Cookie Policy
Last updated / effective: 1 August 2026
This Cookie Policy explains how Victory Extraction uses cookies and similar device-storage technologies (local storage, session storage, IndexedDB, and the Cache API). Read it together with our Privacy Policy.
1. What these technologies are
Cookies and local storage are small pieces of data stored by your browser. We use them to keep you signed in, to run core features, and to understand traffic at an aggregate level.
We currently use only strictly necessary storage plus a privacy-friendly, cookieless analytics tool. Because we do not use advertising or cross-site tracking cookies, we do not show a cookie consent banner; we show a short notice instead. If we ever add non-essential tracking, we will ask for your consent first.
2. What we use
Strictly necessary cookies
| Name | Purpose | Lifetime |
|---|---|---|
authToken | Keeps you signed in (HttpOnly authentication token) | Up to 7 days |
ve_reg | Securely links a registration to your browser during sign-up | Up to 24 hours |
oauthBootstrap | Briefly hands your basic sign-in result (id, first name, email, plan) to the app right after Google/Apple sign-in | ~2 minutes |
google_oauth_state / apple_oauth_state | Anti-forgery (CSRF) protection during Google/Apple sign-in | A few minutes (sign-in only) |
adminStepup | Short-lived elevated-access token required for administrator actions | Short-lived (administrators only) |
Local / session storage and on-device storage (functional)
| Item | Purpose |
|---|---|
Registration draft (registerDraftV2) | Remembers your sign-up progress so you don't lose it |
| Basic user info | Keeps the interface responsive after sign-in |
| Admin status / time-zone sync flags | Short-lived UI helpers (session storage) |
| IndexedDB (dashboard snapshot) | Enables offline access to your current day |
| Cache storage (video pack) | Stores downloaded chapters for offline viewing |
Analytics (cookieless)
| Tool | Purpose | Cookies? |
|---|---|---|
| Vercel Web Analytics | Aggregate, anonymous traffic measurement | No cookies; no cross-site tracking; no personal profiles |
3. Legal basis
- Strictly necessary cookies and functional storage are used to provide the Service you request (performance of a contract / our legitimate interest in a working, secure product), and do not require consent under the ePrivacy rules.
- The analytics tool is cookieless and processes only aggregate, non-identifying data.
4. Managing cookies
You can delete or block cookies and clear local storage in your browser settings. Note that blocking strictly necessary cookies will break sign-in and core features. Clearing offline storage will remove downloaded chapters and offline data.
5. Third parties
Some third parties may set their own cookies when you use their features, under their own policies — for example Stripe during checkout (fraud prevention) and Google/Apple during social sign-in. See the Sub-processors list.
6. Changes
If we introduce non-essential cookies (for example analytics or marketing that use cookies), we will update this policy and request your consent through a consent banner before they load.
Questions: info@victoryextraction.com.