Cookie Policy
effective / 2026-05-02 / draft pending lawyer review
Qualified Vibes uses a small number of strictly-necessary cookies — these are exempt from consent under the UK Privacy and Electronic Communications Regulations (PECR) because they are required to provide the service you asked for (sign-in, CSRF protection). We do not run advertising or tracking cookies.
Strictly-necessary cookies
- next-auth.session-token — set by Auth.js when you sign in, used to authenticate subsequent requests. Removed when you sign out or after 30 days of inactivity.
- next-auth.csrf-token — set on form submissions to prevent cross-site request forgery.
- next-auth.callback-url — short-lived; remembers where to send you after sign-in.
Analytics
We currently do not run analytics on the site. If we add Vercel Analytics in future, it does not use cookies and does not track individual users across sites.
Third-party cookies
Stripe Identity (used only when you opt into the qv* qualified flow) sets its own cookies on the Stripe-hosted verification page; those are governed by Stripe’s privacy policy.
Changing your settings
Clear cookies for qualifiedvibes.com in your browser. Removing the session cookie will sign you out. Because we only use strictly-necessary cookies, no consent banner is shown.
Questions: privacy@qualifiedvibes.com.