Cookie Policy — vairee
Effective: 2 October 2026
Version: 2026-10-02
Service: https://card.vairee.ai
Controller: Recberry s.r.o. — see the Privacy Notice
This policy is only for card.vairee.ai. It does not apply to other Recberry websites on recberry.com or to vairee.ai.
Under Czech Act No. 127/2005 Coll., we may store or access information on your device without consent only when that is strictly necessary to provide a service you asked for.
1. What we use
| Name | Type | Purpose | Consent | Lifetime |
|---|---|---|---|---|
vairee_session | First-party cookie, httpOnly, Secure in production, SameSite=Lax | Keep you signed in after a magic link | Not required — necessary for the account | 30 days, sliding |
vairee_theme | First-party cookie | Dark or light theme | Not required — necessary for the display you set | 1 year |
vairee_cookie_consent | localStorage | Remember Accept or Reject | Not required — stores the choice | Until you clear site data |
| Context draft keys | localStorage | Recover half-finished answers while you edit the card | Not required | Until you clear site data or save |
vairee_share_sid | sessionStorage | Limit repeat spam on public forms | Not required — security of those forms | Tab session |
| UI flags | sessionStorage | Interface state | Not required | Tab session |
Adobe Typekit (use.typekit.net) | Third-party request | The Strenuous font on app and legal pages. Not used on /share/* or in PDFs | Required. Loaded only after Accept | Adobe-side |
| Google reCAPTCHA v3 on share forms | Third-party script | Bot check on interest and “not a fit” | Required. Loaded only after Accept | Google-side |
| Google reCAPTCHA v3 on the magic-link request | Third-party script | Bot check on sign-in link requests | Required. Loaded only after Accept. See section 3 | Google-side |
| First-party bot check on magic-link and share forms | In-page script | Bot check when you have rejected non-essential technologies | Not required — security of those forms | Tab session |
| Tracked-link beacon | Server POST; visit id only in page memory | Open and reading-depth figures for the link owner | No tracking cookie. Basis: legitimate interests — Privacy Notice §4 | Visit row 90 days on the server |
We do not use advertising cookies, social pixels, or analytics suites on this product.
2. The banner
First visit: Accept non-essential or Reject non-essential.
- Reject does not load Typekit or Google reCAPTCHA. Magic-link and share forms use a first-party bot check instead. Session, theme, drafts and the stored choice still work.
- Accept allows Typekit and Google reCAPTCHA on magic-link and share forms until you clear site data.
- Change of mind: clear site data for card.vairee.ai, or email vairee@vairee.ai.
3. Sign-in and reCAPTCHA
The magic-link form can be used by anyone who knows an email address. After Accept, we load Google reCAPTCHA on that form and on share-page forms. After Reject, those forms use a first-party bot check instead; no data is sent to Google for that check.
If you do not want Google reCAPTCHA, choose Reject and use the first-party check, or do not use those forms.
4. Tracked links
On a labelled tracked page we measure opens and reading depth as described in the Privacy Notice. We do not write a tracking cookie. The page tells you that the person who shared the profile is notified when it is opened, that viewing stores no personal data about you, and that a message or feedback you send is kept.
5. Browser controls
Block or delete cookies and site data for card.vairee.ai. Blocking vairee_session signs you out. We do not implement a Do Not Track or Global Privacy Control signal. The banner is the control.
6. Transfers
Typekit, reCAPTCHA and Vercel (iad1) may process an IP address in the United States. See Privacy Notice §8.
7. Children
Not for anyone under 16.
8. Contact
Privacy Notice: /legal/privacy
vairee@vairee.ai