Cookie policy
Last updated 1 September 2026.
This page lists everything VibeMyExpt stores in your browser, why it is there, and how long it stays. Nothing beyond the essential entries is set unless you have accepted it.
If you are taking part in a study
We do not run analytics inside a study. On study pages no analytics tag is loaded and no analytics cookie is set, whatever you chose on the rest of the site.
The data a study itself collects is described in that study's consent form, and is controlled by the researcher running it, not by us. If you want your study data removed, contact the researcher named on the consent form.
What we store
| Name | Type | Set by | Purpose | Kept for |
|---|---|---|---|---|
| access_token | Cookie Essential | VibeMyExpt | Keeps you signed in. httpOnly and SameSite=Lax, so it cannot be read by scripts and is not sent on cross-site requests. | 1 hour |
| refresh_token | Cookie Essential | VibeMyExpt | Renews your session without asking you to sign in again. Scoped to the authentication endpoints only. | 30 days |
| vibemyexpt.cookie-consent | Local storage Essential | VibeMyExpt | Remembers whether you accepted or refused analytics, so we stop asking. Held in local storage rather than a cookie so that recording a refusal does not itself set one. | Until you clear your browser storage |
| _ga, _ga_* | Cookie Analytics | Google Analytics | Counts visits and shows which pages are used. Set only after you accept, and never on a study you are taking part in. | Up to 2 years |
Your choice
Essential entries cannot be turned off — without them you cannot stay signed in. Analytics is off until you accept it, and you can change your mind here at any time.
Current setting: not chosen yet — analytics is off
Refusing analytics stops the tag loading on your next page view. To clear a Google Analytics cookie already set, clear site data for this domain in your browser settings.
Fonts and other third parties
Web fonts are served from our own domain, so loading a page does not reveal your address to a font provider. Google Analytics is the only third party that receives anything about your visit, and only with your consent.