Cookie Policy

COOKIE POLICY

Last updated September 30, 2026

This Cookie Policy explains the cookies and similar technologies used on the Vibetester website at https://www.vibetester.app/ (the "Website"), operated by Grainbox Limited ("we", "us", "our").

It is short because there is little to describe. We set one cookie, it is necessary to make the service work, and we do not use cookies for analytics, advertising or tracking you across websites.

THE COOKIE WE SET

• Name: vibe_session
• Type: first-party, strictly necessary
• Expires: 2 hours after it is set
• What it holds: where you are in the ordering steps — the site address you entered, whether its ownership has been verified, and a reference to any test logins you supplied. It also holds a signed count of recent requests, which is how we limit abuse of the ordering form. It is signed so it cannot be altered, and it contains no advertising or tracking identifier.

The cookie is set with HttpOnly (it cannot be read by scripts in your browser), Secure (it is only ever sent over HTTPS) and SameSite=Lax (it is not sent when another website links into ours).

We do not store anything else on your device. The Website uses no local storage, no session storage and no tracking pixels or web beacons.

WHY WE DO NOT ASK FOR YOUR CONSENT

Consent is required for cookies that are not necessary to provide a service you asked for. Ours is necessary: without it the ordering steps cannot remember your site between pages, so there is nothing for you to choose and no preference for us to store. This is the "strictly necessary" exemption in the EU ePrivacy Directive and equivalent rules elsewhere.

If we ever add analytics or any other non-essential cookie, we will ask first and this page will change before it happens.

OTHER PARTIES

We set no third-party cookies, and the Website's content security policy prevents third-party scripts from running on it at all. Two things are still worth telling you about, because your browser contacts another company even though no cookie is involved:

Fonts. Our pages load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google receives your IP address and browser details in order to serve the font files. Google states that Google Fonts sets no cookies.

Payment. If you pay for a test, you are taken to a checkout page hosted by Stripe on Stripe's own website. Card details are entered there and never reach us. Any cookies Stripe sets are set on Stripe's pages under Stripe's privacy policy, not ours.

HOW TO CONTROL OR REMOVE THE COOKIE

You can block or delete cookies through your browser settings. Because our one cookie is necessary, blocking it means the ordering steps will not work — each page will send you back to the start, because nothing remembers the site you entered. The rest of the Website, including this page and our other policies, reads perfectly well without it.

Instructions for the most common browsers: Chrome, Firefox, Safari, Edge.

CHANGES TO THIS POLICY

We will update this page if what we store changes. The date at the top shows when it last did.

CONTACT

If you have any questions about this policy, please email us at vibetester@grainbox.com or write to:

Grainbox Limited

Wellington, Wellington 5026

New Zealand