Cookie Policy

Last updated:

Cookies and browser storage

Cookies travel with requests; localStorage stays in your browser until cleared. The table below lists storage set directly by this code, including the consent preference added with this policy. Necessary storage supports requested features. Analytics and marketing are optional and off until you choose.

First-party inventory

vestail_profile — cookie; necessary; declared country and buyer type; 365 days, cleared on sign-out. vestail_early_access — cookie; necessary; signed invitation authorization; 24 hours, cleared when signup completes. vestail-theme — localStorage; necessary preference; light/dark/auto appearance; no automatic expiry, until cleared. vestail-consent-v1 — localStorage; necessary; version, optional category choices and saved time; choice valid for 180 days, then requested again; the key remains until overwritten or cleared.

Sign-in provider storage

Privy manages authentication storage when its provider loads. Confirmed SDK localStorage names include privy:token, privy:refresh_token, privy:id_token, privy:pat, privy:connections, privy:caid, privy:code_verifier, privy:state_code, privy:headless_oauth and privy:oauth_disable_signup. Their purpose is sign-in, session continuity, connected wallets and OAuth; they are necessary when using those features. Lifetimes are SDK-managed, not fixed by Vestail. privy:__session_storage__test is a transient capability check removed immediately. SDK and wallet-provider storage varies by login path; this is not a claim that every visitor receives every key.

Optional categories

No first-party analytics or marketing cookies or localStorage keys were found in the inspected version. There are no configured analytics or marketing scripts to enable today. Operational server-side records are described in Privacy. Future optional scripts must use the consent gate; accepting a category does not itself contact an analytics provider.

Changing your choice

Accept all enables optional categories. Reject non-essential leaves them off. Settings lets you choose separately; necessary is always on. Use Cookie settings in the footer to reopen settings and withdraw consent. If storage is unavailable we keep the choice for this page only and ask again on a later load. Your browser can also clear storage. Contact hello@vestail.fun.

Confirmed storage inventory — all entries below are necessary
NameStoragePurposeCategoryDuration
vestail_profileCookieDeclared country and buyer typeNecessary365 days; cleared on sign-out
vestail_early_accessCookieInvitation authorizationNecessary24 hours; removed on completion
vestail-themelocalStorageAppearance preferenceNecessaryUntil cleared
vestail-consent-v1localStorageConsent categories and saved timeNecessary180-day choice; key until replaced or cleared
privy:tokenSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:refresh_tokenSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:id_tokenSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:patSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:connectionsSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:caidSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:code_verifierSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:state_codeSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:headless_oauthSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:oauth_disable_signupSDK localStoragePrivy authentication / wallet sessionNecessarySDK-managed; varies by sign-in flow
privy:__session_storage__testSDK localStorageStorage capability checkNecessaryImmediately removed