Legal
Cookie Policy
Last updated: 29 October 2026
What this covers
Cookies are small records a website saves in your browser. Browser storage (“local storage”) does the same job without being sent to the server on each request. This page lists every one Vaario sets and why. It is part of the privacy policy.
What we set
| Name | What it holds and why | Kept for |
|---|---|---|
| sb-…-auth-token (cookie) | Your sign-in session, so you stay signed in. Strictly necessary. | Until you sign out or the session ends |
| NEXT_LOCALE (cookie) | The language you chose, so the next page opens in it. | 1 year |
| Local storage: vaario:*, sbs-*, selectedCaseId, release-notes-seen | Your display choices (theme, motion, sidebar width and layout), the case you last opened, which release notes you have seen, how long recent comparisons took (numbers only), and a link from each uploaded file's name, size and date to its comparison, so the same files open it again without a new upload. | Until you clear your browser's site data |
| Local storage, vaario_guest_* keys | On a shared link only: the name you gave as a guest, when you accepted the guest notice, and which comments are yours so you can edit them. | Until you clear your browser's site data |
Each of these is either strictly necessary to provide the service you asked for, or remembers a choice you made. Neither kind needs your consent, so Vaario shows no cookie banner.
What we do not use
Vaario does not use advertising or marketing cookies, does not track you across other websites, and does not share information with advertising networks. It does not run product analytics today.
Providers in the path
The sign-in session is handled by Supabase and the app itself; the language cookie is ours. Our website and API pass through Cloudflare and Vercel (see the sub-processors page). When we checked on 29 October 2026, neither the public pages nor the API set a cookie of their own; if a provider starts to, it is added to the table above. The sign-in page also loads Cloudflare's bot check (Turnstile) from challenges.cloudflare.com, which looks at your IP address and browser signals to tell a person from a script; it set no cookie when we checked. Payments are not switched on, so no payment provider sets anything.
Controlling them
You can delete cookies and local storage in your browser's settings (Chrome, Safari, Firefox). If you block the sign-in session, Vaario cannot tell who you are and you will not be able to sign in. Clearing the other entries only resets your display choices.
Questions
Write to privacy@vaario.app.