Session cookie
`session`: session JWT. Needed to keep you logged in. httpOnly, sameSite=lax, expires in 7 days.
`vit-goauth`: only if you sign in with Google. Stores a random value for 10 minutes so that, when you come back from Google, we can verify you started that sign-in. Deleted as soon as it is used. httpOnly, sameSite=lax.
Browser local storage
We keep some data in your own browser (localStorage/sessionStorage), not in cookies. None of it is sent to third parties:
`vit-cart:{store}`: your cart inside a store, so it survives a refresh. Cleared when you place the order.
`vit-cart-changed`: internal signal to sync the cart across tabs.
`vit-checkout-started-{store}`: remembers that you started a checkout (our own conversion metric).
`vit-viewed:{store}`: dedupe view counting per tab. Cleared when the tab closes.
`vit-chat-nombre` and `vit-chat:{store}`: store the name you entered and your conversation in a store's chat, so we don't ask again.
`vit-last-seen-order-ts`: marks the last order you saw, to notify you of new ones without repeating.
`vit-ref`: if you arrived via a referral link, remembers who invited you so they get credit.
`vit-origen`: remembers which site you came from (for example a social network), so that if you open an account we know how you found us. Stored on arrival, cleared when the tab closes.
`vit-theme`: your theme preference (light/dark).
`vit-landing-viewed` and `vit-landing-sections`: home page state (which sections you've seen).
`vit-cookies`: remembers that you accepted this notice.
`vit-panel-token`: your session inside the vendor dashboard (dash.vitrama.com). It is a credential: signing out deletes it.
`vit-panel-handoff-state`: temporary value used to hand your session from the site to the dashboard safely. Lasts seconds.
`vit-new-order`: remembers which orders we already notified you about, so we do not repeat it.
`vit-upsell-widgets`: remembers that you dismissed the widgets notice, so we do not show it again.
`vit-nudge-{topic}`: remembers that we already showed you a prompt in the dashboard (create your store, add your first product) during that visit.
No third-party cookies
We don't use Google Analytics, Facebook pixels or retargeting. To measure web traffic we use Cloudflare Web Analytics, which uses no cookies and no identifier and does not track you across sites: it counts page views anonymously and in aggregate. All our other metrics are computed server-side.
How to block
You can clear cookies and local storage from your browser settings. Without the session cookie you won't be able to log into the dashboard; the public storefront still works.