Cookie Policy

Last updated: August 11, 2026

1. What Are Cookies?

Cookies are small text files placed on your device by a website. They are widely used to make websites work efficiently and to provide information to the site owner. We also use similar technologies such as browser local storage (described below).

2. How We Use Cookies and Similar Technologies

Velona uses cookies and local storage for the following purposes:

We do not use cookies for advertising, third-party tracking, or cross-site analytics.

We measure aggregate site usage (which pages are visited, roughly where visitors come from) using our own first-party system. It sets no cookies, stores no IP addresses, and creates no identifier that can follow you between days or across websites. Nothing is shared with any third party. See Section 6 for detail.

3. Specific Cookies and Storage Items We Use

Name Type Purpose Duration
access_token HTTP-only cookie Stores your session JWT for authenticated API requests. Set as httpOnly; SameSite=Lax; Secure, not accessible to JavaScript. Session (expires per JWT_EXPIRE_MINUTES setting, typically 7 days)
access_token (localStorage) Browser local storage Mirrors the JWT for email/password sessions so the JavaScript app layer can attach it as a Bearer header. OAuth sessions use the cookie only. Until logout or session revocation
user Browser local storage Caches basic profile information (name, email) to avoid repeated API calls on each page load. Until logout
theme Browser local storage Stores your UI theme preference (light or dark). Persistent (until manually cleared)

4. Essential Cookies, No Consent Required

All cookies and storage items used by Velona are strictly necessary for the Service to function. They are used exclusively for authentication, security, and basic user preferences. Under applicable law, strictly necessary cookies do not require your prior consent.

We do not use optional, analytics, marketing, or third-party tracking cookies. Our usage measurement (Section 6) is cookie-less by design, which is why no consent banner is required.

5. How to Control or Delete Cookies

You can control and/or delete cookies through your browser settings. Instructions for common browsers:

Please note that deleting authentication cookies or local storage will sign you out of Velona. Restricting cookies entirely may prevent the Service from functioning correctly.

6. How We Measure Site Usage

We run our own first-party analytics rather than using Google Analytics or any other third-party service. When you load a page, your browser sends us the page path, the referring site (domain only), your screen width, and any campaign parameters in the link you followed.

Specifically, we do not:

Because this collects no personal data and sets no cookies, it does not require your consent. If you prefer to send nothing at all, any content blocker or a browser with JavaScript disabled will prevent it, and Velona will work exactly as normal.

7. Changes to This Cookie Policy

We may update this Cookie Policy from time to time as our practices change. Updated versions will be posted on this page with a revised "Last Updated" date.

8. Contact

If you have questions about our use of cookies, please contact our Grievance Officer or reach out through the support channels on the Velona website.