Cookie Policy
VEXORMA (vexorma.com) Last updated: 12 November 2026 · Version 2026-11-12-r8
1. In one line
VEXORMA sets only strictly necessary cookies: one for your Google sign-in session and one short-lived cookie that protects the sign-in handshake. No advertising, tracking or profiling cookies are used, and there is no cookie banner because nothing optional is loaded.
2. Cookies we set
| Name | Type | Purpose | Duration | Third party? |
|---|---|---|---|---|
cpt_session |
HttpOnly cookie | Proves you are signed in with Google. Contains your Google account id, email, name and picture, signed with our secret so it cannot be forged. | 30 days, or until you sign out | No |
cpt_oauth_state |
HttpOnly cookie | One-time value that protects the Google sign-in redirect against cross-site request forgery. Deleted as soon as sign-in finishes. | 10 minutes | No |
Both are first-party, SameSite=Lax, and Secure in production. Neither is used for analytics or advertising.
3. What we store in your browser
| Name | Where | Purpose | Duration |
|---|---|---|---|
vexorma:lang |
localStorage | Remembers English or Italian | Until you clear it |
vexorma_credits_v1 |
localStorage | Local mirror of the free-credit counter (the server is authoritative) | Until you clear it |
| Imported garments and past fittings | IndexedDB | Keeps items you imported and images you generated on your device | Until you delete them |
vx_price_intent |
localStorage | Remembers that you answered the price question, so we do not ask again | Until you clear it |
vx_no_stats |
localStorage | Remembers that you switched usage statistics off | Until you clear it or delete your data |
Your photo never leaves your device except in the request that generates an image. It is not stored in a cookie, in browser storage we control server-side, or in any database.
4. What we do not use
- No advertising, tracking or profiling cookies.
- No third-party analytics that set identifiers (no Google Analytics, no Meta Pixel, no TikTok pixel, no Hotjar).
- No social-media plugins, embedded videos or third-party fonts: fonts are self-hosted from vexorma.com.
- No session replay, fingerprinting or cross-site identifiers.
Usage measurement is first-party and aggregate only. It uses no cookies and shares nothing with third parties; you can switch it off under Manage my data → Usage statistics. See section 3.6 of the Privacy Policy.
3A. Product pictures (content from Shopify)
The start screen shows product pictures. Your browser loads them directly from Shopify's servers, so Shopify receives your IP address and basic browser details when the page opens or a search is used. This is an ordinary website request, not something VEXORMA stores on your device, and we ask your browser not to tell Shopify which page you were on. We do not set cookies for these pictures. We do not control Shopify's servers; see Shopify's own privacy and cookie information. As with any picture on any website, your browser may keep these pictures in its normal cache. See section 3.2A of the Privacy Policy.
5. Links to other sites
When you tap a link to a retailer, you leave VEXORMA. That site may set its own cookies and its own cookie policy applies. Some of these links are affiliate links. Product links in shop search are Shopify's links with their attribution parameters unchanged, and we earn no commission from them at present.
6. How to remove or block cookies and storage
- Manage my data in the footer clears your local archive and the local credit mirror.
- Signing out deletes
cpt_session. - Your browser's site-data settings can remove everything for vexorma.com.
If you clear storage, the server still remembers your free-tier usage by a keyed hash, so the allowance does not reset by clearing your browser.
7. If this changes
If we ever add anything that needs consent (for example advertising or non-anonymous analytics), we will first show a banner that lets you accept or reject with equal ease, load nothing before you choose, and not ask again for at least six months, as the Italian data protection authority's cookie guidelines of 10 June 2021 require. We will update this page and bump the version above.
8. Contact
AmirMohammad Farhang, private individual · Turin, Italy · privacy@vexorma.com
Versione italiana in preparazione. Fino alla pubblicazione fa fede la versione inglese. In sintesi: VEXORMA usa solo cookie tecnici necessari — la sessione Google (cpt_session) e un cookie temporaneo anti-CSRF (cpt_oauth_state) — oltre all'archiviazione locale della lingua, dei capi importati e delle prove. Nessun cookie pubblicitario o di profilazione, nessun banner necessario. Le immagini dei prodotti nella schermata iniziale e nella scheda "Pick from a shop" vengono caricate direttamente dai server di Shopify, che quindi vede il tuo indirizzo IP. Le statistiche d'uso sono raccolte dal nostro sistema, senza cookie e senza condividere dati con terzi, e puoi disattivarle in "Manage my data".