Cookie Policy

Last Updated: 28 May 2026

How we use cookies and similar technologies.

1. Summary

ValentProof uses three categories of cookies:

  • Strictly necessary — auth + bot protection. Always on; the service can't run without them. Exempt from consent under EU ePrivacy rules.
  • Analytics (opt-in) — Google Analytics 4. Helps us see which pages help founders and which fall flat. Aggregate stats only.
  • Marketing (opt-in) — Meta (Facebook / Instagram) Pixel + Conversions API. Lets us measure whether ad campaigns reach the right people. Off by default — the consent banner asks before anything loads.

You can change your choices any time via Cookie preferences in the footer. This policy should be read together with our Privacy Policy.

2. What cookies are

Cookies are small text files stored on your device when you visit a website. They let a site remember things like whether you're logged in or whether a request came from a real browser. Similar technologies — including local storage and session storage — may be used for equivalent purposes.

3. Cookies we currently set

All cookies listed below are strictly necessary for ValentProof to function or to keep your account secure. Under the EU ePrivacy Directive and GDPR, these cookies don't require consent because they're essential for delivering the service you requested.

Authentication (Supabase)

| Name | Set by | Purpose | Duration | |---|---|---|---| | sb-access-token | Supabase | Keeps you logged in across page loads | Session | | sb-refresh-token | Supabase | Renews your session without forcing you to log in again | ~30 days |

Supabase (supabase.com) is our authentication provider. These cookies are only set after you sign up or log in.

Bot and abuse protection (Cloudflare Turnstile)

| Name | Set by | Purpose | Duration | |---|---|---|---| | cf_* (various) | Cloudflare Turnstile | Distinguishes real visitors from automated bots on the sign-up, log-in, and password-reset forms | Up to 30 minutes |

Cloudflare Turnstile is a privacy-focused CAPTCHA alternative. It only runs on our authentication pages. Cloudflare's privacy policy describes what data they process.

Analytics (Google Analytics 4)

Only set when you grant Analytics consent.

| Name | Set by | Purpose | Duration | |---|---|---|---| | _ga | Google Analytics | Distinguishes anonymous users for aggregate page-view analytics | 2 years | | _ga_<container-id> | Google Analytics | Maintains session state inside a single GA4 property | 2 years |

Data goes to Google LLC (and may be processed in the US under the EU-US Data Privacy Framework). Google's privacy policy describes what they do with it. We have IP anonymisation enabled by default.

Marketing (Meta Pixel)

Only set when you grant Marketing consent.

| Name | Set by | Purpose | Duration | |---|---|---|---| | _fbp | Meta Pixel | First-party Facebook browser identifier — links website actions to ad campaigns | 90 days | | _fbc | Meta Pixel | Stores the Facebook click identifier when you arrive from a Meta ad | 90 days |

Data goes to Meta Platforms Ireland Limited (the EU data controller for users in the EEA). Meta's cookie policy describes their full cookie set.

4. What we don't use

For full transparency, ValentProof does not use any of the following:

  • Heatmap or session-replay tools (no Hotjar, no FullStory, no Microsoft Clarity)
  • Cross-site advertising networks beyond Meta (no LinkedIn Insight Tag, no TikTok Pixel, no Google Ads tags)
  • Email-tracking pixels in transactional email
  • Behaviour profiling beyond what GA4 and Meta Pixel do natively

If we ever add anything else, this page gets updated and the consent banner gets a new category.

5. Changing your mind

You can revisit your consent choice at any time via the Cookie preferences link in the footer. Revoking marketing or analytics stops new cookies from being set on the next page load; cookies already on your device stay until they expire or you clear them manually (see the next section).

6. Managing cookies in your browser

You can block, view, or delete cookies through your browser settings. Helpful links:

If you block the strictly-necessary cookies listed above, login / sign-up will stop working — that's the trade-off of disabling cookies the service genuinely needs.

7. Changes to this policy

If we change what cookies we use — particularly if we add any non-essential category — this page will be updated and the "Last updated" date at the top will change. Material changes that require consent will also re-prompt the consent banner the next time you visit.

8. Contact

Questions about this policy or how we use cookies?

MT Studio, s.r.o. Kuzmányho 5, 040 01 Košice — mestská časť Staré Mesto, Slovak Republic IČO: 53585208 DIČ: 2121417782 Email: support@valentproof.com