Draft: not in force
This document is a draft. It is not in force yet and may change before VYBE launches.
VYBE Cookie Notice
Version 2026-11-15Effective November 15, 2026
Contents
Effective date: {{EFFECTIVE_DATE}}
This notice explains the cookies and similar technologies used on vybe-co.com and in the VYBE apps. It is part of our Privacy Policy.
1. The short version
- VYBE uses only a handful of first-party cookies that keep you signed in, carry the age check during sign-up, remember your language and time zone, and remember an Ambassador referral code.
- We use no advertising cookies, no analytics cookies and no social media pixels. [DRAFT — counsel] Two things can involve other companies: a bot check by Cloudflare on the sign-up and report forms, and TikTok or YouTube videos in Creator portfolios, which load only when you press play (section 4).
- Our fonts are hosted on our own servers, so loading a page does not send your information to a font service.
- Because every cookie we set is needed for the Platform to work or to do what you asked, we do not show a cookie banner to US visitors.
2. What cookies are
A cookie is a small text file a website stores in your browser. It lets the site remember something between pages or visits, such as that you are signed in.
3. The cookies we set
| Cookie | What it does | How long it lasts | Type |
|---|---|---|---|
__Host-vybe_session | Keeps you signed in. Its contents are encrypted, and it cannot be read by scripts on the page. | 30 days at most, and it ends after 7 days without use | Strictly necessary |
__Host-vybe_login | Holds a temporary security value while you sign in, so the sign-in cannot be hijacked. | 10 minutes | Strictly necessary |
__Host-vybe_signin | Remembers a sign-in that is in progress. | 5 minutes | Strictly necessary |
vybe_age_block | If we could not create an account for you because of the age check, remembers that for 30 days. It contains no date of birth and does not identify you. | 30 days | Strictly necessary |
VYBE_LOCALE | Remembers the language you chose. | 1 year | Functional (remembers your choice) |
VYBE_TZ | Stores your browser's time zone (for example "America/New_York") so we can show dates and times in your local time. It is not used for tracking. | 1 year | Functional (display preference) |
vybe_ref | If you arrive through an Ambassador's link or QR code, remembers that Ambassador's referral code and whether you came by link or QR. It is signed so it cannot be tampered with. It does not identify you. It is only read if you create a Brand account, so we can credit the Ambassador who referred you. If you already have a valid code remembered, a later link does not replace it ("first touch wins"). | 30 days | Functional (referral) |
All of these cookies are set by VYBE (vybe-co.com) and sent only over secure connections in production. None of them is shared with advertisers or used to follow you on other websites. In local development (not on vybe-co.com) the sign-in cookies have the same names without the __Host- prefix.
Staff site. Our internal admin site, used only by VYBE staff, uses a session cookie and a notice cookie. They work the same way and are not used on the public site.
4. Cookies set by other companies
When you are sent to a page run by one of our service providers, that provider may set its own cookies on its own domain, under its own policy:
- Stripe, when you add a card or confirm a payment on a Stripe page;
- Zitadel, our sign-in provider, if a sign-in step takes place on its pages;
- [DRAFT — counsel] Cloudflare Turnstile, a security check that tells people from bots, on the sign-up form and the report forms. It processes your IP address, browser details and connection details to decide whether you are a person. Cloudflare also uses these signals to improve its bot detection, under the Turnstile Privacy Addendum; and
- [DRAFT — counsel] TikTok and YouTube, only when you press play on a portfolio video. Until then we show a still image from VYBE and nothing loads from TikTok or YouTube. When you press play, the platform's player loads from its own site and may set cookies or store an identifier in your browser under TikTok's or Google's privacy policy. We use YouTube's privacy-enhanced mode.
These cookies and signals are used to provide the payment, sign-in, security or video service and for security and fraud prevention. VYBE does not control them. See the Stripe and Zitadel privacy policies for details.
5. Mobile apps
The VYBE apps do not use cookies for tracking. They store your sign-in tokens in your phone's secure storage (the iOS Keychain or Android secure storage). If we could not create an account for you because of the age check, the app remembers that on your device for 30 days, without storing your date of birth. Android backups of app data are turned off. The apps use no advertising identifiers and no analytics tools.
6. Other storage on the website
Our website does not use browser local storage or session storage. A video player you start (section 4) may use your browser's storage under its own policy.
7. Your choices
- You can block or delete cookies in your browser settings. If you block
__Host-vybe_session,__Host-vybe_login, or__Host-vybe_signin, you will not be able to sign in. - If you delete
vybe_ref, no Ambassador will be credited for referring you. [DRAFT — counsel] If no referral applies, no Referral Fee is added to your Collaborations. When an Ambassador referral applies, you pay a Referral Fee of 1% of the creator fee, shown as its own line before you accept a Creator; it funds the Ambassador's commission. - Do Not Track and Global Privacy Control: we honour these signals. Because we do not track you across sites and do not sell or share personal information, there is nothing further to switch off (see section 8 of the Privacy Policy).
8. Changes
If we ever add analytics or other non-essential cookies, we will update this notice and, where the law requires it, ask for your consent first.
9. Contact
Questions: [email protected] · {{COMPANY_LEGAL_NAME}}, {{COMPANY_POSTAL_ADDRESS}}