Cookie policy
Necessary cookies run accounts and security. Google Analytics remains blocked until you choose to allow it.
Effective and last updated 13 July 2026. This version describes Veillo’s current service and production requirements. Product guidance is not legal advice.
1. Scope
This policy covers cookies and similar browser storage used on the Veillo website and application. A cookie is a small text record associated with a website. Some cookies disappear when the browser closes; persistent cookies remain until they expire or you remove them.
2. Necessary cookies
| Name | Purpose | Typical lifetime |
|---|---|---|
veillo_cookie_consent | Stores the policy version, timestamp, and analytics choice. It does not contain an advertising identifier. | 180 days |
better-auth.session_token or a secure-prefixed variant | Authenticates the signed-in account. HTTP-only in production. | Up to 30 days |
veillo_org | Remembers which authorised organisation workspace is active. HTTP-only. | Up to 1 year |
veillo_google_oauth_state | Protects the optional Google Workspace connection flow against cross-site request forgery. HTTP-only. | 10 minutes |
| Authentication verification and OAuth state cookies | Complete sign-in, password reset, email verification, or social-login flows securely. Names can vary by the authentication provider and secure-cookie prefix. | Session or short-lived |
These cookies are required to deliver a service you request or protect it. Blocking them can stop sign-in, workspace selection, or security checks from working.
3. Analytics cookies
After consent, Google Analytics 4 can set these first-party cookies:
| Name | Purpose | Configured lifetime |
|---|---|---|
_ga | Distinguishes one browser from another for analytics. | About 13 months |
_ga_<measurement-id> | Maintains Google Analytics session state. | About 13 months |
The Google script is not requested before consent. We use Basic Consent Mode, so declining sends no analytics ping to Google. Advertising storage, ad-user-data, ad personalisation, and Google Signals remain disabled. The cookie expiry is configured not to renew on each visit. Browser limits may shorten it.
4. Your controls
to accept, reject, or withdraw analytics consent in this browser. Withdrawal disables further analytics collection and removes readable _ga cookies. You can also remove cookies through browser settings. Your choice applies to this browser and domain, so another browser or device asks separately.
5. Legal basis
Necessary cookies rely on the exemption for storage needed to provide a requested service and on our legitimate interests in service security. Analytics cookies and the related data processing rely on consent. Refusing analytics does not reduce product functionality.
6. Changes and contact
A material change to analytics use increments the stored policy version and asks for a new choice.
Veillo is an Arbos Techne product, operated by Arbos Folk, a sole proprietorship registered in Denmark. You can reach us at hello@veillo.eu.
Questions can be sent to hello@veillo.eu.