On this page
1. What cookies are
Cookies are small text files a website stores on your device. They make the site work, remember your preferences, and, in some cases, measure or personalize the experience. This Policy explains which cookies and which browser storage Vrymart uses and why.
2. Our approach
Vrymart uses a minimal set of cookies. We do not use advertising or analytics cookies (no Google Analytics, social media pixels, or ad trackers), and fonts are served from our own server, without going through third parties.
3. Cookies we use
| Cookie | Purpose | Category | Approximate duration |
|---|---|---|---|
vrymart-session |
Keep you signed in, secure your browsing, and remember what you chose during the visit (e.g., the language). | Strictly necessary | 2 hours from your last activity |
XSRF-TOKEN |
Protect forms against request forgery. | Strictly necessary | 2 hours from your last activity |
two_factor_device |
If you tick "remember this device" when entering the two-factor code, avoid asking you again on that device. | Functional / Security | 30 days |
affiliate_campaign_id |
Attribute your purchase to the Affiliate who referred you, so we can pay their commission. It is set when you arrive through an Affiliate's link and only stores the campaign number. | Functional (attribution) | 30 days |
These are the names the Platform uses today; if they change, we will update this table.
4. Browser storage
Besides cookies, the Platform stores some data in your own browser (localStorage, sessionStorage, and IndexedDB). It stays on your device: it is not sent to Vrymart or used to track you.
| Key | What for | How long |
|---|---|---|
vrymart:buy:… (localStorage) |
What you typed in the purchase form, so you don't lose it if you have to sign in or verify your email before paying. | Until you complete the purchase or sign out, and at most 24 hours. |
vrymart:lang-hint (sessionStorage) |
That you closed the notice suggesting another language, so we don't show it again. | Until you close the tab. |
| Service draft (localStorage and IndexedDB, Partners only) | The form for creating a service and its images, so you don't lose them if you close the tab. | Until you save or discard the service. |
5. Legal basis and notices
- Strictly necessary cookies (session, CSRF) do not require consent: the Platform cannot work without them.
- The remembered device (2FA) cookie is only set if you ask for it by ticking "remember this device".
- The affiliate attribution cookie is set without asking when you arrive through an Affiliate's link: it only stores the campaign number, does not identify you or follow you across other sites, and is used to pay the commission to whoever recommended you. We do not currently sell to buyers in the European Union, the European Economic Area, or the United Kingdom, where your prior consent would be required. If you don't want it, you can delete or block it in your browser, or turn on the GPC signal (Section 7).
- Third-party pages. To pay, we take you to Stripe's payment page (checkout.stripe.com) and, if you choose to sign in with Google, to Google's. Those pages use their own cookies, under Stripe's and Google's policies.
6. How to manage cookies
You can set your browser to block or delete cookies and site storage. If you block strictly necessary cookies, the Platform may not work properly (for example, you will not be able to sign in). If you delete the affiliate attribution cookie, a later purchase may not be attributed to the Affiliate who referred you.
7. Browser privacy signals (DNT / GPC)
Since we use no third-party analytics or advertising, the Platform does not track you across sites or "sell"/"share" data. We do not respond differently to the generic "Do Not Track" (DNT) signal. However, we treat a Global Privacy Control (GPC) signal as a valid opt-out request: if your browser sends it, we do not set the affiliate attribution cookie or store the campaign.
8. Changes
We may update this Policy to reflect changes in the cookies we use. We will publish the current version with its date.
9. Contact
Questions about cookies and privacy: privacy@vrymart.com.