Legal

Cookie Policy

Effective date: 7 October 2026

1. What cookies are

Cookies are small text files that a website stores in your browser. They let a site remember things between requests, such as whether you are signed in or what preferences you have set. Some cookies are strictly necessary for the service to work; others are optional and only used with your consent. Some measurement on this site uses no cookies at all; Section 3 explains it.

2. Essential cookies we set

The following cookies are strictly necessary. They do not require consent because the service cannot function without them.

  • vio_session: keeps you signed in to your developer or API account (authentication).
  • vio_vendor_session: keeps you signed in to the vendor portal (authentication).
  • vio_consent: remembers your cookie choice so we do not ask again on every visit. It is shared by vioscale.ai and account.vioscale.ai, so one choice covers both.

The session cookies are httpOnly and HMAC-signed to protect them from tampering.

3. Our own measurement (always on, no cookies)

We measure how every visitor uses the public site: page views, which products are shown on category pages, clicks through to vendors' websites, and searches. This is first-party measurement that sets no cookie and reads nothing stored on your device, so it is not covered by the cookie banner and runs for every visitor whatever you choose there. Our servers receive your IP address and User-Agent as part of each request, but the raw IP address is stripped and replaced with a keyed hash before storage. We also record the country you are in, but not your city or precise location, and we keep it instead of your IP address rather than as well as it. Vendors and advertisers only ever see aggregated statistics from it. Our Privacy Policy explains what we record, why, and your rights.

4. Google Analytics and Microsoft Clarity (consent-gated)

We use Google Analytics, a service provided by Google, to measure which pages are visited and how people arrive at them. It is only loaded if you accept analytics, and we tell it that advertising storage and personalisation are denied. When it is enabled it sets the _ga and _ga_978VCV7T58 cookies, which tell visitors apart and keep track of a visit. See Google's privacy policy.

We also use Microsoft Clarity, a service provided by Microsoft Corporation, to understand how people use the site: where they click, how far they scroll, and recordings of how pages are used (session replays). Clarity is only loaded if you accept analytics. Form inputs, numbers and email addresses are masked before anything is sent, and the evaluation agent's conversations are masked in full. We tell Clarity that advertising storage is denied.

When Clarity is enabled, it sets these cookies on our site:

  • _clck: keeps a pseudonymous Clarity ID so that visits by the same browser can be linked.
  • _clsk: joins page views by the same browser into a single session.

Microsoft may also set its own cookies on Microsoft domains, such as CLID and MUID. See Microsoft's privacy statement for how Microsoft handles that data. If you choose essential cookies only, neither Google Analytics nor Clarity is loaded.

5. No third-party advertising cookies

We do not use third-party advertising cookies, and we do not run ad trackers. Google Analytics and Microsoft Clarity are used for analytics only, and we tell both that advertising storage is denied. We do not sell or share your personal data for cross-context behavioural advertising.

6. How to change your choice

A consent banner lets you accept or reject Google Analytics and Microsoft Clarity, and you can change that choice at any time with the Cookie settings link in the site footer. It does not affect our own measurement in Section 3, which uses no cookies. Your choice applies to both vioscale.ai and the vendor portal at account.vioscale.ai. You can also clear cookies through your browser settings, which will reset your stored choice and sign you out. Note that blocking essential cookies will stop parts of the service, such as signing in, from working.

For more on how we handle personal data, see our Privacy Policy.