Get started
Legal · Effective 2026-10-07

Cookie Policy

This Cookie Policy explains how Verdacert LLC (“Verdacert”, “we”, “us”) and our service providers use cookies and similar technologies (collectively, “cookies”) when you visit verdacert.com or use our Services. Read this Policy together with our Privacy Policy and Terms of Service.

1. What are cookies?

Cookies are small text files placed on your device that allow a website to recognize your browser and remember information. Similar technologies include pixels, tags, web beacons, local storage, session storage, and software development kits (SDKs). Cookies may be set by us (“first-party”) or by third parties whose technology we embed (“third-party”), and may be deleted at the end of your session (“session”) or persist across visits (“persistent”).

2. Categories we use

  • Strictly necessary. Required to operate the Services - authentication (__Secure-authjs.session-token, 30 days; __Host-authjs.csrf-token and __Secure-authjs.callback-url, session), signed access to your draft and order pages across the payment redirect (vc_anon_upload, vc_draft_access, vc_order_access; 1–7 days), your consent choice (vc_consent, 6 months) and the country used to decide which consent rules apply (vc_geo, 24 hours), and Stripe’s fraud-prevention cookies on payment pages (__stripe_mid, 1 year; __stripe_sid, 30 minutes). These cannot be turned off through our consent controls; without them the Services will not function.
  • Functional. Remember your language (verdacert_locale, 12 months) and, in your browser’s local storage, a marker that stops a completed order from being counted twice in our analytics (vc_analytics_once).
  • Analytics / performance. Google Analytics 4, loaded through Google Tag Manager (cookies _ga and _ga_*, up to 24 months), and Vercel Web Analytics and Speed Insights (cookieless) help us understand how visitors use the Services so we can fix bugs, improve performance, and prioritize features. Analytics data is aggregated and is not used for cross-context behavioral advertising; Google Signals and ad personalization are disabled. We also run our own first-party measurement (cookie vc_a, 13 months; vc_a_start in session storage): a random browser and visit identifier, the pages viewed and order-form steps taken, and the campaign tags and referring site a visit came from, so we can see which pages and channels lead to orders. It records no IP address, stays in our own database for 14 months, and is not shared with anyone.
  • Advertising measurement. On pages reached from a Google Ads click and during checkout, Google’s Conversion Linker sets the _gcl_au and _gcl_aw cookies (90 days) so we can attribute a completed order to the ad that brought you here. We also keep the ad’s click identifier in our own cookie (vc_ad_click, 90 days) and store it with your order, so that a completed order can be reported to Google Ads from our servers; we delete it 90 days after the click. We do not use retargeting or personalized advertising, and Restricted Data Processing is enabled so Google acts as our service provider under U.S. state privacy laws. You can turn advertising measurement off in the preference center, and a Global Privacy Control signal turns it off automatically.

3. Third parties that may set cookies

We use a small number of vendors that may set cookies or similar identifiers when you use the Services: hosting and content delivery (Vercel, Cloudflare), payment processing (Stripe, on the hosted checkout page and the 3-D Secure confirmation page), and analytics and advertising measurement (Google, via Google Tag Manager; Vercel Web Analytics). We require these vendors to handle data consistently with our Privacy Policy and applicable law. Each vendor’s own privacy and cookie notices govern their practices.

4. Your choices

  • Cookie banner / preference center. Visitors in the EEA, the United Kingdom, and Switzerland see a consent banner before any non-essential cookie is set. Everywhere else, analytics and advertising measurement run by default and the “Privacy choices” link in the footer opens a preference center where you can turn either category off at any time. Your choice is stored in the vc_consent cookie for six months.
  • Browser controls. Most browsers let you block or delete cookies. Doing so may break parts of the Services that rely on strictly-necessary cookies.
  • Global Privacy Control (GPC). We honor Global Privacy Control everywhere: when your browser sends the signal we turn advertising measurement off and treat it as an opt-out of any “sale” or “sharing” of personal information under California, Colorado, Connecticut, and similar state laws.
  • Do Not Track (DNT). Because there is no industry consensus on DNT, we do not currently change our practices in response to DNT signals. We do, however, respect GPC where required.

5. Changes to this Policy

We may update this Cookie Policy from time to time to reflect changes in technology, vendors, or law. The current version is posted on this page with an updated effective date.

6. Contact

Questions about cookies or this Policy: email privacy@verdacert.com.

Get instant quotePricing