Vultion

Cookie Policy

Version 1.0 · Effective 3 October 2026

About this policy

Vultion Ltd (“Vultion”, “we”, “us”, “our”) sets four cookies when you use this Service, and this page lists them: what each is called, what it is for, and how long it lasts.

All four are strictly necessary. None is used for advertising, analytics or tracking, and there is nothing optional here to turn off. You will still see a notice when you arrive, and it has no switches in it — section 4 explains why, and it is the section worth reading if you came here looking for a preference to change.

The cookies we set

There are four. Every one is first-party — set by this site and not by anybody else — and every one is SameSite=Lax, which means it is not sent on a request that began at another website.

CookieTypeWhat it is forLasts
sb-<project-ref>-auth-tokenStrictly necessaryKeeps you signed in. It holds the session that the authentication service issues when you sign in, so that each request knows who you are without asking again. Without it you cannot sign in at all.Up to 400 days, refreshed as you use it
vultion_railStrictly necessaryWhether you have folded the navigation sidebar to its icons. It is a cookie rather than a setting because it belongs to the person at the screen and not to the church: two staff sharing a desk can disagree about it.1 year
vultion_google_oauth_stateStrictly necessaryA one-time value that proves a Google connection started from this site. It exists to stop a connection being completed by somebody who did not begin it, and it is cleared as soon as the connection finishes or fails.10 minutes
vultion_cookiesStrictly necessaryRecords that you have read the cookie notice, so that it is not shown to you again on every page. It is set only when you dismiss the notice, and it holds nothing but the fact that you did.1 year

“Strictly necessary” is not a phrase we are using loosely. It means each of these is doing a job the Service cannot do without: signing you in, remembering a layout you chose, protecting a connection, or remembering that you have read this page. Remove any one of them and something stops working, which is the test the phrase is supposed to name.

What we do not set

This is the part of a cookie policy that is usually longer than the part listing cookies, and here it is four short paragraphs because each one is simply true:

  • No analytics cookies. We do not run Google Analytics, Plausible, PostHog, Vercel Analytics or any other analytics product. Nothing counts your visit.
  • No advertising or social media cookies. No page of this Service loads a script from an advertising or social network, so there is no pixel, no beacon and no embedded widget to set one.
  • No third-party tracking of any kind. Nothing here tracks you across other websites, and we do not build a profile of you from your visits. We could not do it with these four cookies if we wanted to.
  • No consent-management platform. We do not use a third-party service to ask you about cookies, for the reason the next section gives — there would be nothing for it to ask.

The notice you will see, and why it asks nothing

What the notice does

When you first visit, a bar appears at the bottom of the page. It names the four cookies, links to this page, and has one button reading “Got it”. It does not cover the page, it does not stop you reading or doing anything, and if you ignore it entirely the whole product still works. If you dismiss it, you are not shown it again for a year.

Why there is no switch to turn anything off

A consent banner exists to let you refuse something. There is nothing here to refuse. Every cookie above is necessary for the Service to work, so a toggle beside them would offer you a choice that is not real — and a switch that cannot be turned off is worse than no switch, because it implies the cookies are optional and that not pressing it would stop them. Neither is true. Consent that cannot be withheld is not consent, and presenting it as though it were would be a way of looking compliant rather than being honest.

So this is a notice, not a permission. It tells you what is stored and why, which is the part that is genuinely owed to you, and it does not pretend to hand you a decision you do not have.

If that ever changes

If a cookie that is not necessary is ever added to this Service — an analytics product, say — then this page will change and the notice will change with it, to ask rather than to report, before that cookie is set. We are stating that here so that the absence of a switch is a promise about this product rather than an accident of how it was built.

Managing cookies in your browser

What you can do

Every browser lets you see the cookies a site has set, block cookies from a site, and delete the ones already stored. Those controls are in your browser’s settings, usually under Privacy or Security, and they work on this site as they do on any other.

What happens if you block them

Blocking the cookies above will stop you using the Service. Without the session cookie you cannot sign in, and without the Google state cookie a connection cannot be completed. We would rather say that plainly than offer a “manage your preferences” page that only leads back to the same four cookies with no way to remove them.

If you delete them

Deleting them signs you out and resets your sidebar to its open position, and the notice will appear once more the next time you visit — because the cookie that remembered you had read it is one of the ones you deleted. None of that affects anything held about your church, which lives on our servers rather than in your browser.

Changes, and how to ask about this policy

Changes

We may change this policy as the Service changes. A change is published on this page with a new version number and effective date, in the way section 18.2 of the Terms of Service describes. Where a change would add a cookie that is not necessary, section 4.3 above is the promise that the notice will ask rather than report before it is set.

Questions

Questions about this policy go to support@vultion.com. Where your question is about personal data rather than about cookies, section 9 of the Privacy Policy explains what is held and names the Data Protection Officer to write to.

This policy is governed by the laws of the Federal Republic of Nigeria. Where it is translated, the English version prevails.

This site uses four cookies, and none of them is optional. Three keep the product working — your sign-in, whether the sidebar is folded, and the Google connection — and the fourth remembers that you have read this. There is nothing here to switch off. Read the Cookie Policy