Cookie Policy

Last updated: 2026-05-30

1. What Are Cookies?

Cookies are small text files that websites place on your browser to remember information between page visits. This Cookie Policy explains the cookies and similar technologies (such as local storage and session storage) that Vwrap uses and how you can manage them.

This Policy supplements our Privacy Policy, which describes the broader handling of personal information.

For users in the Republic of Korea, this Policy is structured to match the essential vs non-essential categorization framework set out in the July 2025 Personal Information Protection Commission (PIPC) Consolidated Guidelines on cookies and similar technologies. For users in the European Economic Area and the United Kingdom, the categorization also aligns with the ePrivacy Directive and the Information Commissioner's Office guidance.

2. Essential Cookies (No Consent Required)

Essential cookies are strictly necessary to provide a service you have explicitly requested (signing in, completing a payment, protecting against fraud). Under the PIPC Consolidated Guidelines and the EU ePrivacy Directive, essential cookies do not require prior consent because they are technically necessary for the Service to function.

We use the following essential cookies and similar technologies:

  • Supabase Auth session cookie — keeps you signed in across pages and tabs. Set by our authentication library (Supabase) and scoped to the Vwrap domain. Session duration (cleared on sign out).
  • CSRF and security tokens — short-lived tokens used to protect sign-in and form submissions from cross-site request forgery attacks. Cleared at end of session.
  • UI preferences (functional, stored in localStorage) — sidebar collapsed/expanded, light/dark theme, recently used templates. Stored locally in your browser; not transmitted to our servers. We treat these as essential to provide a consistent UI state you have already chosen; if you would prefer to disable them, please clear your browser's storage for the Vwrap domain (this will reset your preferences on each visit but will not break any feature).

3. Non-Essential Cookies (Consent Required Before Use)

Non-essential cookies include analytics, marketing, advertising, and cross-site tracking technologies. Under both the PIPC Consolidated Guidelines (Korea) and the EU ePrivacy Directive, non-essential cookies require prior explicit consent obtained through a clearly worded consent mechanism (a "Consent Management Platform" or CMP). A single "Accept all" button is not sufficient under the PIPC Guidelines — users must be able to grant or refuse each non-essential category separately.

We currently do not set any non-essential cookies on the Service. We do not run third-party product analytics, advertising trackers, or marketing pixels. Because we do not set any non-essential cookies today, we do not currently display a CMP consent banner.

If we ever add a non-essential cookie (for example, a privacy- preserving product-analytics tool), we will deploy a CMP banner that:

  • presents each non-essential category separately;
  • treats refusal as no less prominent than acceptance (no "dark pattern" nudges);
  • loads the corresponding cookie only after you grant consent for that specific category; and
  • allows you to withdraw consent at any time from a persistent UI control.

4. Third-Party Cookies

When you make a purchase, you are redirected to Polar's hosted checkout on polar.sh. Any cookies set during checkout are set by Polar on its own domain, not on ours, and their use is governed by Polar's Privacy Policy.

When the Service displays YouTube thumbnails or other YouTube content, those requests are made directly to Google's servers, which may set cookies governed by Google's Privacy Policy.

5. How to Manage Cookies

Most browsers let you view, block, or delete cookies from their settings. You can usually find these controls under "Privacy," "Security," or "Site settings." General guidance and browser-specific instructions are available at allaboutcookies.org.

Disabling strictly necessary cookies (Section 2) will prevent you from signing in or completing a purchase. Disabling functional cookies (Section 3) will not break the Service but may reset your preferences on each visit.

6. Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. There is no industry standard for how websites should respond to DNT signals, and the Service does not currently react differently to a DNT signal. Because we do not run third-party analytics or advertising trackers, the cookies we set are limited to those described above regardless of any DNT preference.

7. Changes to This Policy

We may update this Cookie Policy from time to time. If we add new categories of cookies (especially analytics or marketing trackers) or otherwise materially change how we use cookies, we will update this page and post a notice. The "Last updated" date at the top of this page indicates when this Policy was most recently revised.

8. Contact

Questions about this Cookie Policy:

  • Email: support@vwrap.ai
  • Operator: Nu-F-O (operating as Vwrap), a sole proprietorship registered in the Republic of Korea