Cookie Policy.

1. Cookies and browser storage

Cookies are small files stored by your browser. VoxPoint also uses localStorage, sessionStorage, and IndexedDB to support sign-in, security, and product preferences. This policy explains necessary storage and the optional tracking used on public marketing pages.

2. Necessary and functional storage

These features support the service or preferences you request. Rejecting optional analytics and advertising does not disable them.

• Authentication: Supabase session data uses keys beginning with sb- in IndexedDB, with localStorage as a fallback. It keeps you signed in while your session is valid.
• Product preferences: Browser storage remembers theme, table size, drafts, and other product settings. A sidebar:state cookie remembers the sidebar layout for seven days. Other preferences remain until cleared or reset by the relevant feature.
• Privacy choices: vp_cookie_consent in localStorage stores your analytics and advertising choices, choice version, and time saved. We request a new choice after 180 days. Dismissing an older informational notice does not count as consent. If storage is blocked, choices apply only while this page remains open.
• Payment security: Stripe may use cookies such as __stripe_mid and __stripe_sid on payment surfaces for fraud prevention. Stripe controls their duration and handling under its own cookie and privacy policies.
• Security services: Hosting and security providers may use anti-bot storage, such as Cloudflare’s __cf_bm, when those protections are active. These are separate from advertising preferences.

3. Optional analytics and advertising

Google tracking is blocked until you enable optional analytics on a public marketing page. Advertising is a separate choice and also requires analytics because it uses the same Google tag. We do not load this marketing tag on authenticated application or customer-portal pages.

• Analytics: Google Analytics measures public page visits and actions such as contact form submissions. It may use _ga and _ga_* cookies, normally lasting up to two years unless cleared sooner. We omit query strings and fragments from the page addresses we send and do not send customer, invoice, or other business records.
• Advertising: If you enable it, Google may use identifiers, public browsing activity, and conversion events for ad measurement and personalized advertising. Google advertising cookies may include _gcl_* and have durations that depend on Google’s configuration. This activity may constitute sharing for cross-context behavioral advertising under California law.

Google’s Privacy Policy explains its processing. With advertising enabled, Meta Pixel measures public page visits and successful account creation. It may use _fbp and _fbc cookies, normally lasting up to 90 days. We retain validated campaign identifiers in vp_ad_attribution for up to 30 days in this browser. We do not send form contents, business records, email addresses or user IDs to Meta. Meta measurement is disabled on authenticated workspace and customer-portal pages. See Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/.

4. Your Privacy Choices and Global Privacy Control

Use Your Privacy Choices to accept, reject, or customize optional tracking. Reject and accept options are available in the cookie banner. You can reopen these settings from public-page footers without creating an account.

When your browser sends Global Privacy Control (GPC), we treat it as an opt-out of advertising sharing in that browser, even if you previously enabled advertising. You can still choose analytics independently. We apply this control without requiring proof of residence.

Withdrawing permission stops the marketing tag for the withdrawn purposes. We remove accessible first-party Google and Meta cookies for disabled categories. Your browser may retain third-party cookies that VoxPoint cannot delete; use browser settings or Google’s controls to manage those. Choices apply to the current browser and site origin, so use these controls on each device or browser you use.

5. Browser controls

You can also block or clear cookies and site storage in your browser’s privacy settings. Clearing authentication storage signs you out, and blocking payment or security storage may prevent those features from working. Clearing your privacy choice returns optional tracking to off until you make a new choice.

6. Policy changes

We update the date above when this policy changes. We will request a new choice when the purposes of optional tracking materially change. Continuing to browse or closing a dialog does not grant optional tracking consent.

7. Contact

For privacy requests, email cfarris@voxpoint.org or use our contact page. See the Privacy Policy for information about service providers, retention, and your rights.