Cookie Policy

1. What Are Cookies?

Cookies are small text files that a website stores on your device when you visit. They are widely used to make websites work correctly, remember your preferences, and provide usage information to site owners.

We also use similar technologies including local storage and session storage — browser-side key/value stores that function like persistent cookies but are never sent to a server in HTTP headers. Where this policy refers to “cookies” it covers all of these mechanisms unless stated otherwise.

The vPlan AR mobile app does not use browser cookies. On iOS, Apple’s App Tracking Transparency (ATT) framework governs any cross-app tracking. In-app analytics and crash reporting are controlled by the opt-in toggles in Settings → Privacy.

2. Essential Cookies

Essential cookies are strictly necessary for the website to function. They cannot be disabled without breaking core functionality such as authentication and security. No consent is required for these cookies under applicable law.

• Authentication session — A Supabase-issued token that keeps you logged in across page loads. Without it, you would need to sign in on every page.
• CSRF token — A cryptographic token attached to each form submission to prevent cross-site request forgery attacks. Expires at the end of your session.
• Cookie consent record — Stores the choices you make in our cookie preference centre so we do not prompt you on every visit.

3. Analytics Cookies

With your consent, we use analytics cookies to understand how visitors use the website — which pages are viewed, how long sessions last, and where users navigate from. This data is used only in aggregated form to improve the product and is never used to identify you personally.

Our analytics provider is Google Analytics 4 (operated by Google LLC). Analytics cookies are opt-in only — they are not set until you accept analytics cookies in our consent banner or in Settings → Privacy → Analytics on the web app.

• Analytics cookies set by this provider are identified in the cookie table below.
• They do not track you across other websites.
• IP addresses are anonymised by Google Analytics 4 (IP anonymisation is enabled by default).

4. Preference Cookies

Preference cookies remember choices you make so we can personalise your experience. They are not required for the site to function but improve usability. Examples include your measurement unit preference (imperial vs. metric) and your last-used export format.

These cookies are set only for authenticated users and are scoped to the vPlan AR domain. Disabling them means your preferences will reset on each visit.

5. Third-Party Cookies

Some cookies on vplan.ai are set by third-party services that we use to operate the platform. These providers may have their own cookie and privacy policies.

Supabase

Supabase provides our authentication infrastructure. When you sign in, Supabase sets a session cookie (sb-[project-ref]-auth-token) in your browser. This cookie is essential and cannot be disabled. See the Supabase Privacy Policy for details.

Google Analytics 4

We use Google Analytics 4, operated by Google LLC, to measure website usage. Google Analytics sets _ga and _ga_[ID] cookies to count sessions and measure interactions. IP addresses are anonymised before processing. Data is processed in the United States under Google’s standard contractual clauses. See the Google Privacy Policy for details. These cookies are only set with your consent.

No Advertising Cookies

We do not use advertising networks, retargeting pixels, or social media tracking cookies. No third-party advertiser places cookies on our website.

Full Cookie Inventory

The table below lists the cookies currently set by vplan.ai.

6. Managing Your Cookie Preferences

Consent Banner

On your first visit to vplan.ai we display a cookie consent banner. You can accept all cookies, accept only essential cookies, or customise your preferences. Your choice is stored in the vplan_cookie_consent cookie for one year.

Web App Settings

Once signed in, you can update your analytics and crash-reporting preferences at any time under Settings → Privacy. Changes take effect immediately and are applied across all devices linked to your account.

Browser Controls

All major browsers allow you to view, block, and delete cookies through their built-in settings. Blocking essential cookies will prevent you from signing in to the web app. Instructions for common browsers:

• Chrome — Settings → Privacy and security → Cookies and other site data.
• Firefox — Settings → Privacy & Security → Enhanced Tracking Protection.
• Safari — Preferences → Privacy → Manage Website Data.
• Edge — Settings → Cookies and site permissions → Manage and delete cookies.

Opt-Out Tools

If you wish to opt out of analytics tracking across websites that use our analytics provider, you may use:

• Google Analytics Opt-out Browser Add-on — prevents Google Analytics from collecting data about your visits.
• Alternatively, adjust your cookie preferences using the consent banner on your first visit or in Settings → Privacy on the web app.

7. Do Not Track

Some browsers transmit a “Do Not Track” (DNT) signal to websites. There is currently no industry-wide standard for how websites should respond to DNT signals. At present, we do not alter the Service’s data collection practices in response to DNT signals. You can use our cookie consent banner or the opt-out tools described above to limit analytics collection.

For users who prefer stronger privacy controls, we recommend adjusting your cookie preferences in our consent banner or disabling optional cookies in Settings → Privacy.

8. Contact

If you have questions about this Cookie Policy or wish to exercise your rights regarding cookies and tracking technologies, please contact our privacy team:

We aim to respond to all cookie-related enquiries within 5 business days.