Cookie Policy
Effective 15 October 2026.
Vector uses only the cookies it needs to work. There are no analytics, advertising or tracking cookies, and nothing that follows you to other sites, so there's no consent banner to click through.
What cookies are
Small files a site stores in your browser and reads back later. They're how a site remembers that you're signed in from one page to the next.
The cookies we set
| Cookie | What it's for | How long it lasts |
|---|---|---|
| Sign-in session | Keeps you signed in, set by our sign-in provider, Neon | Until you sign out or the session expires |
| Session cache | A signed copy of your session, so pages don't have to re-check it every time | 5 minutes |
| GitHub connect state | Ties GitHub's reply to the browser that asked, and remembers which page to send you back to | 10 minutes, and only while connecting GitHub |
All of them are first-party, and the sign-in and GitHub cookies are set
HttpOnly, so scripts on the page can't read them.
Cookies set by our host
Cloudflare, which hosts Vector, may set short-lived cookies to tell people from bots and to block attacks. They don't identify you and aren't used for tracking. See Cloudflare's own cookie policy for details.
Turning cookies off
You can block or delete cookies in your browser settings. The site's public pages will still work, but you won't be able to sign in or connect GitHub.
Changes
If we ever add a cookie that isn't strictly necessary, we'll update this page first and ask for your consent before setting it.