Cookie Policy

Vestra uses one strictly-necessary cookie: a secure, HTTP-only session cookie set when you sign in, which keeps you authenticated as you move between pages. This cookie:

• Is required for the platform to function — you cannot stay signed in without it.
• Cannot be read by JavaScript running in your browser (it is HTTP-only), which protects it from common attacks.
• Expires automatically, or when you sign out.

Vestra does not currently use analytics, advertising, or third-party tracking cookies of any kind. We don't run tools like Google Analytics, ad-retargeting pixels, or social-media trackers. If this changes in the future, we will update this policy and, where required by law, ask for your consent first.

Under the NDPA and general best practice, strictly-necessary cookies (like our session cookie) don't require a cookie-consent banner, because the platform cannot function without them — there's no non-essential use for you to opt out of. If we ever add non-essential cookies (e.g. analytics), we will add a consent mechanism at that point.

You can clear or block cookies at any time through your browser's settings. Doing so will sign you out of Vestra and require you to log in again the next time you visit.

We may update this Cookie Policy if the cookies we use change. Material changes will be reflected in the "Last updated" date above.