Cookie policy
Vryne sets as few cookies as possible. There are no advertising, tracking or profiling cookies, and no data is passed to third parties for advertising purposes. Our reach measurement works without cookies as well.
This is the English translation of the German original. In case of discrepancies, the German version prevails.
As of: 30 August 2026
Which cookies are set
Two — and both are technically necessary.
| Name | Purpose | Storage period |
|---|---|---|
__Secure-better-auth.session_token | Keeps the sign-in alive | 7 days |
vryne_consent | Remembers your privacy choice | 182 days |
Both are HttpOnly and SameSite=Lax; the session cookie is also Secure. The
session cookie contains only a random identifier — no content from your
documents and no personal data. The choice cookie contains exactly two
characters: a version number and a yes or no.
Without signing in and without a decision in the notice, Vryne sets no cookie at all.
Which organisation is currently active is not stored in the cookie but on the session record on the server.
Reach measurement without cookies
We count how often a page is opened — with Fathom Analytics, a service that explicitly works without cookies and without recognition. The script is loaded through an endpoint in the EU.
This produces:
- no identifier, no cookie, no entry in your browser’s storage
- no fingerprint from screen size, fonts or similar
- no full IP address in the evaluation, no link to your account and no passing on to advertising networks
Because nothing is stored on your device or read from it, § 25 (1) TDDDG does not apply: consent is not required for this. The legal basis for processing is our legitimate interest in a rough usage statistic (Art. 6 (1) lit. f GDPR).
Why there is still a notice
Because a right to object is only worth something if you can find it. The notice on the first visit is therefore not a consent banner that blocks the service, but information with a switch next to it. You can object to the measurement there at any time (Art. 21 GDPR) — after that the script is not loaded at all.
The choice can be changed at any time: via Privacy settings in the footer of every page.
What we do not do
- No Google Analytics, no Matomo, no advertising networks
- No embedded fonts or scripts from third-party servers — we serve fonts ourselves
- No passing on of usage data to third parties
- No cookie and no identifier for reach measurement
Deleting cookies
Both cookies can be deleted at any time through the browser settings; signing out of Vryne removes the session cookie as well. If the choice cookie is deleted, the notice appears again on the next visit.
Back to the privacy centre.