Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the site owner about how the site is being used.

In addition to traditional cookies, we may also use similar technologies such as web beacons (transparent pixel images used to track email opens and page visits), local storage (a browser-side storage mechanism), and session tokens (server-side session identifiers stored in cookies). This policy covers all such technologies collectively referred to as "cookies."

Verifox (verifox.ai) uses the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They cannot be disabled without breaking core functionality. They include session authentication tokens, CSRF protection tokens, and cookies that remember your consent preferences.

• vfx_session: Authentication session token. Expires at session end or 30 days (if "remember me" is selected).
• vfx_csrf: Cross-site request forgery protection. Expires at session end.
• vfx_consent: Stores your cookie consent choice. Expires after 12 months.

Analytics Cookies

We use analytics cookies to understand how users interact with the platform so we can improve it. These cookies collect aggregated, anonymised data and do not identify you personally.

• Provider: PostHog (self-hosted on EU infrastructure). Data stays within the EU.
• Data collected: Pages visited, features used, session duration, click paths, error events.
• Retention: 12 months.

Preference Cookies

These cookies remember your settings and preferences to personalise your experience, such as your preferred dashboard layout, notification settings, or API key visibility preferences.

What We Do NOT Use

We do not use third-party advertising cookies, behavioural tracking pixels from ad networks (such as Google Ads, Meta Pixel, or LinkedIn Insight Tag), or any cookies for cross-site tracking purposes.

Under the EU ePrivacy Directive and applicable national implementations (such as the UK PECR and the German TTDSG), we rely on the following legal bases:

• Strictly necessary cookies: No consent required — these are necessary to deliver the service you have requested.
• Analytics and preference cookies: Your consent, obtained via our cookie banner when you first visit our website. You may withdraw consent at any time.

Under GDPR Article 6(1)(a), consent must be freely given, specific, informed, and unambiguous. Our cookie banner is designed to meet these requirements — we do not use pre-ticked boxes or make consent conditional on using the service.

You have several options for controlling cookies:

Cookie Consent Banner

When you first visit verifox.ai, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of any page.

Browser Settings

You can configure your browser to refuse, delete, or notify you when cookies are placed. Note that disabling strictly necessary cookies will prevent you from logging in. Browser-specific guidance:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Preferences > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data

Opt-Out Tools

For analytics, you may opt out of PostHog tracking by declining analytics cookies in our cookie banner. An anonymised "do not track" mode is applied when you opt out, meaning your session is still counted but not associated with your account.

Our website embeds certain third-party components that may set their own cookies:

• Stripe: Our payment processor sets cookies during checkout to prevent fraud and remember your payment method. Stripe's cookie policy governs those cookies.
• Intercom: If you interact with our support chat widget, Intercom sets cookies to manage the conversation session. These are analytics/functional in nature.

We do not have control over third-party cookies, but we only embed third-party components that have contractually committed to privacy-compliant practices. We update this list when we add or remove third-party integrations.

We may update this Cookie Policy when we change the cookies we use or when the law requires it. When we make material changes, we will reset your cookie consent preference so that you are presented with the updated choices on your next visit.

For questions about our cookie practices, contact [email protected].