Cookie Notice

First-party necessary technologies

• vectoria_cookie_consent_v1 (localStorage, vectoriacivil.com): stores the policy version, necessary/analytics categories, and choice date. It persists until the user clears browser data or a new version requires a new choice.
• vectoria_csrf (technical cookie): prevents forged requests. Maximum duration is 30 days; it is Secure and not HttpOnly because the frontend must return its value in a security header.
• vectoria_session (technical cookie, only after authentication): maintains the access session. It is Secure and HttpOnly and lasts no longer than the access token, normally up to one hour.
• vectoria_refresh (technical cookie, only after authentication): renews the session without requiring sign-in on every visit. It is Secure and HttpOnly, with a maximum duration of 30 days.

These technologies are needed to remember the choice, protect forms, or provide the requested private account. Session cookies are removed on sign-out, subject to the browser completing that technical deletion.

Paddle

When an invited user chooses to open Paddle checkout or its portal, Paddle may use its own necessary cookies or technologies for security, fraud prevention, payment, and subscription management. Paddle is the Merchant of Record and presents its own information before payment. Because Paddle manages those names and durations and may change them, consult the notice Paddle displays.

Minimal analytics

Cloudflare Web Analytics loads only when it is configured and the user accepts the analytics category. The integration used is cookieless and measures visits and website performance. Meta Pixel, Google Ads, and remarketing are not enabled.

Managing consent

The banner lets you accept, reject, or configure analytics. Use “Cookie settings” in the website footer to reopen it. You may also clear cookies and local storage in the browser; this may sign you out and show the banner again.