Legal
Cookie Policy
Version 1.1 · In effect from 19 September 2026
This policy lists every cookie and similar technology used on vercro.com, and explains how to change your choices. It adds detail to section 10 of our Privacy Policy.
At a glance
- Nothing beyond the essentials runs until you choose. Rejecting is as easy as accepting.
- Analytics (PostHog) and marketing (Google Analytics, Meta Pixel) only run if you allow them.
- Cookieless visit counting (Vercel) stores nothing on your device and stops if you reject.
- Change your mind at any time with Cookie settings. Turning something off takes effect straight away, and we delete the cookies it set where we can.
- One choice for vercro.com and app.vercro.com.
01What cookies are
In short: Small pieces of information a website stores in your browser. Local and session storage do a similar job.
A cookie is a small file a website saves in your browser so it can remember something, such as that you are signed in. Websites can also use your browser's local storage (kept until cleared) and session storage (kept until you close the tab). The law treats all of these, and similar technologies such as tracking pixels, the same way, and so do we. In this policy, "cookies" means all of them.
02Your choices
In short: Accept all, reject all, or choose each category. Change it whenever you like.
- The first time you visit, a banner lets you Accept all, Reject all or Manage choices. Until you choose, only essential cookies are used and cookieless visit counting runs.
- Your choice is saved for 12 months in the vercro_consent cookie, on vercro.com and app.vercro.com. After 12 months, or if we add a new type of cookie, we ask again.
- To change your choice, use here or in the footer of any page. Turning analytics or marketing off takes effect immediately: we stop the tools, and delete the cookies and storage they set on our site. Google and Meta scripts are not loaded on your next page view.
- You can also block or delete cookies in your browser settings. If you block essential cookies, signing in may not work.
03The categories we use
In short: Essential, cookieless statistics, analytics and marketing.
| Category | What it covers | Needs your permission? |
|---|---|---|
| Essential | Remembering your cookie choice, keeping you signed in, security | No. The site needs these to work |
| Cookieless statistics | Counting visits to our pages, with nothing stored on your device (Vercel Web Analytics) | No, but it stops if you reject analytics |
| Analytics | Understanding how people use Vercro with PostHog: pages viewed and clicks, with a random identifier. No session recording | Yes |
| Marketing | Measuring which adverts and campaigns bring people to Vercro: Google Analytics, Meta Pixel, and remembering the campaign you came from | Yes |
With the Meta Pixel, Meta Platforms, Inc. and Vercro are joint controllers for collecting the data and sending it to Meta; Meta is responsible for what it does afterwards. Google is responsible for its own use of Google Analytics data. See Meta's and Google's privacy policies for how they use it.
04Every cookie and storage item
In short: The complete list for vercro.com. Items only appear in the situations described.
Essential
| Name | Provider | What it does | How long | Type | When it is used |
|---|---|---|---|---|---|
| vercro_consent | Vercro | Remembers the cookie choices you made, so we only load what you agreed to. Shared by vercro.com and app.vercro.com so you only choose once. | 12 months | Cookie | After you make a choice in the cookie banner or Cookie settings. |
| sb-…-auth-token | Supabase (our sign-in provider) | Keeps you signed in if you sign in from this website, and lets us send signed-in visitors straight to the app. | Until you sign out | Local storage | Only if you sign in or sign up on vercro.com. |
| vercro_ref | Vercro | Remembers the friend’s referral code in a Refer a friend link you followed, so that when you join, the reward reaches both of you. It holds only the code, nothing about you, and is removed once you have joined. | 30 days | Cookie | Only when you follow a Refer a friend link. |
Cookieless statistics
| Name | Provider | What it does | How long | Type | When it is used |
|---|---|---|---|---|---|
| Vercel Web Analytics | Vercel | Counts page visits without cookies or any storage on your device. Vercel works out a visit from a temporary code made from your request, discards it within 24 hours, and gives us totals only. We remove anything after "?" or "#" from the page address before it is sent. | Nothing stored on your device | Nothing stored | Until you choose "Reject all" or turn analytics off. It stops immediately when you do. |
Analytics (only with your permission)
| Name | Provider | What it does | How long | Type | When it is used |
|---|---|---|---|---|---|
| ph_<project>_posthog | PostHog | A random identifier so PostHog can tell which visits and clicks belong to the same browser, and link your website visit to the app if you sign up. Scoped to .vercro.com so the app can use it too. | 12 months | Cookie | Only if you allow analytics. |
| ph_<project>_posthog (local storage) | PostHog | A copy of the PostHog identifier and settings, used if the cookie is unavailable. | Until cleared (we clear it if you turn analytics off) | Local storage | Only if you allow analytics. |
| ph_<project>_posthog, _window_id, _primary_window_exists (session storage) | PostHog | Tells PostHog which browser tab and visit an event came from. | Until you close the tab | Session storage | Only if you allow analytics. |
| __ph_opt_in_out_<project> | PostHog | Records that analytics was switched off in this tab, so nothing more is sent. | Removed when you leave the page | Local storage | Briefly, only when you turn analytics off after allowing it. |
Marketing (only with your permission)
| Name | Provider | What it does | How long | Type | When it is used |
|---|---|---|---|---|---|
| _ga | Google Analytics (Google) | A random identifier Google Analytics uses to recognise a returning browser and measure where visits come from. | Up to 400 days (Google sets 2 years; browsers cap it) | Cookie | Only if you allow marketing. |
| _ga_<container> | Google Analytics (Google) | Keeps track of the current visit for Google Analytics. | Up to 400 days | Cookie | Only if you allow marketing. |
| _fbp | Meta Pixel (Meta) | A random identifier Meta uses to measure whether our adverts on Facebook and Instagram lead to visits. | 90 days | Cookie | Only if you allow marketing. |
| _fbc | Meta Pixel (Meta) | Stores the Facebook ad click identifier when you arrive from one of our adverts. | 90 days | Cookie | Only if you allow marketing and arrived from a Facebook or Instagram advert. |
| lastExternalReferrer, lastExternalReferrerTime, multiFbc | Meta Pixel (Meta) | Remembers which external site or advert sent you, for Meta advert measurement. | Until cleared (we clear them if you turn marketing off) | Local storage | Only if you allow marketing. |
| vercro_utms | Vercro | Remembers the campaign you arrived from (for example utm_source, and a Facebook click identifier) so we can tell which campaigns lead to sign-ups. | 30 days | Cookie | Only if you allow marketing and arrived from a link with campaign details. |
Our website does not use session recording, advertising cookies from any other company, or cookies to follow you around other websites.
05In the Vercro web app and our phone apps
In short: The web app uses the same choice. It also stores your garden on your device so it loads quickly.
- app.vercro.com reads the same vercro_consent choice, so you don't have to choose twice. It uses essential storage to keep you signed in, remember your settings (such as units) and keep a copy of your garden on your device so it loads quickly. PostHog analytics only runs there if you have allowed analytics. The web app does not use Google Analytics or the Meta Pixel.
- Our iPhone and Android apps keep you signed in and store your garden on your device in the same way. Version 2.1 and later ask for your analytics choice first, the same as the web app. Version 2.0.2 and earlier measure app use with PostHog without a separate choice; section 10 of our Privacy Policy explains how to ask us to delete that analytics.
- If you use a shared device, sign out when you finish.
06Questions
In short: Email us.
Questions about cookies: hello@vercro.com. Our Privacy Policy explains your rights, including how to complain.