Cookie Policy

The short answer

The Vardify web panel and vardify.com use strictly necessary cookies and browser storage to work (ePrivacy Directive art. 5(3), second sentence). Analytics (Google Analytics) and marketing (Meta Pixel) cookies are loaded only if you consent to them in the cookie banner; before you do, these services' scripts are not loaded and their cookies are not written. Session recording is not used.

Strictly necessary cookies and browser storage

• Session renewal cookie (vardify_refresh) — Type: HTTP cookie (read only by the server, sent only to the sign-in address) · Lifetime: 7 days · Why it is necessary: Lets you carry on without signing in again when your session expires.
• Cookie choice (vardify_consent) — Type: HTTP cookie, shared by vardify.com and the panel · Lifetime: 6 months · Why it is necessary: Remembers your decision about analytics and marketing cookies.
• Session information — Type: localStorage · Lifetime: Until you sign out · Why it is necessary: Recognises you once you have signed in and is attached to your requests.
• Sign-up and sign-in steps — Type: sessionStorage · Lifetime: Until the tab is closed · Why it is necessary: Keeps a step you left unfinished during sign-up or sign-in.
• Language preference — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Remembers the interface language you chose.
• Theme preference (light/dark) — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Remembers the appearance you chose.
• Selected branch and period — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Keeps your selection as you move between pages.

Apart from the session information, what is held in localStorage and sessionStorage is never sent to the server; it stays in your browser.

Cookies that need your consent

• Google Analytics (_ga, _ga_<id>) — Provider: Google · Lifetime: Up to 2 years · Purpose: Measuring which pages and features are used. The IP address is truncated; advertising features are off. In the panel, your account's opaque identifier, role and business identifier are also sent; names and email addresses are not.
• Meta Pixel (_fbp) — Provider: Meta Platforms Ireland Ltd. · Lifetime: 3 months · Purpose: Measuring the results, such as sign-up and subscription, of visits that come from advertising campaigns. In the panel, only the business-created and first-subscription events are sent.

You can withdraw your consent at any time in the cookie settings on vardify.com, and the analytics consent also in the cookie settings of the panel. Once you withdraw it, data stops being sent to the service concerned and the Google Analytics cookies are deleted. Details of this processing are in the Privacy Policy.

Third-party services

The Google or Apple sign-in button, the map on which a branch location is chosen (Google Maps or OpenStreetMap) and the payment step (Paddle) are components that the provider concerned loads into the page. When they are used, they are subject to that provider's own cookie and privacy rules.

The mobile app

The mobile app uses no cookies. It keeps your session token, your language and theme preference and the cache needed for offline use in the device's own secure storage. The notification token is used for delivery if you have turned notifications on. Usage measurement (Google Analytics for Firebase) is turned on only if you allow it when the app asks, and can be turned off in the app's settings; details are in the Privacy Policy.

Clearing cookies

You can clear cookies and site data from your browser's settings. Doing so signs you out, returns your language and theme to their defaults and asks for your cookie choice again. Your data stays on the server.

Changes

If this policy changes, in particular if a new cookie that is not strictly necessary is added, you will be told beforehand and, where required, asked for your consent separately.