Cookie Policy

1. What cookies are

Cookies are small text files, stored in your browser, that help the platform work correctly or remember your preferences between visits.

2. Strictly necessary cookies

These cookies enable essential functions — authentication, the shopping cart, and checkout — and cannot be disabled, being exempt from the consent requirement (Art. 4^1 para. (5) of Law 506/2004). We use these:

• cookie_consent — remembers your choice regarding non-essential cookies, so we don't show the banner on every visit. Valid for 1 year.
• sb-<project-ref>-auth-token (Supabase) — keeps your authentication session active while you're signed in. Only set after you sign in.
• __stripe_mid and __stripe_sid (Stripe) — fraud prevention during checkout. Only set on the checkout page, valid for roughly 1 year and 30 minutes respectively.

3. Non-essential cookies, subject to consent

We do not use marketing, advertising, or traffic-analysis cookies. To debug technical errors, we automatically monitor errors in the app, through a strictly necessary cookie, without collecting personal data in this process.

With your explicit consent from the cookie banner, we may additionally enable an anonymized visual session recording (Sentry Session Replay) when an error occurs, to help us better understand what happened. This only runs while you're browsing and only if you've accepted non-essential cookies; sensitive fields (passwords, card details) are masked automatically.

4. Third-party cookies

The only cookies set by a third party are Stripe's, listed in Section 2, used exclusively for payment fraud prevention. We do not use cookies from advertising networks, social media platforms, or third-party traffic-analysis tools.

5. What happens if you decline non-essential cookies

You can browse, order, and pay normally without accepting non-essential cookies — they do not condition the basic operation of the Platform. The only effect of declining is disabling the anonymized visual session recording described in Section 3.

6. How to control cookies from your browser

In addition to the choice in our banner, you can manage or delete cookies directly from your browser settings. Blocking strictly necessary cookies from your browser may prevent authentication, the cart, or checkout from working correctly.

7. How to give or withdraw your consent

Your choice is requested on your first visit, through the banner shown on the platform, and can be changed at any time from the cookie settings link in the page footer.

8. Updating this policy

If we introduce a new cookie or change the purpose of an existing one, we update this policy and, where applicable, ask for your consent again for the non-essential categories.

9. Contact

For questions about this policy, you can write to us at contact@vestho.ro.