Cookie Policy

Last updated: May 20, 2026

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. They allow websites to remember information about your visit, such as your login state and preferences. Virlo also uses related technologies such as local storage, session storage, and pixel tags — this policy covers all of them collectively.

We use these technologies to make Virlo work reliably, to understand how the product is used, and to improve your experience.

2. Essential Cookies

These cookies are required for the platform to function. Without them, core features such as logging in and navigating your workspace will not work. They include:

  • Authentication cookies — Keep you logged in across sessions so you don't need to sign in every time. Set by Supabase Auth.
  • Session cookies — Maintain your workspace state while you're actively using the platform.
  • Security cookies — Provide CSRF protection and help detect and prevent malicious activity.
  • Workspace cookies — Remember which workspace you're currently using if you belong to more than one.

Essential cookies cannot be disabled without breaking core platform functionality, and we set them on a legitimate-interest basis.

3. Analytics Cookies

We use PostHog as our product analytics provider to understand how users interact with Virlo — which features are used most, where friction occurs, and how we can improve the product. Analytics cookies are only set after you accept analytics via our consent banner (where applicable).

Our analytics do not track you across other websites and do not include personally identifiable information by default. We do not sell analytics data to third parties.

4. Preference Cookies

Preference cookies remember your settings so you don’t have to reconfigure them on each visit. This includes things like your theme (light/dark), dashboard layout, display preferences, and any other customizations you’ve made within the platform.

5. Third-Party Cookies

Some pages and features rely on third-party providers that may set their own cookies, subject to their respective privacy policies:

  • Stripe — sets cookies on billing-related pages for payment security and fraud prevention.
  • PostHog — sets analytics cookies (only after consent in EEA/UK).
  • Vercel — may set cookies for hosting analytics and edge routing.
  • YouTube, Instagram, TikTok — if a page embeds content from these platforms, their cookies may be set when you interact with the embed.

We do not use advertising or cross-site tracking cookies from third-party ad networks. We do not serve targeted ads based on your behavior on Virlo.

6. Consent (EEA, UK, Switzerland)

If you visit Virlo from the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before setting non-essential cookies via a consent banner shown on your first visit. You can grant or refuse consent per category (analytics, preferences) and change your choice at any time by clicking “Cookie preferences” in the footer.

If you visit Virlo from other regions, non-essential cookies may be set on a legitimate-interest basis, subject to applicable law. You can still opt out via your browser settings or by emailing info@virlo.ai.

7. Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view all cookies stored on your device, delete individual cookies or all cookies, and block cookies from specific or all websites.

Please note that disabling essential cookies will impact platform functionality. You may not be able to log in or use core features if essential cookies are blocked.

Virlo honors Global Privacy Control (GPC) signals where required by law and treats them as a valid opt-out request for analytics and similar processing.

8. Cookie Duration

Session cookies — expire automatically when you close your browser.

Persistent cookies (authentication, preferences) — typically expire after 30 to 90 days, depending on the cookie type. Long-lived authentication cookies may persist up to 1 year if you select “Keep me signed in.”

9. Related Policies

For full details on how we handle personal data, see our Privacy Policy. For platform-wide rules of conduct, see our Acceptable Use Policy.

10. Contact

If you have questions about this Cookie Policy or how we use cookies on Virlo, please contact us at info@virlo.ai.