Last updated September 20, 2026
Cookie Policy
This policy covers cookies and similar browser storage used by VisionRelay Digital.
What the application stores
Browser local storage and session storage are different from cookies, but they also keep information in your browser. The application uses them as follows:
| Use | Storage and purpose | Duration or control |
|---|---|---|
| Account session | Supabase authentication data and PKCE sign-in state in browser storage allow sign-in, token refresh and redirects to complete. | Session data may persist across browser restarts. Signing out removes local account-session state. Clearing site data can also remove local state, but neither action deletes or deactivates your VisionRelay account. |
| Local demo | When demo mode is enabled, fictional tasks, feedback and the demo credit wallet are saved in local storage. The selected demo role and mode use session storage. | Local demo data remains until cleared; session state normally ends with the browser tab or browser session. Do not put real confidential information in a demo. |
| Security checks | Cloudflare Turnstile loads its security widget for email-authentication checks and processes challenge information. | Provider-managed behavior. The app does not configure Turnstile pre-clearance cookies or promise a fixed third-party retention period. |
| Assistant session | A signed vr_assistant cookie identifies an assistant session for usage limits and abuse protection. It does not contain the conversation or provider credentials. | The cookie expires after 24 hours, is restricted to the assistant endpoint, uses SameSite Strict and is Secure on HTTPS. Clearing the chat does not reset service usage limits. |
| Provider pages | Google, Microsoft, PayPal and PayMongo may use cookies or browser storage on their own sign-in or checkout pages. | Managed by those providers under their own policies and your browser settings. |
Assistant conversation and AI permission
The displayed assistant conversation, draft, project context and AI permission are held in the current tab's memory. They are not written to localStorage or sessionStorage. Reloading the page or choosing Clear chat removes that interface state. Text already sent to an external AI provider cannot be removed by browser controls.
No advertising or analytics switch to enable
The current application code does not load advertising pixels or an analytics tracking service. It does not present a pretend consent toggle for tools that are not installed. This description does not assert that third-party provider sites are cookie-free.
Your browser controls
You can clear site data or restrict storage using your browser's privacy settings. Blocking storage or security scripts may prevent sign-in, verification or checkout from working. On a shared device, sign out when finished and close provider sessions as appropriate.
Deleting browser data removes local session or demo state. It does not deactivate your VisionRelay account and does not remove task records, payment history, subscriptions, uploaded files or other service data stored by VisionRelay.
Account deactivation is available through your account settings. For deletion or erasure requests, see Account Deactivation & Data Deletion.
Account deactivation
Account deactivation is handled by VisionRelay's account system, not by browser cookies. Deactivation disables account access and signs you out while allowing relevant account, task, payment, subscription and workspace history to remain associated with the account.
Clearing cookies or browser storage is therefore not a substitute for using the account deactivation control.
Changes and related information
If the application adds optional analytics or advertising tools in the future, this page and any required choices must be updated before those tools are used.
Read our Privacy Policy and the Turnstile Privacy Addendum for related information.
Contact VisionRelay
For support, privacy questions or a deletion request, email support@visionrelaydigital.com. You can also use your existing authenticated task conversation. Include your account email and relevant task reference. Never send your password, sign-in codes or payment-provider credentials.