Cookie Policy.

1. What Are Cookies and Browser Storage

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to site owners.

Beyond traditional cookies, modern web applications also use browser storage mechanisms including localStorage, sessionStorage, and IndexedDB. These allow data to be persisted between page loads (localStorage/IndexedDB) or for the duration of a browser session (sessionStorage). This policy covers all of these mechanisms collectively.

2. Strictly Necessary Storage

The following storage is essential for VoxPoint to function. No consent is required for strictly necessary storage because it cannot be disabled without breaking the service.

Authentication (Supabase)

• Keys: sb-* in IndexedDB, with localStorage used as a fallback when IndexedDB is unavailable
• Purpose: Stores your Supabase authentication session tokens in browser storage. Required to keep you signed in across page loads and browser sessions.
• Duration: Until you sign out or your session expires.

UI Preferences (localStorage)

• Purpose: Stores functional preferences such as theme selection, table page sizes, and export panel state. This data never leaves your device and is not used for tracking.
• Duration: Persists until cleared via browser settings or account sign-out.

Cookie Notice Preference (localStorage)

• Key: vp_cookie_consent in localStorage
• Purpose: Records that you have dismissed the cookie notice banner so it is not shown on subsequent visits.
• Duration: Persists until cleared via browser settings.

Sidebar State Cookie

• Name: sidebar:state
• Purpose: Remembers whether the navigation sidebar is expanded or collapsed between sessions, so your layout preference is restored on your next visit.
• Duration: 7 days.

3. Third-Party Cookies

A small number of third-party services used by VoxPoint may set their own cookies. These are used for functionality or security rather than advertising.

Stripe.js

• Cookies: __stripe_mid, __stripe_sid
• Purpose: Fraud prevention and bot detection on payment forms. Set by Stripe when you interact with any payment element on the platform.
• Duration: __stripe_mid: 1 year; __stripe_sid: session (browser close).
• Governed by: Stripe's Privacy Policy.

Cloudflare

• Cookie: __cf_bm
• Purpose: Bot protection applied at the CDN/edge layer to protect VoxPoint's API endpoints and pages from automated traffic.
• Duration: 30 minutes (session-scoped).
• Governed by: Cloudflare's Privacy Policy.

Google Analytics

• Cookies: _ga, _ga_*
• Purpose: Site analytics. Page views and conversion events (such as submitting the contact form or joining early access), used to understand traffic and improve our public marketing pages. Google Analytics is loaded only on VoxPoint's public marketing pages (voxpoint.org homepage, pricing, contact, blog, and similar). It is never loaded inside the authenticated application, so it does not see any account, customer, invoice, or other business data.
• Duration: Up to 2 years.
• Governed by: Google's Privacy Policy.

Google Ads

• Cookies: _gcl_au, and other Google advertising cookies set via our Google Analytics tag.
• Purpose: Conversion measurement and remarketing for VoxPoint's Google Ads campaigns. Like Google Analytics, these are set only on VoxPoint's public marketing pages, never inside the authenticated application. If you interact with a VoxPoint ad, these cookies help us measure that a conversion (such as a signup) happened, and may be used to show you VoxPoint ads on other sites.
• Duration: Up to 2 years.
• Governed by: Google's Privacy Policy and Google Ads Data Processing Terms.

4. What We Do NOT Use

VoxPoint does not use:

• Meta Pixel or other social media advertising trackers
• Cross-site tracking or behavioral profiling outside of Google Analytics and Google Ads
• Google Analytics, Google Ads, or any other analytics/advertising script inside the authenticated application

We collect aggregate, anonymized usage data to improve the product. Authentication, security, and error monitoring may also process session and device information as described in the Privacy Policy.

5. Managing Cookies

You can control cookies and browser storage through your browser's settings. Most browsers allow you to block or delete cookies on a per-site basis.

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data

Important: Blocking or clearing the sb-* authentication storage will sign you out of VoxPoint and prevent login from working correctly until the storage is restored or you sign in again. Blocking third-party cookies (Stripe, Cloudflare) may affect payment form functionality.

6. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our technology or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of VoxPoint after any changes constitutes acceptance of the updated policy.

7. Contact

If you have questions about our use of cookies or browser storage, please contact us at privacy@voxpoint.org or visit our contact page. See our full Privacy Policy for more on how we handle your data.