1. What cookies are
Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as browser local storage. They let the service remember your session, keep you signed in securely, and remember preferences. Some are strictly necessary; others are optional and only set with your consent.
You can change your choice at any time — use the control (also linked in the footer) to re-open the settings panel.
2. Cookies and services we use
The table below itemises each category and the services it loads. Strictly-necessary items are always on; functional and analytics load only after you consent. Error reporting is strictly necessary — it is how we find out the service is broken — but it uses no advertising identifiers and records no sessions. Measuring performance is analytics, and waits for your opt-in like everything else in that category.
Strictly necessary (always on)
Required to run the core service — signing you in, keeping the session secure, and processing payments. These are set on every visit and do not require consent.
| Service | Provider / region | Purpose | Cookies | Retention |
|---|---|---|---|---|
| Session & Security | Veritome (Relay Labs Ltd)EU · Nuremberg | Keeps you signed in, holds multi-factor-authentication state, protects forms against cross-site request forgery (CSRF), and stores your cookie choice. | better-auth.session_token, better-auth.session_data, mfa_pass, aicomply_cc | Session – 180 days |
| Stripe | Stripe Payments Europe, Ltd.EU · Dublin (US SCCs) | Processes subscription payments and helps detect fraud during checkout. Loaded only on billing pages. | __stripe_mid, __stripe_sid | 30 minutes – 1 year |
| Google Sign-In | Google Ireland Ltd.EU (US SCCs) | Authenticates you when you choose to sign in with Google. Only engaged if you use that sign-in option. | Google account cookies (set on google.com) | Managed by Google |
| Sentry — error reporting | Functional Software, Inc.EU · ingest.de.sentry.io | Reports crashes and faults so we can detect and fix a broken service. Necessary to keep the platform working and secure. No advertising identifiers, no session recording, and reports are relayed through our own domain. Sentry's separate performance tracing is opt-in and listed under Analytics. | Local storage (diagnostic context only) | Session |
Functional (optional, consent-based)
Remember choices you make to give you a better experience — such as interface density, your language, and banners you have dismissed. Set only where you use the relevant feature.
| Service | Provider / region | Purpose | Cookies | Retention |
|---|---|---|---|---|
| Interface preferences | Veritome (Relay Labs Ltd)EU · Nuremberg | Stores UI preferences (density, chosen language, dismissed notices) in your browser so the app remembers them between visits. | Local storage keys (first-party) | Until you clear them |
Analytics (optional, consent-based)
Aggregated, privacy-respecting usage measurement that helps us understand how the product is used and improve it. Loaded only after you grant consent. Never used to build advertising profiles.
| Service | Provider / region | Purpose | Cookies | Retention |
|---|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd.EU (US SCCs) | Aggregated marketing-site usage measurement. We use Google Consent Mode v2 — the _ga cookies are written only after you grant analytics consent. | _ga, _ga_* | Up to 2 years |
| PostHog | PostHog, Inc.EU · eu.i.posthog.com | Loaded only after you opt in. Product analytics — which features are used, so we can prioritise improvements. EU-hosted. | ph_* (first-party) | Up to 1 year |
| Sentry — performance tracing | Functional Software, Inc.EU · ingest.de.sentry.io | Loaded only after you opt in. Measures how long pages and requests take, so we can find what is slow. Error reporting is separate and listed under strictly necessary. | Local storage / no advertising cookies | Session |
We do not use cookies for third-party advertising and never sell personal data. Cookie We do not use cookies for third-party advertising and never sell personal data. The processors above are also listed on our Sub-processors page. The processors above are also listed on our Sub-processors page.
3. Managing cookies
You can manage optional cookies at any time through the control, and through your browser settings, which let you block or delete cookies. Blocking strictly-necessary cookies will stop parts of the service from working — for example, you may not be able to stay signed in.
4. Changes
We may update this policy as the service changes. Material changes will be notified in line with the Privacy Policy.
5. Contact
Veritome by Relay Labs Ltd.
Email: info@veritome.eu
Dublin, Ireland
See also our Legal Notice and Privacy Policy.