Cookie Policy

Cookies are small files stored by a website or service in your browser. Browser local storage and session storage are related device-storage mechanisms. This policy explains the purposes for which Virtual Buyers Agent and the services it uses may store or read that data. Provider-controlled names, contents and expiry periods can vary by provider configuration, SDK version and browser, so the table on this page describes verified categories rather than claiming an exhaustive list of provider keys.

Necessary services support sign-in, security, requested product features and payment flows and are not switched off by the optional-data control. For a known country outside the EEA, United Kingdom and Switzerland, product analytics and advertising measurement are both on by default until you opt out. For detected EEA, UK and Swiss users, and when the country cannot be determined, both categories stay off until you choose them. Each category is saved as a separate choice, so turning one off never changes the other, and an enabled Global Privacy Control signal keeps advertising measurement off regardless of the regional default. The product remains usable when you reject optional categories. Use the persistent “Privacy choices” control to review or change the decision saved on this device.

When Product analytics is enabled, VBA uses PostHog and Google Analytics 4 to understand page and feature use and improve the service. PostHog may also support session replay and redacted technical diagnostics. Analytics events must not include raw property-evidence text. Turning Product analytics off prevents further optional client analytics capture from the refreshed page; it does not claim to erase information a provider received before the change. Limited server-generated operational and transactional events are a separate processing path and do not read this device record.

Advertising measurement uses Meta and is separate from product analytics. Google Analytics 4 also receives your Advertising measurement choice as a consent signal covering advertising storage and advertising use of your data. Ad personalisation is always declined on your behalf and Google Signals stays switched off, so allowing the category does not produce personalised advertising through Google. It follows the regional default described in clause 2, and each category is saved separately, so a Product analytics choice never changes Advertising measurement. When allowed, VBA may load the Meta pixel to measure whether an advertising visit led to a sign-up, and a checkout may carry Meta browser/click identifiers, request IP address and browser user agent so a resulting subscription can be matched to the advertising visit; it does not add your name, email address or phone number to that attribution metadata.

Supabase authentication storage keeps a signed-in session working. Stripe may use cookies or similar technology for fraud prevention and payment processing when you start a checkout. Blocking or clearing necessary site data may sign you out, remove an unfinished draft, or prevent a requested payment flow from working.

Use “Privacy choices” in VBA to change optional analytics and advertising measurement. You can also inspect, block or clear cookies and site data in your browser settings. Clearing site data removes the VBA privacy-choice record and other browser-held state, after which VBA applies the regional default again until you make another choice. A saved choice is device-specific and is not currently described as an account-wide preference.

The services named in this policy operate under their own privacy and storage terms. Their technology may use identifiers or storage names that change independently of VBA. The links below provide the providers’ current privacy information.

VBA treats an enabled Global Privacy Control (GPC) browser signal as an advertising opt-out, so advertising measurement remains off—including checkout attribution—even if an older saved device choice allowed it. Do Not Track (DNT) does not currently create an additional setting beyond the controls described in this policy.

We may update this policy when our product, providers or legal obligations change. The “Last Updated” date identifies the latest operative revision.

This implementation-aligned disclosure is scheduled for review by Australian legal counsel and is not a claim that one control satisfies every law in every location. Where applicable law provides stronger rights or requires different handling, those obligations continue to apply.