01What this covers
Cookies are small files a site asks your browser to keep and send back on the next request. Vessero uses very few of them, and one of them is the reason you stay signed in.
This page also lists what we keep in your browser's local storage, which is not technically a cookie but is stored on your device just the same, and you deserve to know about it in the same place.
02Essential cookies
These make the service function. They cannot be switched off from inside the product, because without them there is no signed-in session to switch anything off in.
- authjs.session-token
- Your signed-in session. HTTP-only, so page scripts cannot read it, and sent over HTTPS only in production, where it is named __Secure-authjs.session-token. Expires when the session does.
- authjs.csrf-token
- Protects sign-in and sign-out from cross-site request forgery. Without it, another site could try to act as you.
- authjs.callback-url
- Remembers where to send you after a Google sign-in completes, so a shared link still lands on the page you clicked.
03Analytics cookies
We use PostHog to understand which features get used and where the product breaks. It sets one cookie, and it is served through our own domain rather than a third-party host.
- ph_…_posthog
- A random identifier that lets us count one person browsing five pages as one visit rather than five. It holds no name or email until you sign in. Expires after about a year.
Typed input is masked before anything is sent, so the text of your prompts and scripts is never captured by analytics. Anonymous visitors are counted without creating a profile.
04Kept in your browser
Some things are kept on your device rather than on our servers, because they are about this browser rather than your account. None of them is a cookie, none is sent to us with your requests, and none is used to track you across other sites. One is sent to us once, on purpose: the record of how you first arrived, which your first sign-in attaches to your account before it is deleted.
- lutti-theme
- Your light, dark or system theme. Remembers a choice you made.
- lutti-ui
- Whether the sidebar is collapsed. Remembers a choice you made.
- vessero:workspace-row
- Whether the sidebar shows a workspace switcher, so it keeps its place while loading. Remembers a choice you made.
- lutti:music-likes
- The tracks you liked on the Music page. Remembers a choice you made.
- image-processing-queue
- Images still generating, so a reload keeps showing them. Needed for something you asked for.
- prompt-to-motion:index
- The list of your Prompt to Motion sessions on this device. Needed for something you asked for.
- prompt-to-motion:session:…
- Each Prompt to Motion session on this device, one key per session. Needed for something you asked for.
- songJobNotificationsEnabled
- Whether finished songs raise a browser notification. Remembers a choice you made.
- vessero:first-touch
- How you first arrived: the referral or affiliate link you followed, the campaign tags in its address, the site that sent you and the page you landed on. Sent to your account once, when you first sign in, and then deleted. With Global Privacy Control or Do Not Track on, only a referral code is kept. Tells us how you found us, once.
- vessero:reviewer-name
- The name you gave on a review page, so the next review you are sent does not ask for it again. Remembers a choice you made.
- initialAttachedImages
- Images you attached, carried to the Prompt to Motion editor. Needed for something you asked for.
- lutti-pending-space-invite
- A share-link invite, kept while you sign in. Needed for something you asked for.
- vessero:pending-brief
- A brief you typed before signing in, kept while you sign in. Needed for something you asked for.
- vessero:pending-app
- An App’s form you filled in before signing in, kept while you sign in. Needed for something you asked for.
A name ending in … stands for a family of keys, one per saved item. Clearing your browser's site data for Vessero removes all of these.
05What we do not use
No advertising cookies, no third-party tracking pixels, no data brokers, and no cross-site profiling. We do not sell what we collect. If that ever changes, it will be announced here and you will be asked first.
06Managing cookies
Every major browser can block or clear cookies for a site, usually under Privacy or Site Settings. Blocking the essential cookies above will sign you out and keep you out — nothing else on Vessero will work without a session.
Blocking the analytics cookie is safe and changes nothing about how the product behaves. Browser "Do Not Track" and Global Privacy Control signals are honoured where your browser sends them.
07Questions
Ask at support@vessero.com. The wider picture of what we collect and why is in the Privacy Policy.