Valifiy Cookie and Similar Technologies Policy
Version: 1.0
Effective date: 19 October 2026
1. Scope
This Policy explains how Valifiy LLC uses cookies, browser storage, authentication tokens, software-development-kit storage and similar technologies on the Valifiy website (valifiy.com) and application (app.valifiy.com). It should be read together with the Valifiy Privacy Policy.
2. Current operating position
Valifiy uses technologies necessary to provide account authentication, security, session continuity, checkout, access/package administration, consent records and essential product functionality. Valifiy also uses Google Analytics 4 to understand how visitors and users interact with the website and application, measure performance and improve the Service.
Valifiy uses Google Analytics 4 on the website. The application is configured to use the same GA4 configuration and consent choice when its analytics release is enabled, so Google Analytics may recognize the same browser across both hosts after consent. Analytics loads only after the user makes an analytics consent choice. Valifiy uses Google Analytics only for analytics and does not use it for advertising.
Where prior consent is required by applicable law, Google Analytics is treated as non-essential. The current analytics provider is identified in the Valifiy Vendor and Subprocessor List.
3. Technologies used
The table below identifies the main cookies and similar technologies used on the Valifiy website and application by their browser- or device-level identifier, purpose and storage duration. It does not contain secret keys, authentication tokens, stored values or data relating to individual users. Providers associated with third-party technologies and their data-processing roles are identified in the Valifiy Vendor and Subprocessor List.
| Browser/device identifier | Type and domain | Purpose | Duration / storage |
|---|---|---|---|
valifiy-cookie-consent-v1 | First-party cookie; Domain valifiy.com | Stores the user's consent choices for necessary and analytics technologies, the record version and the time of the choice. Shared by the website and application. | 365 days |
valifiy-theme | First-party cookie; Domain valifiy.com | Remembers the light or dark appearance selected in the app so the legal pages use the same theme. | 1 year |
| Application preferences, including theme, welcome state and AI-disclaimer acknowledgement | First-party browser local storage; app.valifiy.com | Remembers interface preferences and whether required in-product notices were acknowledged. | Until cleared by the user or browser |
| Firebase authentication storage | First-party browser IndexedDB; app.valifiy.com | Keeps a signed-in user authenticated and stores authentication state. | Until sign-out, token revocation or browser storage is cleared |
WordPress administrator cookies, including wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_*, wp-settings-* and wp-settings-time-* | First-party cookies; valifiy.com | Support administrator login, session management and administrator settings. They are not part of the public visitor login or registration flow. | Session or configured administrator login lifetime |
_ga | First-party cookie; Domain valifiy.com | Distinguishes browsers for Google Analytics 4 measurement on the website and, when analytics is enabled, the application. | Up to 2 years under the current GA4 configuration, subject to browser limits; set only after analytics consent |
_ga_<container-id> | First-party cookie; Domain valifiy.com | Maintains Google Analytics 4 session state for the configured web stream. | Up to 2 years under the current GA4 configuration, subject to browser limits; set only after analytics consent |
The website and application also request fonts from Google Fonts. That request does not set cookies, but it sends the visitor's IP address, user-agent and referrer to Google. This is described in the Valifiy Privacy Policy and the Valifiy Vendor and Subprocessor List.
4. Non-essential technologies
Valifiy uses the non-essential analytics technologies described in section 3 only in accordance with the user's consent choice where prior consent is required. In those cases, Google Analytics is not loaded and analytics cookies are not set before the required affirmative choice. Valifiy provides granular choices and enables withdrawal of consent as easily as consent was given. On withdrawal, Valifiy stops loading Google Analytics and clears Google Analytics cookies visible to the host. A request already sent before withdrawal cannot be recalled.
5. Managing technologies
Users may manage non-essential technologies through the cookie-preference control and browser settings. Blocking strictly necessary technologies may prevent login, checkout or other core functionality.
Users can change or withdraw their choices at any time by selecting Cookie settings in the website or application footer.
6. Changes
Valifiy may update this Policy when technologies, providers, legal requirements or product behavior change. The current version and effective date will be displayed on the website.
Contact: privacy@valifiy.com