Cookie Policy
Introduction
This Cookie Policy explains how Vander Designs (“we,” “us,” or “our”) approaches analytics and tracking on our website vanderdesigns.com (the “Website”).
Short version: this site does not set tracking cookies on visitors. We do not use Google Analytics, heat-mapping tools, or any third-party analytics service that places cookies on your device.
What We Actually Use
First-party, cookie-less analytics
We use a lightweight, first-party analytics tool to understand which pages visitors find useful. This tool:
- Does not set any cookies on your device
- Does not collect personal data (no name, email, IP address stored)
- Does not use cross-site tracking or fingerprinting
- Anonymises sessions via a daily-rotating salted hash — each day the hash changes, making it impossible to link visits across days
- Is hosted on our own infrastructure — no data is sent to third parties
One strictly-necessary cookie for logged-in users
Tenant and admin accounts use a single cookie, named vander_rt, to stay signed in. This cookie:
- Is only created when you actively log in to the tenant or admin portal
- Is strictly necessary — it exists to keep you signed in, not to track you
- Is marked HttpOnly, meaning it cannot be read by JavaScript running on this or any page
- Expires after 12 hours of inactivity for staff accounts and 30 days of inactivity for resident accounts
- Is renewed for a fresh 12-hour or 30-day period each time it is used, so an account in regular use stays signed in
- Is cleared when you log out, and stops working immediately when you log out, change your password, or your account is deactivated
- Is never sent to third-party services, and is only ever sent back to the one endpoint that reads it
While you are signed in, a short-lived session credential is also held in your browser’s memory (not written to a cookie or to localStorage) and is discarded automatically when you close the tab.
What We Do NOT Use
- Google Analytics or any Google tracking product
- Heat-mapping or session-recording tools (e.g. Hotjar, Microsoft Clarity)
- Advertising or retargeting cookies
- Social media tracking pixels
- Third-party cookies of any kind
Managing Your Browser
Because we do not set tracking cookies, there is nothing to block or opt out of for analytics purposes. The one cookie we do set, vander_rt, is strictly necessary to keep you signed in and is not used for tracking, advertising, or analytics. If your browser reports other cookies from this domain, they are likely set by your own browser extensions or security tools, not by us.
You can block or delete our sign-in cookie through your browser settings. Doing so is not harmful, but you will not be able to stay signed in to the tenant or admin portal, because the cookie is how the portal recognises you.
You are always free to clear your browser's cookies and storage at any time through your browser settings. Doing so will log you out of the tenant or admin portal if you are currently signed in.
Contact
If you have questions about this Cookie Policy, please contact us:
Changes to This Policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with a new effective date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.