Cookie Policy

Last updated: June 10, 2026

1. What Is a Cookie?

A cookie is a small text file placed on your device (computer, smartphone, or tablet) when you visit a website. Cookies allow the site to recognise your device and store certain information about your preferences or past actions. They are not programs and cannot carry viruses or malware.

Similar technologies include local storage (used by web browsers to store data persistently), session storage, and pixels. References to "cookies" in this policy include these similar technologies where relevant.

This policy applies to vyndexo.com and the Vyndexo Studio SaaS platform hosted under the same domain. It is issued in compliance with the Belgian Act of 13 June 2005 on electronic communications (as amended to implement EU Directive 2009/136/EC, the "Cookie Directive") and the GDPR.

2. Our Approach to Cookies

We take a minimal approach to cookies. We do not use advertising cookies, retargeting pixels, social media tracking scripts, or third-party behavioural profiling tools. We do not serve cookies from third-party ad networks.

We use only the cookies described in this policy, categorised below as: Strictly Necessary, Functional, and Analytics.

Under Belgian and EU law, strictly necessary cookies do not require your prior consent. All other cookies require your freely given, specific, informed, and unambiguous consent before being set, which we obtain through our cookie consent banner.

3. Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the website and Vyndexo Studio to function correctly. They cannot be disabled without breaking core functionality. No consent is required for these cookies under Article 129 §1 of the Belgian Act of 13 June 2005 (implementing Article 5(3) of Directive 2002/58/EC as amended).

Cookie name Set by Purpose Duration Type
session_id Vyndexo Maintains your authenticated login session in Vyndexo Studio. Required to keep you logged in as you navigate between pages. Session (deleted when browser closes) or up to 30 days if "Stay logged in" is selected Strictly Necessary
csrf_token Vyndexo Cross-Site Request Forgery protection token. Prevents unauthorised form submissions and protects your account security. Session Strictly Necessary
cookie_consent Vyndexo Stores your cookie consent preferences so we do not show the consent banner on every page visit. 12 months Strictly Necessary
studio_tier Vyndexo Stores your subscription tier (free/paid) to display the correct features and limits without repeated database queries. Session or until subscription changes Strictly Necessary

3.2 Functional Cookies

These cookies remember your preferences and personalise your experience. They are not essential to the basic operation of the site but improve usability. They require your prior consent.

Cookie name Set by Purpose Duration Type
ui_theme Vyndexo Remembers your display preference if you have customised the Vyndexo Studio interface (e.g. layout settings). 12 months Functional
lang_pref Vyndexo Stores your preferred language if you have selected one other than the browser default. 12 months Functional

3.3 Analytics Cookies

We use privacy-respecting analytics to understand how visitors use our website — which pages are most visited, where visitors come from, and how they navigate the site. This helps us improve our content and user experience. Analytics cookies require your prior consent.

We do not use Google Analytics. Where we use analytics, we use a privacy-first, EU-hosted solution (such as a self-hosted Plausible Analytics instance or equivalent) that does not set persistent tracking cookies, does not build cross-site profiles, and does not share data with third-party advertising networks. Where such tools operate without setting cookies at all (cookieless analytics), no cookie consent is required for them; this table will be updated accordingly.

Cookie name Set by Purpose Duration Type
_vynx_anon Vyndexo (first-party) Anonymous analytics identifier. Used to understand session-level behaviour (page views, referral source) without identifying individual users. No cross-site tracking. Not linked to any personal data. Session only Analytics

3.4 Third-Party Cookies

We do not deliberately place third-party advertising or tracking cookies on our site. However, the following third-party components may set their own cookies when you interact with them:

Third party Context Cookies Their privacy policy
Stripe Payment processing on Vyndexo Studio checkout and billing pages Stripe sets cookies required for secure payment processing and fraud prevention (e.g. __stripe_mid, __stripe_sid). These are strictly necessary for the payment flow. stripe.com/privacy
Google Fonts Loading the Syne typeface via Google Fonts CDN Google Fonts may log the font request (IP address, browser type, referring URL) for abuse prevention. We have configured the font import to limit data transfer to the minimum necessary. No persistent tracking cookies are set by Google Fonts in standard use. policies.google.com/privacy

Vyndexo is not responsible for the cookie practices of third-party services. Please review their respective privacy policies for details of their cookie use.

4. How to Manage Your Cookie Preferences

4.1 Our Cookie Consent Banner

When you first visit vyndexo.com, a cookie consent banner will be displayed. You can accept all cookies, reject non-essential cookies, or customise your preferences by category. Your choice is stored in the cookie_consent cookie for 12 months. You can change your preferences at any time by clicking the "Cookie Settings" link in the footer.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. Strictly necessary cookies will continue to operate regardless of your consent choice.

4.2 Browser Settings

You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair the functionality of Vyndexo Studio (you will not be able to remain logged in). Browser-level cookie controls:

How to manage cookies in common browsers

Google Chrome: Settings → Privacy and security → Cookies and other site data
support.google.com/chrome/answer/95647

Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
Mozilla Firefox cookie guide

Apple Safari: Preferences → Privacy → Manage Website Data
Apple Safari cookie guide

Microsoft Edge: Settings → Privacy, search, and services → Cookies and site permissions
Microsoft Edge cookie guide

4.3 Opt-Out of Analytics

You can opt out of analytics tracking at any time by:

5. Legal Basis for Cookie Processing

Cookie category Legal basis Consent required?
Strictly Necessary Legitimate interests / necessity for the provision of the service requested by the user (Article 5(3) Directive 2002/58/EC; Article 129 §1 Belgian Act of 13 June 2005) No — exempt
Functional Consent (Article 6(1)(a) GDPR; Article 129 Belgian Act of 13 June 2005) Yes
Analytics Consent (Article 6(1)(a) GDPR; Article 129 Belgian Act of 13 June 2005) Yes
Stripe payment cookies Strictly necessary for requested payment transaction; legitimate interests (fraud prevention) No — exempt (payment pages only)

6. Data Retention for Cookies

Cookie lifetimes are shown in the tables in Section 3. Session cookies are deleted when you close your browser. Persistent cookies expire at the stated duration or when you delete them manually. Analytics data derived from cookies is retained for up to 13 months in rolling aggregate form, after which it is anonymised or deleted, per our Privacy Policy.

7. Changes to This Cookie Policy

We may update this Cookie Policy to reflect changes in the cookies we use, legal requirements, or our practices. When we make changes, we will update the "Last updated" date at the top of this page. Where changes affect cookies for which you previously gave consent, we may reset your consent preferences and ask you to consent again. We encourage you to review this page periodically.

8. Contact

If you have questions about our use of cookies or wish to exercise your rights under GDPR in relation to data processed via cookies, please contact us:

Vyndexo
Brussels, Belgium
contact@vyndexo.com

You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD) at www.dataprotectionauthority.be if you believe your rights under GDPR or the Belgian privacy legislation have been infringed.