Skip to content
vindicis

Cookies and local storage

Last updated: 2026-10-20

Draft text. Placeholders in [brackets] must be completed and the whole document reviewed by a qualified lawyer before launch.

Short version

VINDICIS only uses strictly necessary cookies. We do not use analytics, advertising or tracking cookies, so no consent banner is needed.

Cookies we set

  • Session cookie (__Host-vindicis_session): keeps you signed in. HttpOnly, Secure, SameSite=Strict, valid for 30 days or until you sign out. Set only after you sign in.
  • Language cookie (lang): remembers English or Italian after you switch language. SameSite=Lax, valid for one year.

Local storage

During sign-up the page keeps the email address in your browser’s session storage so the verification step can prefill it. It is removed when you finish or close the tab. We never store tokens or passwords in the browser.

The GDPR kit does not keep your details in the browser: your requester profile is saved encrypted in your account (an older version that remembered details on this device removes them when you open the kit). Ticks on an action plan stay in local storage on this device only, and you can remove them at any time. The connection check stores nothing.

Third parties

Pages on this site load nothing from third parties: fonts and scripts are served by us. If you pay, you are sent to the Lemon Squeezy checkout, which has its own cookie policy.