# Cookies · VapCal

Language: EN

## Cookies

VapCal uses cookies and similar technologies in line with Swiss and EU privacy expectations (nFADP / GDPR-style transparency). You can choose optional categories in the Soft candy consent banner. Essential cookies cannot be disabled — without them login and security (CSRF) do not work.

##### Essential (always on)

- **vapcal\_s** — PHP session cookie (HttpOnly, SameSite=Lax, Secure on HTTPS). Purpose: login session, CSRF protection, flash messages. Duration: browser session. Provider: VapCal / Creabyte.

Theme and language preferences may also be stored in your browser’s **localStorage** (not HTTP cookies). Consent choice is stored in localStorage as vapcal-cookie-consent.

##### Analytics (optional)

- **Google Analytics** (e.g. \_ga, \_gid) — usage statistics only if you enable Analytics and the admin has configured a Measurement ID. Provider: Google.

##### Marketing (optional)

- **Meta / Facebook Pixel** (e.g. \_fbp) — marketing measurement only if you enable Marketing and the admin has configured a Pixel ID. Provider: Meta.

Optional scripts load **only after** your consent. You can change your choice anytime via “Cookie settings” on this page or by clearing site data. Contact: [Contact](/contact). Operator: Creabyte — [creabyte.com](https://creabyte.com).

---

HTML version: https://www.vapcal.com/cookies · Updated: 2026-10-04 · For AI agents: https://www.vapcal.com/agents.md