Legal

Cookie Policy

Last updated 10 October 2026

Last updated: 10 October 2026 Effective date: 4 July 2026

This Cookie Policy explains how Rocket Venture Labs B.V. ("Voris") uses cookies and similar browser storage. There are two separate things to understand: (1) the cookies the Voris dashboard app uses, and (2) what the Voris tracking script does on our customers' websites.

1. The short version#

The Voris tracking script in Mode A (the default) uses no cookies and no browser storage at all. It does not store anything on your visitors' devices. (Mode B, also live, is likewise cookieless. It derives a salted ephemeral visitor ID server-side, never on the device.)
The Voris dashboard (voris.ai, where customers log in) uses a small number of strictly necessary first-party cookies to keep you signed in and secure.
We use no advertising or third-party tracking cookies anywhere.

2. Cookies used by the Voris dashboard#

These are set only when you visit and sign in to the Voris dashboard. They are strictly necessary to provide the Service and do not require consent under the ePrivacy rules.

Cookie	Purpose	Type	Retention
Session cookie (`authjs.session-token`)	Keeps you signed in after you click your magic link	First-party, essential	Session / until expiry
CSRF token cookie	Protects sign-in and form submissions against cross-site request forgery	First-party, essential	Session

We do not use analytics or marketing cookies on our own dashboard.

3. The Voris tracking script on customer websites#

When one of our customers installs Voris on their website, what happens on a visitor's device depends on the privacy mode set for that site:

Mode A, Aggregated (default for new sites). No cookies, no localStorage, no device storage of any kind. Visitors are counted anonymously and cannot be tracked across pages or visits. This is why sites running Mode A generally do not need a cookie banner for Voris.
Mode B, Balanced. Still does not store anything in the visitor's browser. A short-lived visitor identifier is computed server-side and the daily secret used to compute it is created at 23:55 UTC the day before (or on first use) and destroyed no later than 10 minutes after its UTC day ends. No browser cookie or storage is set.
Mode C, First-party (coming soon). Designed for customers who already identify their signed-in users. Any identifier comes from the customer's own system; Voris does not set its own tracking cookie.

In all modes, the customer (the website operator) is responsible for any cookie notice or consent their own site requires for their other tools.

4. Do Not Track and Global Privacy Control#

Voris is built to respect privacy signals. Because Mode A collects no personal data and sets no identifiers, there is nothing to opt out of. By default, in every mode, the Voris tracking script records nothing and sends no events when a visitor's browser signals Do Not Track (DNT) or Global Privacy Control (GPC).

5. Changes#

We may update this Cookie Policy. The current version always lives here, with the "Last updated" date above.

6. Contact#

Questions about cookies: legal@voris.ai

Rocket Venture Labs B.V., Amsterdam, the Netherlands.