1.The short version
2.What these technologies are
Cookies are small text files a website can place in your browser. Local storage and session storage do a similar job inside the browser without being sent to the server with every request. Local storage stays until it is cleared; session storage disappears when you close the tab.
3.What VPV stores
| Name | Type | Purpose | Duration |
|---|---|---|---|
sb-* | Local storage — strictly necessary | Keeps you signed in (authentication session from our sign-in provider, Supabase). | Until you sign out or the session expires; inactive accounts are signed out after 15 days. |
vpv_device_fp | Local storage — strictly necessary | A random ID so your own device is recognised and does not count as a new device on every reload (device-limit security). | Until cleared. |
ft-session-id | Session storage — functional | Groups the scenes you view into one visit for the tour owner’s analytics. | Until the tab closes. |
tour-pw-* | Session storage — strictly necessary | Remembers that you entered the correct password for a protected tour, so it does not ask on every scene. | Until the tab closes. |
factour_viewer_email | Local storage — functional | Remembers the e-mail you entered to open a gated tour link. | Until cleared. |
factour:lang | Local storage — functional | Remembers your chosen display language. | Until cleared. |
factour:offline:* | Local storage and browser cache — functional | Lets a presenter who prepared a tour for offline use run it without a connection, and queues analytics until the connection returns. | Until the presenter removes the offline copy. |
vpv:notif:*, factour:hotspotStyle:* | Local storage — functional | Remembers which notifications you have seen and your tour-builder style preferences. | Until cleared. |
4.Third-party content
Some content on a page can come from another company, which may set its own cookies under its own policy:
- YouTube — if a tour includes an embedded video, YouTube (Google) may set cookies when you load or play it.
- Google Fonts — fonts may be fetched from Google’s servers, which receive your IP address.
- Razorpay — when you pay, Razorpay’s checkout runs on its own domain and sets the cookies it needs to secure the payment.
5.Your choices
Because we use only storage that is necessary or that you would expect (staying signed in, remembering a language), there is no marketing consent banner. You can clear VPV’s stored data at any time from your browser settings (“Clear site data”). Signing out removes the session; clearing everything will sign you out and reset the settings above.
You can also block cookies in your browser, which stops embedded third-party content from setting them. VPV itself will keep working.
6.Changes and contact
If we add a new type of storage, we update this page first. Questions: privacy@myvpv.com. See also the Privacy Policy.