COOKIE POLICY
Last updated: 29 October 2026
This policy lists the cookies and similar technologies used on https://vetty.app and on Vetty Pro, the practice portal at https://pro.vetty.app, and explains how you choose which ones we may use. It completes our Privacy Policy at https://vetty.app/privacy-policy, which explains how we handle personal data generally.
This policy is written in English, and the English text governs. We publish translations into other languages; each is for convenience only.
1. WHO WE ARE
1.1 These sites are operated by Brahim Ouasti EI, trading as Inumbra Labs, an individual entrepreneur (entrepreneur individuel) registered in France, SIREN 538 543 034, which operates Vetty ('Vetty', 'we', 'us' or 'our'). Our address and registration details are in our legal notice at https://vetty.app/legal-notice. Questions about this policy go to privacy@vetty.app.
1.2 Because we are established in France, Article 82 of the French Data Protection Act (loi Informatique et Libertés), which implements Article 5(3) of the EU ePrivacy Directive, applies to every visitor wherever they are. We follow it as the French data-protection authority, the CNIL, applies it: anything that is not strictly necessary waits for your consent, refusing is as easy as accepting, and you can change your choice at any time.
1.3 Vetty Scribe, at https://vettyscribe.com, uses strictly necessary cookies only and shows no banner. Its "Cookie settings" dialog and its privacy notice at https://vettyscribe.com/privacy describe them.
2. WHAT THESE TECHNOLOGIES ARE
2.1 A 'cookie' is a small text file a website stores in your browser. 'Local storage' and 'session storage' are areas of your browser where a website keeps information in the same way; session storage is emptied when you close the tab. In this policy 'cookies' covers all three.
2.2 A 'first-party' cookie is stored under the address of the site you are visiting (vetty.app or pro.vetty.app), even when a provider's script sets it. A 'third-party' cookie is stored under another company's address. None of the cookies listed in this policy is a third-party cookie.
2.3 We sort cookies into three categories:
- 'Strictly necessary': needed to provide the service you ask for, to keep it secure, or to remember your cookie choice. The law does not require consent for them.
- 'Preferences': remember a setting you chose, such as your country or the layout of a screen. They are set only when you choose the setting, and they are exempt from consent for the same reason.
- 'Analytics': measure how the sites are used. They are used only if you consent.
3. HOW CONSENT WORKS
3.1 The banner. On your first visit to vetty.app or to Vetty Pro, a banner asks whether we may use analytics cookies. It offers three buttons of equal prominence: "Accept all", "Reject all" and "Customize". Until you choose, no analytics script is loaded and nothing is stored for analytics. A refusal is remembered just as an acceptance is.
3.2 One choice per site. vetty.app and pro.vetty.app each ask separately, and a choice on one does not apply to the other.
3.3 How long a choice lasts. Your choice is valid for 180 days. After that the banner asks again.
3.4 Changing or withdrawing your choice. You can change your choice at any time:
- from "Cookie settings" in the footer of the public pages of vetty.app and of Vetty Pro's landing and sign-up pages;
- when signed in to vetty.app, from Account, then Privacy and data;
- when signed in to Vetty Pro, from Account, then Preferences.
Withdrawing consent is as easy as giving it. When you turn analytics off, we delete the analytics cookies listed in section 6 and reload the page, so the analytics script stops at once. Withdrawal does not affect what was measured before it.
3.5 If our consent server is unavailable. Your choice still applies at once, from your own browser. Your browser sends the record of your choice to our server again on later visits, for up to 7 days.
4. STRICTLY NECESSARY COOKIES
All are first-party.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-<project>-auth-token (sometimes split into .0, .1) | Vetty, through Supabase Auth | Keeps you signed in | Up to 400 days; deleted when you sign out |
sb-<project>-auth-token-code-verifier | Vetty, through Supabase Auth | Completes a sign-in with Google or with an email link | Until the sign-in completes |
sb-host-scoped | Vetty | Records that an older sign-in cookie shared between our sites has been removed from this site | 400 days |
vetty_practice_links | Vetty | Remembers a Practice's own booking link you opened (up to five), so that a booking made through it is treated as a booking through that Practice's link and not through the Marketplace: it is not limited to your country, and the Practice owes us no new-client fee on it | 30 days |
c15t, c15t-vendors, c15t-epoch (cookies and local storage) | Vetty, through the c15t consent tool | Remember your cookie choice and the random identifier of its record (section 9) | 180 days |
__stripe_mid | Stripe, set by Stripe's payment script | Fraud prevention for card payments, on the vetty.app booking payment page only | 1 year |
__stripe_sid | Stripe, set by Stripe's payment script | Fraud prevention for card payments, on the vetty.app booking payment page only | 30 minutes |
payload-token | Vetty, through the Payload content system | Signs a Vetty staff member into the blog editor; never set for visitors | Until the browser session ends |
5. PREFERENCES
All are first-party and set only when you use the setting.
| Name | Site | Purpose | Duration |
|---|---|---|---|
vetty-country (cookie) | vetty.app | The country you picked on the site, which chooses the Practices shown to you while you are signed out | 1 year |
sidebar_state (cookie) | vetty.app and Vetty Pro, when signed in | Whether the side menu is open | 7 days |
calendar-settings (local storage) | Vetty Pro, when signed in | Your calendar view settings | Until you clear your browser storage |
vetty:setup-checklist-collapsed:<practice> (local storage) | Vetty Pro, when signed in | Whether you folded the setup checklist | Until you clear your browser storage |
vetty:browser-notif-prompt-dismissed (local storage) | Vetty Pro, when signed in | That you dismissed the prompt about browser notifications | Until you clear your browser storage |
vetty:invite-hash-handled (session storage) | Vetty Pro | Stops an invitation link from being processed twice | Until you close the tab |
If you allow browser notifications for Vetty Pro, your browser stores that permission itself. You can withdraw it in your browser's site settings.
6. ANALYTICS COOKIES (ONLY WITH YOUR CONSENT)
6.1 Our analytics provider is PostHog, on its EU Cloud in Frankfurt, Germany. Its script is not requested from PostHog until you allow analytics. It then records the pages you view and leave, errors in the page and the steps of the onboarding flow, under a random identifier that is not linked to your account. Session replay is switched off: we do not record your screen or what you type. If you refuse, PostHog is not loaded and measures nothing, not even without cookies.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ph_<project key>_posthog (cookie and local storage) | PostHog, set by its script (first-party) | Random identifier of your browser and session for analytics | 1 year |
ph_* (session storage) | PostHog (first-party) | Tracks the session and the browser tab | Until you close the tab |
__ph_opt_in_out_<project key> (cookie or local storage) | PostHog (first-party) | PostHog's own record that you allowed analytics | Up to 1 year |
6.2 The analytics cookie is kept on the site where you allowed it: a cookie set on vetty.app is not shared with pro.vetty.app.
7. WHAT WE DO NOT USE
We use no advertising or marketing cookies, no advertising pixels, no tag managers, no chat widgets and no embedded social-media content, and we do not share cookie data with advertisers.
8. CONNECTIONS TO OTHER SERVICES WITHOUT COOKIES
8.1 Some features make your browser connect to another company's servers. Our code sets no cookie for them, but each receives your IP address, as any website you load does:
- LiveKit, for the video call;
- Stripe, for payment;
- Supabase, our database and file storage;
- Google Maps, on Vetty Pro, only when a practice searches for its address;
- Mapbox, for the map images on practice pages;
- Unsplash, for the background images on the sign-in pages.
8.2 Two kinds of processing happen whatever your cookie choice, without any cookie or anything stored on your device: our servers send PostHog records of key service events and errors, and your browser sends PostHog a report when a page breaks one of our browser security rules. Section 4.5 of our Privacy Policy describes both and their legal basis.
9. RECORDS OF YOUR CHOICE
9.1 To be able to show that we asked for and respected your choice, we keep a record of it on our own database, in Frankfurt, Germany, as well as in your browser.
9.2 Each record holds: a random identifier created by your browser and kept in its c15t cookie, which is not linked to your account; the site where you made the choice; your choice for each category and whether you clicked "Accept all", "Reject all" or saved a custom choice; when you made it and when it expires; the version of the banner and its language; and whether you used the banner or the settings dialog. It holds neither your IP address nor your browser's user agent. On its own the record does not identify you: it can be linked to you only through the cookie in your browser.
9.3 We keep each record for 5 years after the choice expires, so that we can answer a complaint or an inquiry within the limitation period for claims, and then delete it automatically.
10. MANAGING COOKIES IN YOUR BROWSER
You can also block or delete cookies in your browser's settings. If you block strictly necessary cookies, you will not be able to sign in or book. We do not respond to "Do Not Track" signals, because no standard for them has been agreed; your choice in our banner applies instead.
11. CHANGES TO THIS POLICY
We update this policy when we add, remove or change a cookie. The date at the top shows when the current version was published. If we want to use a new kind of optional cookie, we will ask for your consent first.
12. CONTACT
Brahim Ouasti EI, trading as Inumbra Labs
Privacy contact: Brahim Ouasti, privacy@vetty.app
Support: support@vetty.app