What changed in this version (v1.2)
Our typefaces are now served from Vela's own site. The previous version said “every page loads our typeface from Google Fonts, which sets no cookies but does mean Google receives the request”; that is no longer so.
v1.1 (21 September 2026)
This version corrects the page where it did not match what Vela actually does. The previous version listed several cookies we do not set (including Supabase and Stripe cookies), described a "functional" category you could switch off when nothing in the product honoured that choice, and did not mention the attribution signal described under Analytics below. It also said your choice is saved for 12 months; it is saved until you change it.
This Cookie Policy explains how Vela uses cookies and similar technologies on our website and platform. It should be read alongside our Privacy Policy.
We comply with the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. We ask for your consent before storing anything on your device that is not needed to provide the service you asked for.
What are cookies?
Cookies are small text files that websites place on your device when you visit them. We also use similar technologies including local storage and session storage. In this policy, "cookies" refers to all of these.
Vela does not set any cookies of its own. Everything we keep on your device is in your browser's local or session storage. The only cookies that can appear are set by Google Analytics and PostHog, and only if you consent to analytics.
Strictly necessary
These are essential for Vela to work. Without them you cannot sign in or stay signed in. We do not need your consent for these under PECR.
- vela_sb — your sign-in session (Supabase), until you sign out
- vela_jwt — your access token, until you sign out
- vela_session_id — session continuity, until you sign out
- vela_user_id — identifies your account to the app, until you sign out
- vela_remember_me — whether to keep you signed in on this device
- vela_active_boardroom — the boardroom you last had open
- cookie_consent_state — the cookie choice you made on this device
- vela_cookie_session_id — a random identifier recording that choice, so we can show we asked
If you choose not to be kept signed in, the sign-in entries above are held in session storage instead and disappear when you close the tab.
Settings you choose
These remember choices you made yourself in the product — your theme, which sections you collapsed, which one-off hints you dismissed. We treat them as strictly necessary: you asked for the setting, and keeping it is how we provide what you asked for. They are never used to track you and never leave your browser.
- vela_theme — the theme you selected, kept on this device until you change it, so the page opens in your theme rather than flashing another one first
- sidebar:… — which sidebar sections you collapsed
- vela_work_mode, vela_desk_example — view options you set
- dismissal flags such as vela:section-hints:seen, vela_theme_banner_dismissed and vela_email_connect_nudge_dismissed — so something you dismissed stays dismissed
- short-lived caches such as vela:contact-labels, vela:desk-labels and vela:lastRead:… — so the app does not have to re-fetch what it just showed you
Earlier versions of this policy offered these as an optional "functional" category. That was not accurate — nothing in the product acted on that switch — so we have removed the choice rather than pretend it did something. If you would rather none of this were kept, your browser's "block site data" setting will do it, and Vela will still work apart from forgetting your settings.
Analytics
These help us understand how the product is used so we can improve it. They are not essential and nothing here is stored or loaded until you consent. If you decline, the analytics code is never even downloaded.
- ph_…_posthog — product analytics (PostHog, EU-hosted), cookie and local storage, up to 1 year. PostHog privacy policy
- _ga, _ga_… — website analytics (Google Analytics 4), cookies, up to 2 years. Google privacy policy
- vela_entry_path — how you first arrived (a campaign tag from the link you followed, the page you landed on, or the site that referred you). We keep it so we can tell which of our pages and campaigns actually help people. It holds no information about you. ⚠️ It is not written unless you accept analytics: until you decide, it is held in memory for the visit only, and if you decline it is discarded and any earlier copy is deleted.
Your choices
When you first visit Vela, a banner appears with three options: accept all, reject non-essential, or manage the choice yourself. Nothing non-essential is stored before you choose.
Your choice is remembered on this device until you change it. You can change it at any time from the cookie preferences link in the footer of any Vela page, or at Settings → Privacy → Cookie preferences. If you withdraw consent, analytics stops immediately — no reload needed — and the attribution entry above is deleted.
Most browsers also let you block or delete site data through their settings, though doing so will sign you out and lose your saved settings.
Third-party requests
PostHog and Google Analytics are loaded only after you consent to analytics, and set their own cookies as listed above. Our typefaces are served from Vela's own site, so opening a page sends no request to a font provider. Payments are handled on Stripe's own pages when you subscribe — Stripe's payment scripts do not run on Vela itself.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will notify you in-product and update the dates above.
Contact
Questions about cookies or this policy? support@tryvela.co