This Cookie Policy lists what Sparrow Soul ("we", "us", "our") stores in your browser when you use virtunatia.com, and on your device when you use the Virtunatia app. It is an inventory of what our software actually sets, not a description of what websites in general do. How the information is used is in the Privacy Policy.
What cookies and similar technologies are
A cookie is a small text record a website asks your browser to keep and send back on later requests, so the site can recognise the browser — for example to keep you signed in. Browser storage (localStorage and sessionStorage) holds records in the same way but they are never sent to a server automatically; the page has to read them. A mobile app has no cookies; it keeps the equivalent records in the app's own storage on the device.
A first-party cookie is set by the site you are visiting; a third-party cookie is set by another company's domain. Everything on this page is first-party: nothing on virtunatia.com sets a cookie for another domain.
Cookies on virtunatia.com
These are the only cookies the website sets.
| Cookie | Set when | Purpose | Category | Expires |
|---|---|---|---|---|
__Secure-account-auth.session_token | You sign in | Identifies your signed-in session. Marked HttpOnly, Secure and SameSite=Lax, so scripts cannot read it and other sites cannot send it | Essential | 30 days from the last time it was refreshed, which happens while you keep using the site; removed when you sign out |
ph_phc_rBZWyvHVFTcvnVpE5JDCLUsTZzr8LYGJhnBq7YJirxob_posthog | You accept analytics in the cookie banner | Holds the random visitor and device identifiers, the current session identifier with its timing, the page you first landed on and the site that sent you there, and a note that you are not identified — what PostHog, our analytics provider, uses to count your visits as one visitor. The middle part of the name is our PostHog project's public key. Set for .virtunatia.com so it covers www. as well | Analytics | 1 year, or until you reset your choice |
The essential cookie cannot be declined: without it you cannot stay signed in. Nothing else about the site depends on cookies, so with analytics declined the site works exactly the same.
Browser storage on virtunatia.com
Not cookies, and never sent to a server on their own, but stored in your browser all the same:
| Key | Where | Purpose | Category | Kept |
|---|---|---|---|---|
virtunatia-consent | localStorage | Remembers whether you accepted or declined analytics in the cookie banner, or reset that choice | Essential | Until you clear the site's data |
virtunatia-theme | localStorage | Remembers your light, dark or system theme choice | Essential | Until you clear the site's data |
ph_…_posthog (the same name as the cookie) | localStorage | The rest of PostHog's state: the identifiers again, the properties attached to each analytics event (including labels naming the version of our software), the settings PostHog's servers have told it to use, and the analytics queue | Analytics | Until you reset your choice or clear the site's data |
Several entries whose names start with the same ph_… prefix | sessionStorage | Per-tab state for PostHog: the page you arrived from, which browser tab an event came from, and diagnostic details about how the analytics software started | Analytics | Until you close the tab |
__ph_opt_in_out_phc_rBZWyvHVFTcvnVpE5JDCLUsTZzr8LYGJhnBq7YJirxob | localStorage | Written by PostHog once you have reset an accepted choice, to record for itself whether analytics are off (0) or on again (1); it holds that digit and nothing else | Essential | Until you clear the site's data |
The analytics entries only exist after you accept the banner: the analytics software is not loaded before that, so it has written nothing. Resetting your choice removes the cookie and the localStorage entry at once; the per-tab entries go when the tab closes.
Storage in the app
The Virtunatia app keeps these records on your device:
| Record | Where | Purpose |
|---|---|---|
virtunatia_cookie and virtunatia_session_data | The device's secure storage (the iOS Keychain or Android's encrypted storage) | Your signed-in session and a cached copy of your account details, so the app can keep you signed in |
virtunatia.themePreference | The app's private storage | Remembers your light, dark or system theme choice |
virtunatia.consent | The app's private storage | Remembers whether you accepted or declined analytics — in the prompt shown when the app is first opened, or with the Analytics switch on the account screen afterwards |
| PostHog's state | The app's private storage | The random installation identifier and the properties attached to each analytics event, and the queue of events waiting to be sent. Only present while analytics are on: nothing is written before you accept them, and turning them off removes it |
| Sentry's state | The app's private storage | A random installation identifier attached to error reports, and reports and logs waiting to be sent, kept on disk so a crash does not lose them |
| Expo's state | The app's private storage | A random installation identifier sent when the app checks for an update, and the downloaded updates to the app's code |
What the app's analytics record is in the Privacy Policy. Signing out empties the two session entries, turning analytics off removes PostHog's state, and uninstalling the app removes the rest. On iOS the two session entries live in the Keychain, which can keep them through an uninstall until the app is reinstalled and you sign out, or you delete your account.
What we do not use
- No advertising or tracking cookies. We show no advertisements, and no cookie on the site is used to follow you to other sites or to build a profile of your interests.
- No third-party cookies. Our analytics and error-reporting providers are configured to store nothing under their own domains; the only analytics cookie is the first-party one above.
- No tracking pixels or web beacons, on the site or in the emails we send. Our emails contain no images or hidden trackers, so we cannot tell whether you opened one.
- No Flash cookies or other plugin storage.
Error reporting runs on the site from page load, before and regardless of the banner, but it sets no cookie and stores no identifier in your browser. The performance traces the same software can send — how long a page load or a navigation took — go only while you have accepted analytics.
How to control cookies
The banner. The first time you visit, a banner asks whether you accept analytics. Accept loads the analytics software and sets the analytics cookie; Decline stores that choice and loads nothing. Either way the choice is kept in virtunatia-consent so you are not asked again.
Changing your mind. Reset your choice here, or with the same control on your account page: that stops analytics at once, removes the analytics cookie and storage, and the banner asks again. In the app, the Analytics switch on the account screen turns them off or on the same way.
Your browser. Every browser lets you view, delete and block cookies, either for all sites or for particular ones. The vendors' own instructions are here for Chrome, Firefox, Safari, Edge and Opera. If you block the essential cookie you will not be able to stay signed in.
Do Not Track and Global Privacy Control. The site does not read these browser signals; the banner is the control instead.
Changes to this policy
We will update this page whenever the software changes what it stores — a new cookie, a renamed key, a changed lifetime. The date at the top is the date of the current version.
Contact
Questions about cookies or storage: contact@virtunatia.com.