Cookie Policy
Cookies at Veto
Last updated: April 6, 2026
This Cookie Policy explains how Plaw, Inc. ("Plaw," "we") uses cookies and similar technologies (including localStorage) on veto.so and related subdomains. It supplements our Privacy Policy.
1. What Are Cookies?
Cookies are small data files stored on your device by your browser. We also use browser localStorage, which serves a similar purpose but stores data in your browser's local storage area rather than as traditional cookies. Both are covered by this policy and by the EU ePrivacy Directive (2002/58/EC) and equivalent national implementations.
2. Categories of Cookies We Use
Essential
Required for the Services to function. These cannot be disabled without breaking core functionality like authentication, workspace selection, and display preferences. No consent is required for essential cookies under the ePrivacy Directive.
Analytics
Used to understand how the product is used so we can improve it. Analytics cookies are only set after you consent via our cookie banner. We use PostHog for product analytics, configured with aggressive PII masking and property denylists.
3. Complete Cookie List
| Name | Type | Purpose | Duration | Domain |
|---|---|---|---|---|
| better-auth session cookie | Essential | Authenticates your session across veto.so subdomains | 30 days (extends on activity) | .veto.so |
| veto_auth_token | Essential | Stores JWT bearer token for API authentication | Session (localStorage) | veto.so |
| veto_auth_user | Essential | Stores serialized user profile for client-side rendering | Session (localStorage) | veto.so |
| veto_current_org | Essential | Persists your active organization selection | Persistent (localStorage) | veto.so |
| veto_current_project | Essential | Persists your active project selection | Persistent (localStorage) | veto.so |
| veto-theme | Essential | Stores your light/dark/system display preference | Persistent (localStorage) | veto.so |
| veto_cookie_consent | Essential | Records your cookie consent choice (accepted/declined) | Persistent (localStorage) | veto.so |
| veto_onboarding_dismissed | Essential | Remembers if you dismissed the onboarding checklist | Persistent (localStorage) | veto.so |
| PostHog identifiers (ph_*) | Analytics | Product analytics: pageviews, feature usage, session tracking | Persistent (localStorage) | veto.so |
4. How to Control Cookies
- Cookie banner: When you first visit veto.so, a banner asks for your consent to analytics cookies. You can accept or decline. Your choice is stored in veto_cookie_consent.
- Changing your choice: Clear the veto_cookie_consent entry from your browser's localStorage (via DevTools > Application > Local Storage) and reload the page to see the banner again.
- Browser settings: Most browsers let you block or delete cookies and localStorage. Note that blocking essential cookies will prevent you from logging in.
- Do Not Track / GPC: We respect the Do Not Track (DNT) browser signal and the Global Privacy Control (GPC) signal. When either is detected, analytics tracking is suppressed regardless of consent state.
5. Third-Party Cookies
We do not use third-party advertising or marketing cookies. The only third-party data processing related to cookies is PostHog (analytics), which operates as a data processor under our instructions and our DPA. PostHog does not share your data with any other party.
6. Updates to This Policy
We will update this page when our cookie usage changes and revise the "Last updated" date. Material changes to analytics tracking will trigger a new consent prompt.
7. Contact
Questions about cookies? Contact team@plaw.io.