Cookie Policy

1. What cookies are

Cookies are small text files that a website stores in your browser. They let a site remember things between requests, such as whether you are signed in or what preferences you have set. Some cookies are strictly necessary for the service to work; others are optional and only used with your consent.

2. Essential cookies we set

The following cookies are strictly necessary. They do not require consent because the service cannot function without them.

• vio_session: keeps you signed in to your developer or API account (authentication).
• vio_vendor_session: keeps you signed in to the vendor portal (authentication).
• vio_consent: remembers your cookie choice so we do not ask again on every visit.

The session cookies are httpOnly and HMAC-signed to protect them from tampering.

3. Analytics and measurement (consent-gated)

We carry out lightweight, privacy-preserving analytics to understand aggregate usage of public pages. This measurement is only active if you accept it. When enabled, our servers receive your IP address and User-Agent as part of the request, but the raw IP address is stripped and replaced with a salted hash before storage. If you reject non-essential analytics, this capture on public page views does not run.

4. No third-party advertising cookies

We do not use third-party advertising cookies, and we do not run ad trackers. We do not sell or share your personal data for cross-context behavioural advertising.

5. How to change your choice

A consent banner lets you accept or reject non-essential analytics, and you can change that choice at any time. You can also clear cookies through your browser settings, which will reset your stored choice and sign you out. Note that blocking essential cookies will stop parts of the service, such as signing in, from working.