Cookie Policy
Last updated: 2026-08-12Version 1.0
This policy is being finalised. We are completing our cookie audit as the application goes live, and will publish the confirmed list here before it is needed. Entries marked as pending are not yet verified.
This policy explains how Voiceora uses cookies and similar technologies. It supplements our Privacy Policy.
1. What these technologies are
Cookies are small files stored on your device by a website. We also use local storage and session storage, which work similarly. Where this policy says "cookies", it means all of these.
2. The rules we follow
Under UK law — the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025 — we need your consent before storing or reading information on your device, unless it falls into a limited set of exceptions. Since 5 February 2026 those exceptions include certain low-risk uses such as first-party statistical analytics and remembering your display preferences.
Where an exception applies we do not ask for consent, but we still tell you about it here, and you can still object.
3. Cookies we use without consent
3.1 Strictly necessary
Required for the service to work. Without them you could not log in or pay.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
sb-<project>-auth-token (pending audit) | Supabase (first party) | Keeps you signed in | (pending audit) |
__stripe_mid | Stripe | Fraud prevention on payments | 1 year |
__stripe_sid | Stripe | Fraud prevention on payments | 30 minutes |
| (pending audit) | Voiceora | Security | Session |
| (pending audit) | Voiceora | Remembers your cookie choices | 6 months |
3.2 Preferences
Remembers how the site is set up for you. Exempt from consent under the DUAA appearance-and-function exception.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
vo-theme | Voiceora (local storage) | Remembers whether you chose light or dark mode | Until you clear it |
vo-sidebar-collapsed | Voiceora (local storage) | Remembers whether you collapsed the sidebar | Until you clear it |
3.3 First-party statistical analytics
Used only to produce aggregate statistics about how the service is used, so we can improve it. Not used for advertising, not shared for advertising, not used to build a profile of you. This is what the DUAA statistical exception permits — and we do not go beyond it.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| None — Vercel Web Analytics and Speed Insights are cookieless | Vercel (first party) | Aggregate page, usage and performance statistics. No identifier is stored on your device | Not applicable |
Important limit. This exception is purpose-limited. The moment analytics data is used for advertising, cross-site tracking, or shared with an ad platform, the exception falls away and consent is required. If you add a Meta pixel, Google Ads tag, or similar, it goes in section 4 — not here.
4. Cookies we only use with your consent
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| [NONE AT LAUNCH — VERIFY] |
We do not currently use advertising or cross-site tracking cookies. If that changes we will update this policy and ask for your consent first.
5. Performance and error monitoring
We use Vercel Speed Insights to measure how quickly pages load and respond for real users, so we can find and fix slow pages. It is cookieless and sets nothing on your device.
We use Sentry to detect and diagnose faults. Sentry processes your browser and device information and technical detail about any error you encounter. We have disabled IP address storage, and server-side data scrubbing is enabled. Whether the Sentry browser library stores anything on your device is part of the audit we are still completing; we will update this policy when it is.
6. Your choices
Do we ask for your consent? Not at present. Everything described above is either strictly necessary for the service to work, or falls within the exceptions for preference and first-party statistical use, so no consent banner is shown.
If our audit identifies anything that does require consent, or if we later add a technology that does, we will introduce a consent banner and ask you before it is used. Rejecting will be exactly as easy as accepting, and you will be able to change your mind at any time.
Your browser. You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop you signing in or paying.
Objecting to exempt cookies. Even where the law does not require consent, you can object. Email support@voiceora.io.
7. Changes
We will update this policy when our use of cookies changes, and will ask for fresh consent where the law requires it.
8. Contact
support@voiceora.io · GravitonForge Technologies Ltd, 12 Primrose Gardens, Auckley, Doncaster, England, DN9 3RR