Veyraflow
Sign inGet started

Cookie Policy

Draft

Version 2026-10-19 · Last updated 2026-11-07

This Cookie Policy explains how Jan Nastały, trading as Veyraflow ("we," "us" or "our"), uses cookies and similar technologies on our website at https://veyraflow.eu and in the Veyraflow application (together, the "Services"). It tells you what we store in your browser, why, for how long, which other companies are involved, and how you can control it.

This Cookie Policy complements our Privacy Policy, which explains how we process personal data, including data collected through cookies.

In short: we use a small number of necessary cookies and browser storage entries to sign you in and to run the Services. We use Google Analytics cookies only if you accept them. We do not use advertising cookies.

1. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES?

Cookies are small text files that a website stores in your browser and reads again when you come back. Similar technologies include your browser's local storage and session storage, which let a website keep small pieces of information in your browser. In this Cookie Policy, "cookies" also covers these similar technologies, unless we say otherwise.

  • First-party cookies are stored under our own domain (veyraflow.eu). Third-party cookies are stored under another company's domain.
  • Session cookies and session storage are deleted when you close your browser or the browser tab. Persistent cookies and local storage stay until they expire or until you delete them.

2. HOW WE USE COOKIES

We use two kinds of cookies:

  • Necessary cookies and storage. We need them to provide the Services that you ask for, for example to keep you signed in. The law allows us to use them without your consent (Article 399 of the Polish Electronic Communications Law and Article 5(3) of the EU ePrivacy Directive), but we still tell you about them. They are listed in Section 3.
  • Analytics cookies. We use them only if you accept them in our cookie banner or in "Cookie settings". They help us understand how the Services are used. They are listed in Section 4.

We do not use advertising or marketing cookies, and we do not allow other companies to use tracking technologies on the Services for advertising. The "Cookie settings" window also shows a "Marketing" option. Because we do not use any marketing cookies, turning it on currently has no effect: no marketing cookie is set and no data is shared. If we ever start using marketing cookies, we will update this Cookie Policy and ask for your consent again before using them.

When you first visit the Services, we show a cookie banner. Until you accept analytics cookies, the Google Analytics script is not loaded and no analytics cookies are set. The options "Necessary only" and "Accept all" are shown next to each other, and "Customize" lets you choose each category separately.

3. NECESSARY COOKIES AND STORAGE

These cookies and storage entries are set by the Services themselves (first-party). None of them is used for advertising or to track you on other websites.

  • sb-<project-id>-auth-token (cookie; currently sb-lhwvkhdsoozvsftwhcif-auth-token; a long value may be split into several cookies ending in .0, .1 and so on). Purpose: keeps you signed in and secures your session. It is created by the software of our authentication provider, Supabase, and stored under our domain. When: set when you sign in. When you sign up, it is set as soon as you confirm your email address with the code we send you, so you do not have to sign in again; your password is not stored in your browser for this. Duration: up to 400 days; it is deleted when you sign out.
  • vf_ws (cookie). Purpose: remembers which workspace you are currently using, so that the application opens it again. When: set when you switch to another workspace or accept an invitation to a workspace. Duration: 12 months; it is deleted when you delete that workspace. If the workspace is no longer available to you, the application opens your personal workspace instead.
  • vf_legal_later (cookie). Purpose: remembers that you chose "Not now" in the notice about new versions of our Terms and policies, so that the notice does not reappear on every page until you close your browser. It contains only the names and versions of the documents shown. When: set when you select "Not now". Duration: until you close your browser, or until you accept the documents.
  • vf_consent (cookie). Purpose: remembers your cookie choices (whether you allowed analytics and marketing cookies, and when you made the choice), so that we do not ask you on every visit. If you are signed in, we also save your choice in your account. When: set when you make a choice in the cookie banner or in "Cookie settings". Duration: 12 months; after that we ask you again.
  • theme (local storage). Purpose: remembers whether you chose the light or the dark theme. When: set only if you use the theme switch. Duration: until you clear your browser data.

If you accept analytics cookies, we use Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The Google Analytics script sets the following cookies under our domain and sends the collected data to Google:

  • _ga. Purpose: distinguishes visitors by a random identifier, so that we can count how many people use the Services. Third party: Google. Duration: 2 years.
  • _ga_<ID> (currently _ga_EGZ3RQ6SM8). Purpose: keeps the state of your visit (session) for our Google Analytics property. Third party: Google. Duration: 2 years.

We have set up Google Analytics without Google signals and without advertising features. Before a page address is sent to Google, we remove access tokens, identifiers and query parameters (other than campaign tags). According to Google, Google Analytics 4 does not log or store IP addresses. Google may process the data outside the European Economic Area; our Privacy Policy explains how such transfers are protected and how long the data is kept. You can read how Google uses data at https://business.safety.google/privacy/.

If you withdraw your consent, we stop Google Analytics and delete the _ga cookies from your browser.

5. OTHER WEBSITES WE SEND YOU TO

When you buy credits, we send you to pages operated by our payment provider, Stripe (checkout.stripe.com). Stripe sets its own cookies there, for example to prevent fraud. These cookies are controlled by Stripe and described in Stripe's Cookie Policy: https://stripe.com/legal/cookies-policy. Stripe's pages are not loaded inside the Services, so Stripe does not set cookies on veyraflow.eu.

Links to other websites, for example in our emails or legal documents, lead to pages that follow their own cookie policies.

6. HOW YOU CAN MANAGE COOKIES

Cookie settings. You can accept or reject analytics cookies at any time with the "Cookie settings" link in the footer of our website and of the application, or in Settings under "Data & privacy". Withdrawing your consent is as easy as giving it, and it does not affect the lawfulness of the analytics carried out before the withdrawal.

Your browser. You can also decide how cookies and other storage may be used in your browser's settings: you can block all cookies or only some of them, and you can delete cookies and site data that are already stored. If you block or delete the necessary cookies, you will not be able to sign in, and some features of the Services may not work. Your browser's help pages explain how to do this, for example:

Google Analytics opt-out. Google offers a browser add-on that stops Google Analytics on all websites: https://tools.google.com/dlpage/gaoptout.

We update this Cookie Policy when we change the cookies or similar technologies that we use, or the companies involved. The "Last updated" date at the top shows when it was last changed. If a change requires your consent, for example a new analytics or marketing tool, we will ask for it before we use the new technology.

8. HOW TO CONTACT US

If you have questions about this Cookie Policy or about how we use cookies, contact us through our contact page, by email at janeknastaly50@gmail.com, or by post:

Jan Nastały (Veyraflow)

Złota 17

80-297 Banino

Poland

Your rights regarding personal data, including the right to lodge a complaint with a supervisory authority, are described in our Privacy Policy.