Cookie Policy

This policy covers cookies, local storage, and similar technologies on vavusai.com and app.vavusai.com. Our mobile and desktop apps do not use browser cookies, but they do store local preferences on your device and use device identifiers such as push notification tokens to deliver notifications you have turned on.

Strictly necessary. Security, sign-in and session handling, language routing, and your consent record. These run without consent because the site cannot work without them, and they cannot be switched off in our panel.

Functional. Remembers preferences such as interface language, theme, and whether you have already dismissed a promotional message. Optional.

With your permission, Vavus and Google Analytics measure visits, public pages, country, device category and referral sources to improve this website. Vavus uses random browser and session identifiers to count consented visits and returning browsers. Our team may receive a private notification for the start of a consented visit. We do not send form contents, URL query strings or precise location in these visitor records, and we do not use this integration for advertising.

For visits identified as being from the United Kingdom, anonymous Vavus page totals may run after a visible notice, with an immediate opt-out. These totals use no visitor or session identifier and no Google tag. Other or unknown locations require opt-in for optional statistics. Country is estimated from the request IP transiently; Vavus visitor analytics do not retain the IP. Location is an estimate, and does not determine every privacy right you may have.

Advertising pixels are not enabled by the public website’s current cookie controls. Optional first-party referral attribution is part of the analytics choice described above.

A necessary preference cookie (sv_privacy on ShopVavus or vb_privacy on Vavus Space), or vavus_cookie_consent in local storage on Vavus AI, remembers a choice valid for 180 days. Expired local-storage choices are discarded when you next visit. Only after analytics opt-in, vavus_site_visitor remembers a random browser identifier for up to 90 days, and vavus_website_session in session storage groups activity until 30 minutes of inactivity or the tab closes. Google Analytics uses _ga and _ga_* cookies, configured for up to 90 days. Vavus AI may also save consented referral attribution in vavus_first_touch for up to 90 days.

Vavus keeps detailed website sessions, events and related visitor-notification records on its server for 30 days, and anonymous website totals for 13 months. Notifications already delivered to your phone follow its notification settings. Browser identifiers expire after at most 90 days and privacy choices are valid for 180 days. Google Analytics processes consented measurements separately under its privacy and data-processing terms, including network information it receives directly. Its event and user retention follows the relevant property settings; aggregate Google reports and existing report history may be retained longer. These Vavus retention periods do not describe Google report retention.

• vavus_marketing_locale - cookie - strictly necessary - remembers the language you chose so pages load in it - 12 months.
• vavus-concierge-visitor - browser local storage - strictly necessary - a random identifier the support agent uses to recognize the same browser across conversations and to block abuse - until you clear browser data.
• vavus-concierge-src - browser session storage - analytics - the page you were on when you opened the support agent, so we can see which pages raise questions - until you close the tab.
• vc_src - legacy optional campaign cookie - no longer enabled by the public website’s current cookie controls, and removed when optional analytics are rejected.

Stripe may set its own cookies during checkout to process the payment and detect fraud. Our support chat is self-hosted on our own infrastructure and may store a conversation token so a reply reaches the right conversation. Embedded video may set cookies, and only on the pages where the embed appears.

Google Analytics receives measurements only after your analytics opt-in. Google processes them under its own privacy and data-processing terms and may process information outside your country. Advertising features and Google Signals are disabled for this website integration. We do not sell visitor information or share it for targeted advertising.

Accepting optional analytics is not a condition of browsing or sending an inquiry. Reject is available alongside Accept. Use Cookie settings in the footer to change your choice at any time. Rejecting stops future optional analytics and clears the website analytics identifiers in your browser. Global Privacy Control and Do Not Track override optional analytics. Withdrawal does not erase previously lawful records immediately; they remain subject to retention and applicable deletion rights. Anonymous combined totals cannot be separated into your individual activity.

We honor the Global Privacy Control and other recognized opt-out preference signals sent by your browser, treating them as an opt-out of the analytics and marketing categories.

You can also block or delete cookies in your browser. Blocking strictly necessary cookies will break sign-in and account features. Clearing browser data resets your saved choices.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we never give translation, message, document, or audio content to advertising networks.

Detailed website analytics, Google Analytics and optional browser identifiers rely on consent. UK anonymous first-party statistics rely on the narrow statistical-purposes exception, with notice and a free opt-out, and contain no visitor identifier. Necessary preference storage remembers a choice you request. Security and abuse prevention are separate from optional analytics.

We update this policy when our use of cookies and similar storage changes. The Last updated line shows the current version.