Legal
Cookie Policy
- Effective:
- September 4, 2026
- Last updated:
- September 4, 2026
1. What cookies are
A cookie is a small text file a site asks your browser to store and send back on later requests. Related technologies — local storage, session storage, and a browser extension's own extension storage — keep data on your device in a similar way without sending it automatically. This policy covers all of them, and forms part of our Privacy Policy.
A first-party cookie is set by the site you are visiting; a third-party cookie is set by another domain whose content the page loads. A session cookie is deleted when you close the browser; a persistent cookie has an expiry date.
2. Our approach
Because we set no analytics or advertising cookies, there is no cookie banner to click through — there is nothing to consent to beyond the cookies that make signing in work at all.
3. Cookies we set
These are set by videovoiceoverai.com. All are marked HttpOnly where the browser does not need to read them, Secure so they travel only over HTTPS, and SameSite so they are not sent on cross-site requests.
| Name | Purpose | Type | Expires |
|---|---|---|---|
better-auth.session_token | Keeps you signed in. Without it you would have to re-enter your password on every page. | Strictly necessary | 30 days, or when you sign out |
better-auth.state | Holds the one-time value that ties a “Sign in with Google” request to the response that comes back, which is what stops a forged sign-in. | Strictly necessary | 15 minutes |
better-auth.pkce_code_verifier | The PKCE secret for the same Google sign-in exchange. Set only if you use Google, and deleted as soon as the exchange completes. | Strictly necessary | 15 minutes |
ad_impersonate | Set only for our own support staff, when an administrator views an account to investigate a ticket you raised. It is signed, audit-logged, and grants sight only — never the ability to act as you. | Strictly necessary | Session |
We also use your browser's local storage for small interface preferences, such as remembering which tab of the dashboard you last had open. That data stays on your device and is never sent to us.
4. Third-party cookies
Two providers may set cookies when you use a specific feature. Neither is used for advertising.
| Provider | When | What it is for |
|---|---|---|
| Cloudflare | On the sign-in, sign-up and password-reset pages, where the Turnstile bot check runs. | Confirms you are a person rather than a script, and can remember that you already passed a challenge so you are not asked again. Cloudflare states these cookies are not used for tracking or advertising. |
| Stripe | Only if you start a checkout or open the billing portal, both of which happen on Stripe's own pages. | Fraud prevention and payment processing. Those cookies are set by Stripe on Stripe's domain, under Stripe's privacy policy — not by us. |
If you never sign in and never subscribe, neither of these is ever set.
5. Analytics without cookies
For website traffic we self-host Umami, an open-source, privacy-focused analytics tool that runs on infrastructure we control rather than a third-party ad-tech platform.
- It sets no cookies and stores nothing on your device.
- It records only the page visited, the referring page, and coarse browser, device type, and country.
- It creates no persistent identifier, so it cannot recognise you on a return visit or follow you to another site.
- The data is aggregated and is never linked to your account, your email address, or the videos you dub.
If you would still rather not be counted, any browser-level tracker blocker will stop the script loading, and nothing about the Service breaks when it is blocked.
6. The browser extension
The extension does not use cookies. It stores your language and voice preferences in your browser's extension storage, and — if you have connected an account — the access token that identifies you to our API.
Removing the extension deletes that storage. You can also revoke the access token at any time from Dashboard → Account → Connected devices, which takes effect immediately.
7. How to control cookies
In your browser
Every major browser lets you see the cookies a site has set, delete them, and block them — usually under Settings → Privacy and security. Blocking all cookies for videovoiceoverai.com is your right, but it will stop sign-in working: without a session cookie there is no way for the site to know the request is yours.
The free tier is unaffected. It needs no account, so it needs no cookies.
From your account
Signing out clears your session cookie. Dashboard → Account → Connected devices shows every session and extension link currently active, and lets you revoke any of them remotely.
8. Consent and legal basis
Under the EU ePrivacy Directive, the UK PECR, and comparable rules, consent is required for cookies that are not strictly necessary to provide a service you have requested. Every cookie described in §3 falls within that strictly-necessary exemption, and our analytics sets no cookie, so no consent banner is required.
If we ever introduce a cookie that is not strictly necessary, we will ask for your consent first, give you a real choice to decline, and make withdrawing it as easy as giving it.
9. Do Not Track and Global Privacy Control
There is no agreed standard for responding to a "Do Not Track" browser signal, so we do not act on it differently — we run no advertising or cross-site tracking for it to disable. We honour a Global Privacy Control signal as an opt-out of sale and sharing wherever the law requires; as we do neither, nothing about our processing changes.
10. Changes to this policy
If we add, remove, or change the purpose of a cookie, we will update the table in §3 and the "last updated" date at the top of this page before the change takes effect. Where the new cookie requires consent, we will ask for it rather than assume it.
11. Contact
Questions about cookies or anything else in this policy go to privacy@videovoiceoverai.com; general support is at support@videovoiceoverai.com. This policy is issued by Video Voice Over AI and should be read with our Privacy Policy and Terms of Service.