Cookies
Last updated 15 May 2026.
Essential — always on
Session token cookies (set by Supabase Auth) and CSRF cookies. Without these the service cannot remember you between page loads.
Functional — opt-out
Language preference, theme preference, dismissed banners. These improve the experience but are not strictly required.
Analytics — opt-in (post-launch)
PostHog self-hosted, EU region, no personal identifiers. We will surface a consent banner before any analytics cookie is set.
No tracking, no ad pixels
Visito never loads Facebook Pixel, Google Ads tags, TikTok pixel, or similar third-party trackers. This is a brand commitment, not just a policy.