Necessary
Login, security, cart, checkout, language and your consent choice.
Venroys uses necessary technology to operate accounts, storefronts, carts and payments. Analytics and marketing activate only after you choose them.
Login, security, cart, checkout, language and your consent choice.
Venroys Analytics, Google Analytics and Vercel Analytics for usage and performance.
Campaign attribution and Meta Pixel advertising measurement, when configured.
This policy applies to venroys.com, app.venroys.com, Venroys subdomains, Venroys-hosted seller storefronts and features referring to it. A seller's verified custom domain may use the same Venroys technology.
Venroys OÜ, registry code 17427636 and VAT number EE102991020, operates the Venroys platform technology. A third-party provider may be independently responsible for its technology and data processing.
Cookies are small data files stored by a website in your browser. Similar technologies include localStorage, sessionStorage, pixels, SDKs and server-side identifiers. They can be necessary to provide a service or, with your choice, measure usage and campaigns.
Local storage is used, for example, to remember temporary onboarding progress, selected products, interface settings and navigation state. The same consent standard applies where such technology serves the same purpose as a cookie.
Necessary technology is used without opt-in where strictly required for a service you requested, security or remembering your choice. Analytics and marketing are off by default and begin only after consent.
You can enable or disable analytics and marketing separately. Withdrawal is as easy as acceptance: open settings through the permanent control or this page. After withdrawal, new analytics and marketing events stop and we remove available Venroys, GA and Meta identifier cookies. Withdrawal does not retroactively invalidate prior lawful processing.
This storage supports functionality you request. Blocking it in your browser can break login, cart, checkout, order tracking, language or security.
| Name | Purpose | Duration | Party |
|---|---|---|---|
| token | Secure account login and session management. | 7 days; 30 days with ‘remember me’ | Venroys |
| twofa / oauth_state | Temporary two-step and Google login security. | Short session, usually no more than 10 minutes | Venroys |
| cookie_consent | Stores the categories, version and date of your choice. | 180 days | Venroys |
| cart | Stores the marketplace or storefront shopping cart. | Up to 30 days or until cleared | Venroys |
| shipping_info | Temporarily stores checkout and delivery details during ordering. | 1 day | Venroys |
| shipping_quote | Temporarily links checkout to the verified shipping quote. | 10 minutes | Venroys |
| userPrefs / userLocale / NEXT_LOCALE | Remembers country, currency and language. | 30 days to 1 year | Venroys |
| venroys_storefront_order_<id> | Secures access to a storefront order confirmation and tracking. | 7 days | Venroys |
| seller_settings_tab | Remembers the open seller-settings section. | Browser session | Venroys |
After analytics consent, Venroys may process page views, session duration, referring page, general country, device and browser details, error and performance data and commerce events. We use this to improve reliability, speed, funnels and usability.
Venroys Analytics, Google Analytics 4 and Vercel Analytics start only after this choice. Analytics consent is not required to buy, visit a storefront or use an account.
| Name | Purpose | Duration | Party |
|---|---|---|---|
| visitor_uuid | Pseudonymous visitor identifier for internal Venroys statistics. | 1 year | Venroys |
| session_token | Links page views and events within an analytics session. | 7 days | Venroys |
| lastVisitedPath | Measures internal navigation and referring page. | Browser session | Venroys |
| _ga | Distinguishes users for Google Analytics 4. | Default up to 2 years; browser limits may shorten this | |
| _ga_<container-id> | Persists Google Analytics session state. | Default up to 2 years; browser limits may shorten this | |
| Vercel Analytics | Measures aggregated visits and web performance; the current integration is not intended to set a Venroys identification cookie. | Under the current Vercel configuration | Vercel |
After marketing consent, campaign parameters and, when configured, the Meta Pixel may measure advertising visits and commerce conversions. Venroys does not sell personal data through cookies.
Marketing consent is optional. An advertising provider may process data under its own policy once its technology is activated.
| Name | Purpose | Duration | Party |
|---|---|---|---|
| utm | Stores source, medium and campaign for attribution. | 90 days | Venroys |
| _fbp | Helps Meta measure advertising visits and conversions. | Usually up to 90 days | Meta |
| _fbc | Stores a Meta click identifier when an advertising link contains one. | Usually up to 90 days | Meta |
Stripe may use its own necessary cookies or device characteristics during payment, fraud prevention, verification and Stripe Connect. Google reCAPTCHA may process risk and device data on protected forms. These security technologies may be necessary to prevent fraud and abuse.
Google Analytics, Meta and Vercel activate only according to the choices described above. External sites you open yourself—such as Stripe, Printful, Google or a carrier—apply their own cookie and privacy policies.
Venroys cookies are host-bound by default. A seller subdomain or custom domain therefore does not automatically share all cookies with venroys.com or other sellers. This limits unnecessary cross-store tracking.
Sellers may not place their own non-essential trackers in a storefront without valid consent. If Venroys later supports seller scripts, they must be categorized through the consent mechanism and disclosed transparently before activation.
The tables show maximum or typical retention. A cookie may disappear earlier when you log out, clear your cart, withdraw consent, delete browser data or the browser applies a shorter limit. We renew a duration only where consistent with its purpose.
Consent choices are stored for 180 days, after which we may ask again. Server-side data resulting from permitted cookies follows the periods in the Privacy Policy.
You can also inspect, block and delete cookies and manage site storage or tracking protection through your browser. Browser blocking does not always communicate your Venroys choice: preferably also use the button below so our scripts receive your decision immediately.
We update this policy when cookies, providers, purposes or retention periods materially change. We ask for a fresh choice for new non-essential purposes where required. The date above identifies the current version.
Questions about cookies or your choices:
Venroys OÜ