1. Introduction

This Cookie Notice explains how VAALID Inc. (“VAALID”, “we”, “us”, or “our”) uses cookies and similar technologies on our web application, marketing site, and related online services (collectively, the “Service”).

This Notice should be read together with our Privacy Policy. By using the Service, you agree to the use of cookies and similar technologies as described below.

2. What Are Cookies?

Cookies are small text files stored on your browser or device. Websites use them to keep you signed in, remember your preferences, and help pages load correctly.

There are two main types of cookies:

  • Session cookies – temporary and deleted when you close your browser
  • Persistent cookies – remain until they expire or you delete them

VAALID also uses technologies such as localStorage, sessionStorage, and caching to support required app functionality.

3. How VAALID Uses Cookies

VAALID uses cookies and similar technologies in a limited and purposeful way.
We do not use advertising cookies, track users across unrelated websites, or sell cookie data.

3.1 Essential Cookies

Purpose:
Required for the Service to function securely and reliably. These cookies enable:

  • Secure authentication
  • Maintaining your user session
  • Establishing organization and workspace context
  • Protecting the Service from misuse

If essential cookies are disabled, VAALID may not function properly.

3.2 Preference and Experience Storage

Purpose:
Remembers UI preferences such as:

  • Theme (light or dark mode)
  • Sidebar state
  • Dismissed banners

Stored in localStorage, not transmitted to VAALID servers.

3.3 Optional Analytics

Purpose:
Helps us understand performance, reliability, and feature adoption.

Characteristics:

  • Limited and privacy-aware
  • Disabled by default
  • Enabled only by VAALID or your organization
  • Never used for advertising or behavioral profiling

4. Similar Technologies

4.1 LocalStorage

Stores non-sensitive preferences on your device.

4.2 SessionStorage

Temporary navigation/state information cleared when the tab is closed.

4.3 Service Worker Caches

Caches static assets to improve performance; does not store personal or workspace content.

4.4 Feature Flags

Used to enable product capabilities; not used for tracking.

5. Subprocessors and GDPR

To operate the Service, VAALID relies on a small number of carefully vetted subprocessors. These subprocessors provide hosting, storage, email delivery, analytics (if enabled), and other essential infrastructure services.

5.1 How Subprocessors Relate to Cookies

Some essential cookies and similar technologies interact with subprocessor systems to:

  • Authenticate sessions
  • Route user requests
  • Deliver page assets
  • Send required operational emails
  • Record pseudonymous analytics (only if enabled)

Subprocessors cannot use cookie data for their own purposes.

5.2 VAALID’s GDPR Commitments

In line with GDPR requirements:

  • Every subprocessor is bound by a written data processing agreement.
  • Subprocessors may access personal data only as necessary to help us provide the Service.
  • We conduct security and privacy reviews before onboarding any new subprocessor.
  • We maintain a public list of subprocessors that customers can review at any time.
  • Customers will be notified in advance if we add or materially change a subprocessor, allowing them to object as permitted under GDPR Art. 28.

6. How to Control Cookies and Storage

You can manage cookies and similar technologies through your browser settings:

  • Block or delete cookies
  • Clear localStorage and sessionStorage
  • Reset cached assets

Please note:

  • Blocking essential cookies will prevent login and break core functionality.
  • SSO-enabled organizations may require identity-provider cookies.
  • Optional analytics can be disabled by your administrator or by contacting VAALID support.

7. Updates to This Cookie Notice

We may update this Notice when we introduce new features or when legal requirements change. Updates will include:

  • A revised “Last updated” date
  • Notification to organization owners for significant changes

8. Contact Us

For questions about cookies, subprocessors, or GDPR obligations, contact:

Email: privacy@vaalid.com

For more details on how we handle personal information, please see our Privacy Policy.