Loading...
Last updated: April 21, 2026
VibeWise ("VibeWise," "we," "us," or "our") uses cookies and similar technologies to operate our website and mobile application (the "Platform") and to keep your session secure. This Cookie Policy explains what cookies we use, why we use them, and how you can manage them, in accordance with Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and the General Data Protection Regulation (GDPR).
Cookies are small text files stored on your device (computer, smartphone, or tablet) when you access or use the Platform. They help us recognise your device and maintain a secure sign-in session.
Cookies may be:
We process personal data collected via cookies under the following legal bases:
Under the PDPO, we ensure that data collected is adequate but not excessive, is used only for stated purposes, and appropriate security safeguards are applied.
These cookies are essential for the operation of VibeWise and cannot be disabled without breaking core functionality. They support:
| Cookie Name | Purpose | Duration |
|---|---|---|
sb-*-auth-token | Stores your encrypted session token (JWT) issued by Supabase (Supabase Inc., our authentication and database provider). Required to keep you signed in. | Session (cleared on sign-out) |
sb-*-auth-token-code-verifier | Holds the PKCE code verifier during the OAuth sign-in flow with Google (Google LLC) or Facebook (Meta Platforms, Inc.). Deleted immediately after sign-in completes. | Very short-lived (seconds) |
Legal basis: Legitimate interests / necessity to provide the service
In addition to cookies, VibeWise uses browser Local Storage (a similar client-side storage technology) for two purposes:
| Key | Purpose | Duration |
|---|---|---|
vw_age_certified | Records that you have completed the age self-certification on this device so you do not need to re-check the box on subsequent sign-ins. Stores the value true. No personal data. | Persistent (until you clear browser data) |
| Key | Purpose | Duration |
|---|---|---|
vw_age_cert (cookie) | A short-lived bridge cookie (5 minutes) set immediately before OAuth sign-in to pass your age certification to our server so it can be recorded in the database. Automatically expires after 5 minutes. | 5 minutes |
Use of Local Storage for this strictly necessary purpose falls within the EU ePrivacy Directive (2002/58/EC) Article 5(3) exemption for storage that is technically necessary to provide a service explicitly requested by the user.
When you sign in with Google (Google LLC) or Facebook (Meta Platforms, Inc.), those providers set their own cookies on their domains (not on ours) as part of the OAuth handshake. We do not receive or store these cookies; they are managed entirely by Google and Meta/Facebook under their own privacy policies.
Once sign-in is complete, only the Supabase session cookies listed above remain active on our Platform.
We do not use:
Because all cookies we set are strictly necessary, they are exempt from prior consent under the EU ePrivacy Directive (2002/58/EC). However, you can still manage or delete them at any time.
Browser or device settings:
Most browsers allow you to view, block, or delete cookies. Useful links:
Please note: disabling authentication cookies will prevent you from signing in to VibeWise.
Supabase (Supabase Inc., our authentication and database provider) stores session data on servers in Southeast Asia (Singapore). Supabase's service infrastructure also operates in the United States. Both transfers are subject to Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives equivalent protection to that required under Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and GDPR.
Session cookies are deleted when you sign out or close your browser. The Supabase session token has an expiry set by Supabase's infrastructure; it is automatically refreshed while you are actively using the app and invalidated on sign-out.
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to withdraw consent or lodge a complaint with a supervisory authority.
To exercise these rights, contact us using the details below.
We may update this Cookie Policy periodically. Material changes will be communicated through the Platform or by other appropriate means.
If you have questions about this Cookie Policy or our data practices: