Cookie Policy
This page describes the main categories of cookies and browser storage used by VINC. Optional analytics from Google, Vercel, and our own usage tracking runs only if you opt in on the cookie notice or below. Account, payment, security, and requested referral processing are separate from optional analytics.
Strictly necessary
These make sign-in work. The service cannot function without them, so they don't require consent under the EU ePrivacy rules — but you can always clear them in your browser (you'll be signed out).
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
sb-*-auth-token | Supabase Auth (first-party) | Keeps you signed in to your account (session & refresh tokens). | Session / until sign-out |
Browser storage
Local and session storage hold preferences, authentication, drafts, and, with your analytics permission, usage identifiers and attribution. Some values are sent to us to provide the relevant service:
vincc-cookie-ack— remembers that you dismissed the cookie notice.vincc-error-monitoring-optout— remembers the opt-out below.vincc-analytics-consent— remembers whether you allowed or declined optional analytics.vincc-consent-pending— briefly holds your sign-up consent receipt during a Google sign-in redirect; it is sent to your account after sign-in, then removed from this temporary storage.- Studio working state (drafts, sound takes, UI preferences) under
vincc-*keys. vinc_anon_idandvinc_session_id— random browser/session identifiers for opted-in usage analytics. Events can be associated with your signed-in account.vinc_utm_firstandvinc_utm_last— campaign parameters and attribution stored for up to 30 days with analytics permission, and sent to us for signup attribution.vinc:referral-code— a referral code from a link you followed, used to apply the referral offer after signup.
Error monitoring (opt-out)
We use Sentry to tell us when the app crashes. Reports are redacted before they leave your browser (media URLs and identifying payloads are stripped), and we deliberately do not use session replay — nothing records your screen. You can turn browser error monitoring off here; the choice takes effect the next time a page loads.
Analytics (opt-in)
If — and only if — you allow it, we use Google Analytics to understand how many people visit and which parts of the site get used. It sets Google's _ga / _ga_* cookies and sends usage data to Google. Cookie lifetimes depend on the tag configuration; you can remove stored cookies in your browser. We use it for aggregate product statistics, not advertising. If you never make a choice, analytics stays off. You can change your mind any time:
The same permission controls Vercel Web Analytics and our first-party page views, feature events, interaction heatmaps, and campaign attribution. Heatmaps aggregate pointer positions and scroll depth; they do not record your screen. Turning analytics off stops future browser analytics collection and discards queued first-party events. It does not recall requests already sent or automatically delete past records. Account, billing, and security records still operate.
What we don't do
- No advertising or retargeting cookies.
- No optional browser analytics without your opt-in, and no Meta pixel or similar ad trackers — ever.
- No sale of personal information or sharing for cross-context behavioral advertising.
- Optional browser analytics never runs unless you opted in, so Do-Not-Track / Global Privacy Control visitors who haven't opted in are already untracked — we honor the spirit of both signals by default.
Questions? Write to support@vinc.ai — and see the Privacy Policy for everything else about your data.