Cookie Policy

Last updated: 2026-06-22

VitaPulse uses a small number of cookies. One is strictly necessary to operate the service. The others are only activated after you give explicit consent.

1. What Are Cookies?

Cookies are small text files that a website stores on your browser or device. They allow the site to remember information between page loads, such as your authentication status. Some cookies are set by the site you visit; others are set by third-party services embedded on the page.

2. Cookies We Use

Essential Cookies

Session cookie (e-xode.vitapulse.sid): an HttpOnly, SameSite=Lax cookie that keeps you authenticated while you use VitaPulse. It expires after 7 days or when you sign out, whichever comes first. In production, it is transmitted over HTTPS only (Secure flag). This cookie is strictly necessary for the service to function and is exempt from consent requirements under Article 5(3) of the ePrivacy Directive.

Analytics & Advertising Cookies

Google Analytics 4 (GA4) is loaded via Google Tag Manager. VitaPulse implements Google Consent Mode v2: by default, all measurement and advertising signals are set to denied (analytics_storage, ad_storage, ad_user_data, ad_personalization). No GA4 cookie is placed until you click Accept in the consent banner. After consent, Google may set cookies named _ga and _ga_<measurement-id> to measure traffic and usage patterns. These cookies have a retention of up to 2 years on Google's side. You can withdraw consent at any time via the Manage cookies link in the footer.

Consent & Preference Storage

Consent cookie (vp_consent): a first-party cookie that records your consent choice (value: granted or denied). It is SameSite=Lax, Secure on HTTPS, and expires after 180 days. It contains no personal data and is not used for tracking. Language preference: your chosen interface language (English, French, Spanish, German, or Italian) is stored in your browser's localStorage, not as a cookie. This data never leaves your browser and is not sent to our servers.

3. Consent and How to Control It

On your first visit, a consent banner asks whether you accept analytics and advertising cookies. Both buttons, Accept and Decline, are displayed with equal prominence. Default is denied. No measurement or advertising cookie is set before you act. Your choice is stored in the vp_consent cookie for 180 days so the banner does not reappear on subsequent visits. You can change or withdraw your consent at any time by clicking Manage cookies in the footer, which reopens the banner. You can also block or delete cookies through your browser settings. Blocking the session cookie (e-xode.vitapulse.sid) will prevent you from signing in.

4. Third-Party Cookies

VitaPulse does not set any third-party cookies on its own domain. Stripe, our payment processor, may set cookies on its own domain (stripe.com) during the checkout flow. Those cookies are governed by Stripe's cookie policy, not ours. No Stripe cookie is set on the VitaPulse domain.

5. Questions?

If you have questions about our use of cookies, contact us at vitapulse@e-xode.net.