Cookies & Tracking

1. What is a cookie

A cookie is a small text file stored on your device by your browser when you visit a website. Cookies are used to remember preferences, keep you signed in, hold cart contents across navigation, and measure how the site is used. We also use related local-storage mechanisms (sessionStorage, IndexedDB) for the same purposes.

2. Cookie categories we use

• Strictly necessary. Session cookies, CSRF tokens, cart-state cookies, the researcher-verification cookie, and authentication cookies (e.g. vorix_session). Without these the site does not function. Cannot be disabled.
• Functional. Preference cookies — chosen sort order on the catalog, recently-viewed products, dismissed banners. Lifetime up to 12 months.
• Analytics. First-party usage analytics provided by Vercel Web Analytics. Aggregated, non-identifying. Lifetime up to 12 months.
• Affiliate attribution. A signed referral cookie set when a visitor arrives via a Vorix Labs partner link (?invitedBy=). Stores only the partner handle and an HMAC. Lifetime 30 days.

We do not currently use third-party advertising cookies, cross-site retargeting pixels, or social-media tracking tags.

3. How to control cookies

You can control cookies through your browser settings. Most browsers let you block all cookies, block third-party cookies, or delete existing cookies. Disabling strictly-necessary cookies will break authentication, cart, and the researcher-verification flow. If you only want to disable analytics, install a content blocker or use your browser's built-in tracking protection (Safari ITP, Firefox ETP, Brave Shields).

4. Global Privacy Control (GPC) and Do Not Track

We honor the Global Privacy Control (GPC) signal as an opt-out of any sale or sharing of personal information. Where GPC is received from your browser, we do not engage in the limited categories of data sharing covered by U.S. state privacy laws. Because we do not currently engage in cross-context behavioral advertising or sell personal information, this signal does not materially change our processing — but we record receipt of the signal for audit purposes.

Our handling of legacy Do-Not-Track (DNT) headers is identical: we receive the header but, because we do not engage in the practices DNT was designed to opt out of, no behavior changes.

5. Third parties that may set cookies on our site

When you check out, payment is processed by our payment partner. We do not store full card details on our servers; the payment partner may set its own cookies in connection with fraud screening and payment authorization. Email links may include a tracking parameter for delivery confirmation only. We do not embed third-party social or advertising widgets.

6. Updates

We may update this page as our cookie usage changes. Material changes will be reflected by updating the “effective” date at the top of this page and, where required by law, by a notice in the application.

7. Contact

Questions about cookies or tracking: yabdallah17@proton.me.