Cookie Policy

1. What cookies are

Cookies are small text files that a website stores in your browser. They let a site remember things between requests, such as whether you are signed in or what preferences you have set. Some cookies are strictly necessary for the service to work; others are optional and only used with your consent.

2. Essential cookies we set

The following cookies are strictly necessary. They do not require consent because the service cannot function without them.

• vio_session: keeps you signed in to your developer or API account (authentication).
• vio_vendor_session: keeps you signed in to the vendor portal (authentication).
• vio_consent: remembers your cookie choice so we do not ask again on every visit. It is shared by vioscale.ai and account.vioscale.ai, so one choice covers both.

The session cookies are httpOnly and HMAC-signed to protect them from tampering.

3. Analytics and measurement (consent-gated)

We carry out lightweight, privacy-preserving analytics to understand aggregate usage of public pages. This measurement is only active if you accept it. When enabled, our servers receive your IP address and User-Agent as part of the request, but the raw IP address is stripped and replaced with a salted hash before storage. We also record the country you are in, but not your city or precise location, and we keep it instead of your IP address rather than as well as it. If you reject non-essential analytics, this capture on public page views does not run.

We use Google Analytics, a service provided by Google, to measure which pages are visited and how people arrive at them. It is only loaded if you accept analytics, and we tell it that advertising storage and personalisation are denied. When it is enabled it sets the _ga and _ga_978VCV7T58 cookies, which tell visitors apart and keep track of a visit. See Google's privacy policy.

We also use Microsoft Clarity, a service provided by Microsoft Corporation, to understand how people use the site: where they click, how far they scroll, and recordings of how pages are used (session replays). Clarity is only loaded if you accept analytics. Form inputs, numbers and email addresses are masked before anything is sent, and the evaluation agent's conversations are masked in full. We tell Clarity that advertising storage is denied.

When Clarity is enabled, it sets these cookies on our site:

• _clck: keeps a pseudonymous Clarity ID so that visits by the same browser can be linked.
• _clsk: joins page views by the same browser into a single session.

Microsoft may also set its own cookies on Microsoft domains, such as CLID and MUID. See Microsoft's privacy statement for how Microsoft handles that data. If you choose essential cookies only, neither Google Analytics nor Clarity is loaded.

4. No third-party advertising cookies

We do not use third-party advertising cookies, and we do not run ad trackers. Google Analytics and Microsoft Clarity are used for analytics only, and we tell both that advertising storage is denied. We do not sell or share your personal data for cross-context behavioural advertising.

5. How to change your choice

A consent banner lets you accept or reject non-essential analytics, and you can change that choice at any time with the Cookie settings link in the site footer. Your choice applies to both vioscale.ai and the vendor portal at account.vioscale.ai. You can also clear cookies through your browser settings, which will reset your stored choice and sign you out. Note that blocking essential cookies will stop parts of the service, such as signing in, from working.