Cookie & Essential Technologies Policy

Current inventory

The Vohhu application currently uses only essential authentication and service-operation technology:

• Supabase authentication cookies (names commonly begin with sb- and may be split into numbered chunks): provided by Supabase to sign you in, refresh and maintain your session, and protect account access. Their exact name depends on the configured Supabase project. Duration follows the authenticated session and provider configuration.
• Request and infrastructure security data: Vercel and the application process request information needed to deliver pages, route traffic and prevent misuse. The repository does not intentionally set a separate Vohhu analytics or advertising cookie for this purpose.
• Live-chat visitor session: the self-hosted support-chat service uses essential browser storage or a session identifier to keep a visitor connected to the correct conversation and prevent one visitor from receiving another visitor's messages. It is not used for advertising or cross-site analytics.
• Stripe hosted checkout: if you choose to proceed to payment, Stripe may use its own essential fraud-prevention and payment technologies on Stripe's hosted domain. Those are governed by Stripe's information and are not Vohhu analytics cookies.
• Cookie preference record (vohhu_cookie_consent): stores the categories you choose for up to 182 days so Vohhu can respect them. This is necessary to operate the preference centre.

Where a precise cookie name or lifetime is controlled by a provider or the production configuration, this policy does not invent one. The inventory is reviewed when the production configuration or provider behaviour changes.

Optional analytics and marketing

Vohhu uses Google Tag Manager (GTM-N4S4KTL5) to control Google Analytics 4 (G-Q36EJPC6W3) and any consent-aware campaign measurement tags. Google Tag Manager is not requested until you accept Analytics or Marketing.

Analytics helps us understand how customers use Vohhu. Marketing may measure campaigns and support relevant advertising. Both categories are off by default. Google Consent Mode v2 records denied signals before any Google tag can load, updates them when you make a choice and returns them to denied if you withdraw consent.

Google Analytics commonly creates cookies beginning with _ga after Analytics consent. Google campaign measurement may create cookies beginning with _gcl after Marketing consent. Vohhu removes matching first-party cookies when the relevant consent is withdrawn; provider-side data already lawfully collected before withdrawal is handled under the Privacy Policy and applicable retention rules.

Your controls

The first time you visit, you can Accept all, Reject non-essential or Manage preferences. Necessary cookies remain enabled because they provide the service and protect accounts. Analytics and Marketing remain off unless you choose them.

You can return to this policy at any time to review or withdraw your choice. Withdrawal takes effect for subsequent collection and does not affect essential sign-in, checkout or security functionality.