Cookie policy
Last updated 20 October 2026.
We use as little browser storage as possible and no tracking of any kind, so there is no cookie banner.
Strictly necessary
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
vit_rt | API | Keeps you signed in (refresh token, httpOnly, secure) | 30 days, renewed on use |
| CSRF token | API | Protects sign-in and account changes from cross-site requests | Session |
Local storage
| Key | Purpose | Lifetime |
|---|---|---|
vit.next | Remembers which page to return to after you sign in from an email link | 15 minutes |
What we do not use
No analytics cookies, no advertising cookies, no third-party embeds that set cookies. Page counts are cookieless and kept on our own servers.
Your short-lived sign-in token (access token) is kept in the page's memory only and disappears when you close the tab.