnl.com from the EU, the EEA, the UK or Switzerland you see a banner with two equal buttons, Accept and Decline. Nothing optional loads before you choose. You can change your choice at any time via Cookie settings in the footer. Declining has no effect on anything except the statistics.

Visitors from other countries do not see the banner; Google Analytics loads with IP anonymisation and without advertising features. California residents: we do not sell or share personal information; see the Privacy Policy.

3. Browser controls

You can delete or block cookies in your browser’s settings. Blocking the strictly necessary ones stops the dashboard from keeping you signed in.

4. Google Analytics details

Google Analytics 4 is configured with: IP anonymisation (default in GA4), Google Signals and advertising features switched off, data retention 2 months, and no user identifiers sent. Google processes the data as our processor under the Google Ads Data Processing Terms and is certified under the EU-US Data Privacy Framework.

Version 2026-11-09, effective 09 November 2026.