Cookie Policy

Effective Date: December 17, 2025 Last Updated: December 17, 2025

1. Introduction

This Cookie Policy explains how vitelnk ("we", "our", "us") uses cookies and similar tracking technologies when you visit our website at vitelnk.com and use our video sharing platform.

This policy complies with:

• ePrivacy Directive (Directive 2002/58/EC) - "Cookie Law"
• General Data Protection Regulation (GDPR) (EU Regulation 2016/679)
• Portuguese Data Protection Law (Lei n.º 58/2019)
• Portuguese ePrivacy Implementation (Lei n.º 41/2004)

By using vitelnk, you consent to our use of cookies as described in this policy. You can manage your cookie preferences at any time.

Legal Disclaimer: This Cookie Policy is provided for informational purposes and does not constitute legal advice. For specific legal questions, consult a qualified Portuguese attorney.

2. What Are Cookies?

2.1 Definition

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. Cookies allow websites to:

• Remember your login status
• Store your preferences
• Understand how you use the site
• Improve your experience

2.2 Cookie Types by Duration

• Session Cookies - Temporary cookies deleted when you close your browser
• Persistent Cookies - Remain on your device for a set period (or until you delete them)

2.3 Cookie Types by Source

• First-Party Cookies - Set by vitelnk directly
• Third-Party Cookies - Set by external services we use (Google OAuth, PostHog, Polar.sh)

2.4 Similar Technologies

This policy also covers:

• Local Storage - Browser storage used for session IDs and preferences
• Web Beacons - Invisible pixels used for analytics
• JavaScript Tracking - Scripts that collect usage data

3. How We Use Cookies

We use cookies for three main purposes:

3.1 Essential Functionality (Required)

These cookies are necessary for vitelnk to function and cannot be disabled without breaking the service. They do NOT require your consent under EU law.

3.2 Analytics & Performance (Optional)

These cookies help us understand how users interact with vitelnk so we can improve the platform. They require your explicit consent.

3.3 Authentication & Security (Required)

These cookies protect your account and prevent unauthorized access. They are essential for security and do not require consent.

4. Cookies We Use

4.1 Essential Cookies (No Consent Required)

These cookies are strictly necessary for vitelnk to operate:

Why these cookies don't require consent:

• They are strictly necessary for the service to function (GDPR Recital 30)
• Without them, you cannot log in or use vitelnk securely
• They do NOT track you across websites

4.2 Analytics Cookies (Consent Required)

We use PostHog for product analytics. These cookies are OPTIONAL and only active in production environments.

Data collected by PostHog:

• Page views and navigation paths
• Button clicks and feature usage
• Time spent in application
• User ID (if logged in)
• Device type, browser, screen resolution
• Events: video uploads, share link creation, subscription changes

PostHog Privacy Policy: https://posthog.com/privacy

How to opt-out: Use the cookie banner when you first visit vitelnk, or manage preferences in your account settings.

4.3 Third-Party Authentication Cookies

If you use Google OAuth to log in:

Google Privacy Policy: https://policies.google.com/privacy

Note: Google OAuth is optional. You can register with email/password instead.

4.4 Payment Processing Cookies

When you subscribe via Polar.sh:

Polar.sh Privacy Policy: https://polar.sh/legal/privacy

Note: These cookies are only active during the payment process.

5. Cookie Consent Mechanism

5.1 Cookie Banner

When you first visit vitelnk, you will see a cookie consent banner with the following options:

1. Accept All Cookies - Enables essential + analytics cookies
2. Essential Only - Only enables required cookies (no analytics)
3. Customize - Choose which categories to enable

5.2 What Happens If You Decline Analytics Cookies?

• ✅ You can still use vitelnk fully (no functionality loss)
• ✅ Essential cookies (session, CSRF) remain active (required for security)
• ❌ PostHog analytics cookies are NOT set
• ❌ We cannot track usage patterns to improve the product

5.3 Changing Your Cookie Preferences

You can change your cookie preferences anytime via:

1. Account Settings:

• Dashboard → Account Settings → Privacy & Cookies
• Toggle analytics cookies on/off

2. Cookie Banner:

• Click "Cookie Settings" in the footer
• Modify your preferences

3. Browser Settings (see Section 6):

• Manually delete or block cookies

5.4 Consent Duration

Your cookie consent choices are stored for 1 year. After that, we will ask for consent again.

6. How to Manage Cookies in Your Browser

You can control and delete cookies through your browser settings:

6.1 Google Chrome

1. Click the three dots (⋮) → Settings
2. Privacy and security → Cookies and other site data
3. Choose:
   • Block all cookies (breaks vitelnk login)
   • Block third-party cookies (recommended - blocks PostHog but keeps vitelnk functional)
   • Allow all cookies
4. To delete cookies: Clear browsing data → Cookies and other site data

6.2 Mozilla Firefox

1. Click the three lines (☰) → Settings
2. Privacy & Security → Cookies and Site Data
3. Choose:
   • Standard (blocks known trackers)
   • Strict (blocks all third-party cookies)
   • Custom (configure manually)
4. To delete cookies: Manage Data → Select vitelnk.com → Remove

6.3 Safari (Mac/iOS)

1. Safari menu → Preferences → Privacy
2. Choose:
   • Prevent cross-site tracking (recommended - blocks third-party cookies)
   • Block all cookies (breaks login)
3. To delete cookies:
   • Manage Website Data → Select vitelnk.com → Remove

6.4 Microsoft Edge

1. Click the three dots (…) → Settings
2. Cookies and site permissions → Cookies and site data
3. Choose:
   • Block third-party cookies (recommended)
   • Block all cookies (breaks login)
4. To delete cookies: See all cookies and site data → vitelnk.com → Remove

6.5 Mobile Browsers (iOS/Android)

iOS Safari:

• Settings → Safari → Block All Cookies (or) Prevent Cross-Site Tracking

Android Chrome:

• Chrome → Settings → Site Settings → Cookies
• Choose: Allow / Block third-party / Block all

7. Do Not Track (DNT)

7.1 What is Do Not Track?

Do Not Track (DNT) is a browser setting that signals websites you do not want to be tracked.

7.2 Our DNT Policy

We respect DNT signals. If your browser sends DNT=1, we will:

• ✅ Disable PostHog analytics cookies automatically
• ✅ Disable cross-site tracking
• ✅ Continue using essential cookies (required for login/security)

7.3 How to Enable DNT

Chrome/Edge:

• Settings → Privacy and security → Send a "Do Not Track" request with your browsing traffic

Firefox:

• Settings → Privacy & Security → Send websites a "Do Not Track" signal

Safari:

• Preferences → Privacy → Prevent cross-site tracking (DNT equivalent)

7.4 DNT Limitations

• Not all websites honor DNT signals (we do)
• DNT does NOT prevent essential cookies (login, security)
• Third-party sites (Google OAuth, Polar.sh) may have their own DNT policies

8. Local Storage & Session Storage

In addition to cookies, vitelnk uses browser storage APIs:

8.1 Local Storage

Purpose: Store data that persists across browser sessions

Data stored:

• User preferences (dark mode, language, etc.)
• Session IDs for video viewers (anonymous UUID for analytics)
• Cookie consent choices (1 year)

Privacy: Local storage is first-party only (not shared with third parties)

8.2 Session Storage

Purpose: Store temporary data during a single session

Data stored:

• Temporary video upload progress
• Form data (to prevent loss on accidental refresh)

Privacy: Automatically deleted when you close the browser tab

8.3 How to Clear Local/Session Storage

Chrome/Edge/Firefox:

1. Right-click on the page → Inspect
2. Application tab (Chrome/Edge) or Storage tab (Firefox)
3. Local Storage → vitelnk.com → Clear All

Or: Clear browsing data → Cookies and other site data (also clears storage)

9. Video Viewer Tracking (Share Links)

9.1 Anonymous Session Tracking

When someone views your shared videos (via share links):

• A session ID (anonymous UUID) is generated in their browser (stored in local storage)
• This session ID is used to track viewing events (play, watch progress, CTA clicks)
• No account is required to view shared videos
• IP addresses are hashed (SHA256) for privacy

9.2 Cookies on Share Pages

Share pages (public video viewer pages) do NOT use cookies for tracking. Instead:

• Session ID stored in local storage (not a cookie)
• No third-party tracking (PostHog disabled for viewers)
• No Google OAuth cookies (viewers don't log in)

9.3 Privacy for Viewers

Video viewers (non-account-holders) benefit from:

• ✅ No account required
• ✅ No cookies set (besides essential session cookies if they interact with password-protected links)
• ✅ Hashed IP addresses (privacy-preserving)
• ✅ No cross-site tracking

10. Third-Party Services & Their Cookies

vitelnk integrates with third-party services that may set their own cookies:

10.1 PostHog (Product Analytics)

• Location: US-based (EU hosting available)
• Cookies: ph_* (1 year duration)
• Data Collected: Usage events, page views, user ID
• Privacy Policy: https://posthog.com/privacy
• Opt-Out: Use cookie banner or contact us

10.2 Google OAuth (Optional Login)

• Location: US-based
• Cookies: Various Google authentication cookies
• Data Collected: Google ID, email, profile picture
• Privacy Policy: https://policies.google.com/privacy
• Opt-Out: Use email/password registration instead

10.3 Polar.sh (Payment Processing)

• Location: EU-based
• Cookies: Session cookies during payment flow
• Data Collected: Payment details (processed securely, not stored by vitelnk)
• Privacy Policy: https://polar.sh/legal/privacy
• Opt-Out: Not applicable (required for subscriptions)

10.4 Cloudflare R2 (Video Storage)

• Location: Global CDN (US/EU data centers)
• Cookies: May set performance/security cookies for video streaming
• Data Collected: Viewer IP (for geo-routing), playback metrics
• Privacy Policy: https://www.cloudflare.com/privacypolicy/
• Opt-Out: Not applicable (required for video playback)

10.5 Bunny CDN (Video Streaming)

• Location: Global CDN
• Cookies: May set CDN cookies for performance
• Data Collected: IP address (for geo-routing), playback quality metrics
• Privacy Policy: https://bunny.net/privacy/
• Opt-Out: Not applicable (required for video streaming)

11. Your Privacy Rights

11.1 Rights Under GDPR

You have the right to:

• ✅ Access your data - Request a copy of all data we collect via cookies
• ✅ Delete your data - Request deletion of analytics data
• ✅ Opt-out of tracking - Disable analytics cookies via cookie banner
• ✅ Data portability - Export your data in a machine-readable format

11.2 How to Exercise Your Rights

Email: [email protected]

Include:

• Your registered email address
• Description of your request (e.g., "Delete all PostHog analytics data")
• Proof of identity (if requesting data access/deletion)

We will respond within 30 days (as required by GDPR).

11.3 Withdraw Consent

You can withdraw consent for analytics cookies at any time:

1. Cookie Banner: Click "Cookie Settings" in footer → Disable analytics
2. Account Settings: Dashboard → Privacy & Cookies → Toggle off analytics
3. Email: Contact [email protected]

Withdrawing consent will:

• ✅ Delete PostHog cookies from your browser
• ✅ Disable future tracking
• ❌ NOT delete historical analytics data (but you can request this separately)

12. Children's Privacy

vitelnk is not intended for children under 16 years old.

We do not knowingly:

• Set cookies for children under 16
• Collect data from children via cookies
• Track children across websites

If we discover a child's data has been collected, we will:

1. Delete all cookies associated with their account
2. Delete their account and analytics data
3. Notify the parent/guardian (if contact information is available)

13. International Data Transfers

Some of our third-party cookie providers are based in the United States:

• PostHog - US-based (EU hosting option available)
• Google OAuth - US-based

When cookies transfer data outside the EU/EEA, we ensure protection through:

• Standard Contractual Clauses (SCCs) - EU-approved data transfer agreements
• Adequacy Decisions - EU Commission approval for certain countries
• Privacy Shield alternatives - US companies' GDPR compliance frameworks

EU-based services:

• Polar.sh - EU-based (no international transfer)

14. Changes to This Cookie Policy

14.1 Notification of Changes

We may update this Cookie Policy to reflect:

• Changes in cookie usage
• New third-party integrations
• Legal/regulatory updates

We will notify you via:

• Email to your registered address (30 days advance notice)
• Cookie banner notification
• Update to "Last Updated" date at the top

14.2 Acceptance

Continued use of vitelnk after changes take effect constitutes acceptance of the updated Cookie Policy.

If you do not agree:

• You may disable cookies via your browser
• You may close your account (see Terms of Service)

15. Contact Us

For cookie-related questions or concerns:

Email: [email protected] General Support: [email protected]

Service Provider: Edmilson Jorge Delgado Gomes NIF: 251423832 Portugal

Response Time: We aim to respond to all inquiries within 5 business days.

16. Additional Resources

16.1 Learn More About Cookies

• All About Cookies: https://www.allaboutcookies.org/
• EU Cookie Law Guide: https://ec.europa.eu/info/cookies_en
• ICO Cookie Guidance (UK): https://ico.org.uk/for-organisations/guide-to-pecr/cookies-and-similar-technologies/

16.2 Our Other Policies

• Privacy Policy - How we collect, use, and protect your personal data
• Terms of Service - Rules for using vitelnk
• Refund Policy - Subscription refunds and cancellations

17. Summary of Cookie Types

Thank you for taking the time to understand how vitelnk uses cookies. We are committed to transparency and protecting your privacy.

Last reviewed: December 17, 2025