Legal

Cookie Policy

Last updated: May 26, 2026 · Version 3.0

1. What Are Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website. We also reference similar technologies such as session storage where applicable. Together, these technologies enable you to stay logged in and allow the service to function correctly.

2. Cookies and Technologies We Use

2.1 Strictly Necessary (No Consent Required)

These cookies are essential for Voco to function. The service cannot operate without them. Under GDPR, these are processed on the basis of legitimate interest in providing the service you have requested. You cannot opt out of strictly necessary cookies while using Voco.

Cookie	Purpose	Provider	Approximate Duration
`sb-[project]-auth-token`	Keeps you authenticated by storing your encrypted session token	Supabase	Session or until logout; may persist if your session is active
`sb-[project]-auth-token.0`	Authentication fragment used when session token exceeds standard cookie size	Supabase	Session or until logout

These cookies contain encrypted session identifiers only. They do not contain your name, email address, resume content, or any readable personal data.

2.2 Analytics

Voco may use Vercel Analytics, which collects privacy-focused, aggregate usage metrics not intended to directly identify individual users. These metrics help us understand application performance and general usage patterns.

IP addresses may be transiently processed by Vercel's infrastructure for security and routing purposes but are not retained in identifiable form beyond 30 days.

Legal basis (GDPR): Legitimate interests in improving service performance and reliability.

2.3 What We Do Not Use

We do not use:

Advertising or retargeting cookies
Social media tracking pixels (Facebook, LinkedIn, TikTok, etc.)
Google Analytics or behavioral profiling tools
Third-party cookies that track you across other websites
Any cookie or technology designed to identify you across sessions for marketing purposes

3. Legal Basis for Cookie Processing (GDPR)

Cookie Type	Legal Basis
Strictly necessary authentication cookies	Legitimate interests — necessary for service provision
Vercel Analytics	Legitimate interests in service improvement; minimal personal data processed

If we introduce any cookies that require consent in the future, we will update this policy and present a consent mechanism before setting those cookies.

4. Managing Cookies

Browser Controls

You can control, block, or delete cookies through your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data
Safari: Settings → Privacy → Manage Website Data
Firefox: Options → Privacy & Security → Cookies and Site Data
Edge: Settings → Cookies and site permissions

Important: Disabling or deleting the Supabase authentication cookies will sign you out of Voco and prevent you from logging back in until cookies are re-enabled.

Do Not Track

There is no universally accepted standard for "Do Not Track" (DNT) browser signals. Because no standard exists, Voco does not currently alter its behavior in response to DNT signals.

5. Your Rights

Depending on your jurisdiction, you may have rights regarding personal data collected through cookies and similar technologies, including the right to access, correct, or delete such data. See our Privacy Policy for full details on your rights. EU/EEA/UK residents may lodge complaints with their national Data Protection Authority.

6. Changes to This Policy

We will update this Cookie Policy when we introduce new technologies or change our data practices. We will update the "Last updated" date and, for material changes, notify existing users by email.

7. Contact

Email: hello@vocohq.com

Website: vocohq.com