CURRENT RELEASE: This version applies to orders offered for delivery in Ukraine. Translations and references to other markets do not mean that sales are open there.
1.PURPOSE
This Policy explains the small technical files and similar technologies that VitaTale may use in a user's browser.
It is intended to apply consistently in Bulgaria, Romania, Greece, Poland and Ukraine, subject to mandatory local law.
2.CORE PRINCIPLE
VitaTale uses the minimum amount of browser storage reasonably necessary.
We do not add optional advertising, analytics or tracking merely because it is technically possible.
3.STRICTLY NECESSARY TECHNOLOGIES
Certain technologies are needed for:
- secure login;
- maintaining a session;
- protection against abuse;
- providing a function specifically requested by the user;
- operation of private areas of the service.
Where a technology is objectively necessary to provide a requested service, separate consent may not be required to the extent permitted by applicable law.
4.VITATALE SESSION COOKIE
Technical name: vitatale_session
Purpose: maintaining a secure authenticated session.
Duration: up to 30 days or until the session is ended earlier.
Characteristics:
- first-party;
- HTTP-only;
- SameSite=Lax;
- Secure in production;
- not intended for advertising.
5.AFFILIATE ATTRIBUTION COOKIE
When a user follows a valid affiliate link, VitaTale may remember the affiliate code for a limited period in order to:
- preserve an applicable affiliate discount;
- validate the code during ordering;
- attribute the initial order correctly.
Current period: up to 30 days.
Technical name: vitatale_partner_ref
VitaTale uses this functional technology only to preserve a valid affiliate code and a user-requested discount. It is separate from optional product analytics and does not store interview or book content.
6.FUNCTIONAL TECHNOLOGIES
VitaTale may use additional functional technologies where genuinely needed to remember a user choice.
Each such technology must be included in the production inventory with:
- name;
- purpose;
- provider;
- duration;
- consent classification.
7.ANALYTICS
If VitaTale adds optional analytics in the future, those technologies must not be activated before the applicable consent requirements have been satisfied.
Before analytics is introduced:
- this Policy must be updated;
- the provider must be identified;
- the purposes must be documented;
- retention must be documented;
- international transfers must be reviewed;
- refusal and withdrawal controls must be configured.
8.ADVERTISING TECHNOLOGIES
Technologies used for:
- personalised advertising;
- remarketing;
- cross-site tracking;
- advertising profiling
must not be activated without the consent required by applicable law.
9.INFORMATION THAT SHOULD NOT BE STORED IN ORDINARY COOKIES
VitaTale should not store in ordinary browser cookies:
- full interview text;
- book chapters;
- photographs;
- full card numbers;
- card security codes;
- API keys;
- passwords;
- sensitive family information;
- private storage keys.
10.CONSENT INTERFACE
If optional technologies are used, the consent interface should:
- explain purposes clearly;
- avoid pre-selected consent;
- allow acceptance;
- allow refusal;
- allow category-level settings;
- allow the user to change the decision later.
Refusing optional technologies should not be intentionally more difficult than accepting them.
11.WITHDRAWING CONSENT
Where processing is based on consent, the user may withdraw that consent.
Settings location: /cookies#cookie-settings
Withdrawal stops future optional use of the relevant technology.
12.IF ONLY STRICTLY NECESSARY TECHNOLOGIES ARE USED
If a production browser audit confirms that only strictly necessary technologies are used, VitaTale should not show a misleading consent banner merely for appearance.
Information about those necessary technologies should still be available.
13.THIRD-PARTY EMBEDS
Before adding:
- payment forms;
- maps;
- videos;
- chats;
- bot-protection systems;
- external widgets
VitaTale should verify whether the provider places cookies or reads information from the device before user interaction.
14.PRODUCTION INVENTORY
The browser technologies currently used in production are listed below.
Name: vitatale_session Provider: VitaTale Purpose: authenticated session Duration: up to 30 days Category: strictly necessary
Name: vitatale_partner_ref Provider: VitaTale Purpose: affiliate continuity and discount Duration: up to 30 days Category: functional affiliate continuity and a user-requested discount; separate from optional product analytics
15.BROWSER CONTROLS
Users may delete or restrict cookies through their browser settings.
Deleting vitatale_session may sign the user out or require renewed authentication.
16.CHANGES
If VitaTale introduces a new browser technology, provider or purpose, this Policy should be updated before the new use begins.
17.CONTACT
Privacy questions: hello@vitatale.app