1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites function efficiently, improve user experience, and provide information to website owners. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (stored for a set period after you leave).
In addition to cookies, we may also use similar technologies including web beacons (tracking pixels), local storage objects (LSOs/HTML5), and fingerprinting techniques. References to "cookies" in this policy include these technologies where applicable.
This Cookie Policy should be read alongside our Privacy Policy.
2. Who Sets Cookies?
First-party cookies are set by Viraloo directly on viraloo.org and any campaign pages hosted on our platform. Third-party cookies are set by external services we embed or integrate with. You can identify third-party cookies by checking the domain shown in your browser's cookie manager.
3. Categories of Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the platform to function. They cannot be disabled without severely impacting functionality. No consent is required for their use as they have no alternative.
- Session cookie (laravel_session): Maintains your authenticated session while you are logged in. Session duration. First party.
- CSRF token (XSRF-TOKEN): Prevents cross-site request forgery attacks. Session duration. First party.
- Cookie consent record: Stores your cookie consent preferences so you are not asked repeatedly. 12 months. First party.
- Dark/light mode preference: Remembers your display theme choice. 12 months. First party.
3.2 Functional Cookies
These cookies enable enhanced functionality and personalisation. They may be set by us or third-party providers.
- Locale/language preference: Remembers your preferred language or locale setting. 12 months. First party.
- Onboarding state: Tracks which onboarding steps you have completed to avoid repetition. 30 days. First party.
3.3 Referral and Attribution Cookies
These cookies are a core part of Viraloo's campaign functionality. They attribute campaign entries and referrals to the correct source and are technically necessary for the referral tracking service that Operators have contracted for.
- Referral code cookie (vrl_ref): Stores the referral code of the person who referred a campaign participant, enabling accurate referral attribution. 30 days from first visit. First party.
- Campaign entry cookie (vrl_entry_{id}): Records that a participant has already entered a specific campaign, preventing duplicate entry errors. Campaign duration. First party.
- UTM tracking parameters: Records the marketing source, medium, and campaign from the URL (e.g., UTM tags) to help Operators understand traffic sources. 30 days. First party.
3.4 Analytics Cookies
These cookies help us and Operators understand how the platform and campaign pages are used, enabling data-driven improvements. Where possible, data is anonymised or aggregated.
- Internal analytics: Page view counts, feature usage rates, session duration, and funnel analysis. Data is aggregated server-side. 24 months. First party.
3.5 Payment Processing Cookies (Third Party)
When you make a payment through Viraloo, Stripe, Inc. may set cookies to facilitate secure payment processing and fraud prevention. These are subject to Stripe's Privacy Policy.
4. Cookies Set on Campaign Pages
Campaign landing pages hosted on Viraloo's platform may set additional cookies on behalf of the Operator who created the campaign. The Operator, as data controller, is responsible for disclosing these cookies in their own privacy and cookie notices. The referral attribution cookies (Section 3.3) are set on campaign pages as part of the core service.
5. Legal Basis for Cookie Use
- Strictly necessary cookies: No consent required — legitimate interests/contract performance (PECR Regulation 6(4) exemption; ePrivacy Directive Art. 5(3) exemption)
- Referral and attribution cookies: No consent required for platform account holders (contract performance); consent obtained from campaign participants via campaign entry consent flows where required
- Functional cookies: Legitimate interests / consent where required by applicable law
- Analytics cookies: Consent (where required); legitimate interests (where analytics are strictly internal and anonymised)
6. Managing and Disabling Cookies
You have several options to manage cookies:
- Browser settings: Most browsers allow you to view, block, or delete cookies. Instructions vary by browser:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
- Opt-out tools: For third-party analytics, you may opt out using the Digital Advertising Alliance (optout.aboutads.info) or European Interactive Digital Advertising Alliance (youronlinechoices.eu) tools
- Do Not Track: We respect browser Do Not Track signals for analytics tracking where technically feasible
Important: Blocking strictly necessary cookies will prevent you from logging in or using the platform. Blocking referral tracking cookies on a campaign page means your referrals may not be correctly attributed.
7. Updates to This Policy
We may update this Cookie Policy as we add new features or in response to legal changes. We will notify you of material changes via the platform or email. The "Last updated" date on this page reflects the most recent revision.
8. Contact
Questions about our use of cookies: privacy@viraloo.org.