Cookie Policy
Last updated: October 20, 2026
This policy explains which cookies and other browser-stored data are used when you use vibe-coding.academy and vibot.app (together, the "Service"), operated by Veridux Labs ("we", "us"). It supplements the Privacy Policy and the Terms of Service.
The Hebrew version of this policy is the governing version. This English text is a translation; if the two conflict, the Hebrew version prevails.
1. What cookies and local storage are
A cookie is a small text file a website stores in your browser. Local storage (localStorage) and session storage (sessionStorage) are similar browser features; localStorage stays until it is cleared, and sessionStorage is deleted when you close the tab.
In this policy, "cookies" covers all of these. Most of what we store in your browser is your lesson progress and your Studio projects, and it is not sent to us.
2. Categories
- Essential: needed for the site to work, for example sign-in, language and security. You cannot turn these off without breaking the Service.
- Preferences and progress: remembers what you did and chose on the site. Stored only in your browser.
- Analytics: helps us understand how many people visit, which pages they use and which channel brought them. Provided by Google Analytics, StatCounter and Veridux Analytics, and loaded only if you click "Accept all" in the cookie banner.
We do not currently use advertising cookies. A Google Ads tag exists in the code but is switched off; if we switch it on, we will update this policy first.
3. Essential
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| sb-<project>-auth-token | Cookie | Supabase (בשבילנו / for us) | Keeps you signed in to your account. Only set if you sign in. May be split into several cookies (.0, .1). | Until you sign out, or up to about 400 days |
| sb-<project>-auth-token-code-verifier | Cookie | Supabase (בשבילנו / for us) | One-time code that secures sign-in with Google or with an email link. | Until sign-in completes |
| vca-locale | Cookie | Veridux Labs | Remembers the site language you chose, so pages show in the right language. | 1 year |
| vca_github_state | Cookie | Veridux Labs | Protects against request forgery when you connect GitHub to Studio. Only set if you choose to connect. | 10 minutes |
| vca.consent | localStorage | Veridux Labs | Your choice in the cookie banner ("Essential only" or "Accept all") and when you made it, so it is respected on every page and you are not asked again. | 12 months, then we ask again |
| vca-claude-zero-early-access-code | localStorage | Veridux Labs | Keeps the invite code you entered for gated modules, so the server can verify it and unlock the lessons. | Until you clear it in your browser |
| codevibe_feedback_data | localStorage | Veridux Labs | Local fallback in the admin panel when the server is unavailable. Only set for site staff. | Until you clear it in your browser |
4. Preferences and progress
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| vca-completed-lessons, vca-total-xp, vca-lesson-<id> | localStorage | Veridux Labs | Lessons you finished, your XP and the code you wrote in a lesson, so you can pick up where you left off. | Until you clear it in your browser |
| vca-course-progress, vca-track-progress, vca-zero-hero-progress, vibe-tutorial-<id> | localStorage | Veridux Labs | Progress in courses, tracks and tutorials. If you are signed in, progress is also saved to your account. | Until you clear it in your browser |
| vca-first-project-journey-v1, vca.starter-plan.v1, vca.goal (formerly vca.lane) | localStorage | Veridux Labs | The path you chose, the starter plan and your first-project steps. | Until you clear it in your browser |
| vca-quiz-score-<course>, vca-quiz-pass-<course> | localStorage | Veridux Labs | Your end-of-course quiz result, used to issue a completion certificate. | Until you clear it in your browser |
| vca-studio-projects, vca-studio-project, vca-studio-ckpt-<id>, vca-studio-model, vca-studio-github-repo:<id> | localStorage | Veridux Labs | Your Studio projects, checkpoints, chosen model and GitHub repository name. Projects are saved in your browser, not on our servers (except an app you choose to publish). | Until you clear it in your browser |
| vca-lesson-feedback | localStorage | Veridux Labs | Local copy of lesson feedback, only if sending it to the server failed. | Until you clear it in your browser |
| recentPages | localStorage | Veridux Labs | A short list of pages you recently visited on the site, for quick access. | Until you clear it in your browser |
| feedbackDismissed, feedbackLastSubmitted | localStorage | Veridux Labs | Remembers that you closed or sent the feedback box, so it is not shown again. | Until you clear it in your browser |
| vca.review.measurement.consent | localStorage | Veridux Labs | Your choice whether to allow anonymous measurement of session checks. Default: off. | Until you clear it in your browser |
| vca-coin-highscore | localStorage | Veridux Labs | Your high score in the demo game in the game tutorial. | Until you clear it in your browser |
5. Analytics
The Google Analytics, StatCounter and Veridux Analytics cookies and identifiers are created only after you click "Accept all". Before that, or if you choose "Essential only", their scripts are not loaded at all. Google Analytics runs with Consent Mode v2, where the default is no consent. Veridux Analytics does not count a browser that sends a Do Not Track signal.
We also use Vercel Web Analytics and Vercel Speed Insights, which do not store cookies or an identifier in your browser, so they run regardless of your banner choice. Vercel receives your IP address as part of hosting the site.
The site's own browser ID, vca.sid, is kept regardless of the banner and is used only for the funnel events we store ourselves (no IP address, no email, never sent to a third party). Campaign parameters (vca.attribution) are stored only after "Accept all", and are then attached to events sent to Google Analytics.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| _ga, _ga_KSH5HMQ37T | Cookie | Google Analytics (Google) | A random identifier that tells visitors and visits apart, for site usage statistics. | Up to 2 years |
| sc_is_visitor_unique | Cookie | StatCounter | A random identifier that stops the same visitor being counted twice. | 2 years |
| is_unique (statcounter.com) | Cookie | StatCounter | StatCounter third-party cookie that tells first visits from return visits. | Up to 5 years |
| _vdx_uid | localStorage | Veridux Analytics | A random visitor identifier for site usage statistics. | Until you clear it in your browser |
| _vdx_session | sessionStorage | Veridux Analytics | A random visit (session) identifier. | Until you close the tab |
| _vdx_optout | localStorage | Veridux Analytics | Remembers that you asked not to be counted (set by visiting a URL with ?vdx_optout=1). | Until you clear it in your browser |
| vca.sid | localStorage | Veridux Labs | A random browser ID for funnel events we store ourselves (paywall view, click, checkout start, lesson start and completion), so we count visitors rather than clicks. | Until you clear it in your browser |
| vca.attribution | localStorage | Veridux Labs | Campaign parameters from the link that brought you here (utm_*, gclid), so we know which channel works. Stored only after "Accept all". | Until you clear it in your browser |
6. Embedded third-party content
- YouTube videos: most videos are embedded through youtube-nocookie.com, which does not store cookies until you play the video. The video inside an interactive lesson is embedded through youtube.com, and Google may set its own cookies when it loads. Video thumbnails load from i.ytimg.com.
- Studio: an app preview may load Tailwind from cdn.tailwindcss.com, and React mode loads CodeSandbox's runtime (Sandpack). These services see your IP address. Code you write in a lesson or in Studio can use local storage inside the preview frame.
- Google sign-in and Lemon Squeezy checkout happen on their own sites, where their cookie policies apply.
7. How to control cookies
You can delete or block cookies and local storage in your browser settings. Blocking essential cookies stops you signing in, and clearing local storage deletes progress and projects that are stored only in your browser.
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
- Google Analytics: Google's opt-out browser add-on, https://tools.google.com/dlpage/gaoptout
- Veridux Analytics: visit the site with ?vdx_optout=1 at the end of the address.
On your first visit, a cookie banner offers two options: "Essential only" (only essential cookies and the preferences and progress data kept in your browser) or "Accept all" (analytics cookies too). Until you choose, analytics cookies are not loaded. Your choice is stored in your browser (vca.consent) for 12 months and applies on every page of the site.
You can change your choice at any time with the button below. If you switch from "Accept all" to "Essential only", the page reloads without those scripts; cookies already set are removed only when you clear them in your browser.
8. Changes to this policy
When we add or remove a cookie, we update the list and the date at the top of this page. For a material change, such as starting to use advertising cookies, we will announce it on the site, and email registered users, at least 14 days before it takes effect.
9. Contact
Questions about cookies or privacy: contact@vibe-coding.academy.