Cookie Notice
Last updated: October 17, 2026
This Cookie Notice explains how Veribl (“we”, “us”) uses cookies and similar technologies on our website at veribl.com, in the Veribl dashboard at app.veribl.com, and on the product pages we run for brands at go.veribl.com and on brands’ custom domains. It should be read together with our Privacy Policy.
In short
- We only use cookies that are strictly necessary until you say otherwise.
- Analytics load only if you click “Accept all” or switch analytics on in the cookie settings.
- We do not use advertising or marketing cookies.
- You can change your choice at any time with the “Your Privacy Choices” link at the bottom of every page.
1. What cookies and similar technologies are
Cookies are small text files a website stores in your browser. They let a site remember things such as whether you are signed in. Session cookies are deleted when you close your browser; persistent cookies stay until they expire or you delete them. First-party cookies are set by the site you are visiting; third-party cookies are set by another service, such as an analytics provider.
Similar technologies work in comparable ways. We use local storage (a small store of data in your browser) and, with your consent, session recording scripts that capture clicks, scrolls and mouse movements on a page so we can see where people get stuck. Form inputs are masked in recordings, so we do not see what you type. In this notice, “cookies” covers all of these.
2. Categories we use
2.1 Strictly necessary
These are needed for the site and the Services to work: remembering your cookie choice, keeping you signed in, protecting forms and balancing traffic. They do not require consent under EU law, and they are always on. Blocking them in your browser may break parts of the site.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cookie_consent | Veribl (local storage, veribl.com) | Remembers whether you accepted or rejected analytics, so we don't ask again on every page. | Until you clear it or change your choice |
| next-auth.session-token (or __Secure- prefixed) | Veribl (app.veribl.com) | Keeps you signed in to the dashboard. | Up to 30 days, or until you sign out |
| next-auth.csrf-token (or __Host- prefixed) | Veribl (app.veribl.com) | Protects sign-in and forms against cross-site request forgery. | Session |
| next-auth.callback-url (or __Secure- prefixed) | Veribl (app.veribl.com) | Returns you to the right page after signing in. | Session |
| vb_i | Veribl (go.veribl.com and brand custom domains) | Load balancing: keeps your browser on the same server copy during an update, so pages load consistently. | 1 hour |
2.2 Analytics (only with your consent)
These help us understand how people use our website, which pages are useful and where the journey from our website into the Veribl dashboard can be improved. They are not loaded and do not collect anything until you accept analytics in the cookie banner. If you reject them, or never make a choice, they stay off.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<ID> | Google Analytics 4 (Google) | Counts visits and shows which pages and campaigns people use, using a pseudonymous ID. | Up to 2 years |
| ph_<project>_posthog (cookie and local storage) | PostHog (EU cloud) | Website analytics: page views, clicks, scroll depth and session recordings with form inputs masked. | Up to 1 year |
| _clck, _clsk, CLID, MUID | Microsoft Clarity (Microsoft) | Heatmaps and session recordings that show how visitors use pages. Sensitive inputs are masked. | From 1 day (_clsk) up to 1 year |
The providers’ own privacy information: Google, PostHog, Microsoft. Where these providers process data outside the EEA, the safeguards in Section 6 of our Privacy Policy apply.
2.3 Marketing
We do not currently use marketing or advertising cookies, and we do not use cookies to track you across other websites. The “Marketing” switch in the cookie settings is there so that, if we ever add such cookies, they will stay off unless you turn them on. We will update this notice before adding any.
3. The Veribl dashboard
When you sign in to app.veribl.com, we use the strictly necessary cookies listed above. We also use PostHog (EU cloud) to understand how features in the dashboard are used, as described in our Privacy Policy.
4. Brand product pages
Product pages that consumers reach by scanning a QR code, at go.veribl.com or on a brand’s own domain, use only strictly necessary cookies (such as vb_i for load balancing) unless the brand has enabled something else, in which case the brand is responsible for asking for any consent needed. See the Privacy Notice for Product Pages.
5. Your choices
5.1 Our cookie banner
When you first visit veribl.com, you can choose Accept all, Reject, or open the settings to switch individual categories on or off. Rejecting is as easy as accepting. To change your mind later, click Your Privacy Choices at the bottom of any page and make a new choice. If you withdraw consent, analytics stop loading from then on; to remove cookies already set, clear them in your browser.
5.2 Browser controls
Most browsers let you see, block and delete cookies and local storage, either for all sites or for specific ones. Look for “Cookies and site data” or “Privacy” in your browser settings. If you block strictly necessary cookies, signing in and some features may not work.
5.3 Global Privacy Control
We do not sell personal data or share it for cross-context behavioral advertising, so there is nothing to opt out of. Analytics on our website already require your opt-in.
6. Changes
We update this notice when the cookies we use change, and change the “Last updated” date above. If we add a new category that needs consent, we will ask you again.
7. Contact
Questions about cookies or this notice: [email protected].