Vlogerly logo

Last update: December 6, 2025

1. Executive Summary

This Cookie Policy explains what cookies are and how Vlogerly uses them in its content management and blog publishing platform. By using our services (administrative workspace and public blog center), you agree to the use of cookies as described in this document.

Key information:

  • Vlogerly uses essential cookies for authentication and basic functionality

  • We employ third-party analytical cookies (Hotjar) to improve the experience

  • You can manage your cookie preferences from your browser

  • We do not use advertising or tracking cookies for commercial purposes

This policy complements our Privacy Policy and Terms of Service.

2. What are cookies?

Cookies are small text files that websites store on your device (computer, tablet, or mobile) when you visit them. They contain information that allows your browser to be recognized between different visits.

The cookies used by Vlogerly serve the following functions:

Technical: They enable navigation and use of basic functionalities such as access to secure areas or user session management.

Analytical: They help understand how users interact with the platform, which pages they visit, and what problems they encounter, enabling continuous improvements.

Functional: They remember your preferences (language, interface settings) to personalize your experience without needing to reconfigure on each visit.

3. Cookies Used by Vlogerly

First-party Cookies

Cookie: __session

  • Priority: Essential

  • Purpose: HTTP-only cookie that stores the Firebase Authentication session token. Allows keeping the user authenticated between requests.

  • Duration: 7 days

  • Provider: Vlogerly (Firebase Admin SDK)

Third-party Cookies

Cookie: _hjSessionUser_*

  • Priority: Analytical

  • Purpose: Identifies a unique user for Hotjar across multiple sessions on the same site.

  • Duration: 1 year

  • Provider: Hotjar

Cookie: _hjSession_*

  • Priority: Analytical

  • Purpose: Maintains current session data in Hotjar.

  • Duration: 30 minutes

  • Provider: Hotjar

Cookie: _hjIncludedInSessionSample_*

  • Priority: Analytical

  • Purpose: Determines if the user is included in the session recording sample.

  • Duration: 30 minutes

  • Provider: Hotjar

Cookie: _hjAbsoluteSessionInProgress

  • Priority: Analytical

  • Purpose: Detects a user's first session.

  • Duration: 30 minutes

  • Provider: Hotjar

Cookie: _hjFirstSeen

  • Priority: Analytical

  • Purpose: Records if this is the first time a user visits the site.

  • Duration: Session

  • Provider: Hotjar

Cookie: _hjTLDTest

  • Priority: Analytical

  • Purpose: Technical cookie to determine the correct top-level domain.

  • Duration: Session

  • Provider: Hotjar

Technical notes:

  • The * suffix in Hotjar cookie names represents the unique site ID (e.g., _hjSessionUser_1234567)

  • The __session cookie is configured with HttpOnly, Secure (in production), and SameSite=Lax flags

4.1. Essential Cookies

Name: __session
Description: Authentication cookie generated by Firebase Admin SDK. Stores an encrypted session token that verifies the user's identity on each request to the server.

Technical characteristics:

  • Type: HTTP-only (not accessible from JavaScript)

  • Security: Secure flag enabled in production (HTTPS)

  • SameSite: Lax (CSRF protection)

  • Duration: 7 days (604,800 seconds)

  • Renewal: Automatic on each login

Why it's essential: Without this cookie, users cannot maintain active sessions, access the administrative workspace, create projects, write articles, or manage their account.

4.2. Analytical and Performance Cookies

Vlogerly uses Hotjar to analyze user behavior and improve the experience. These cookies collect aggregated and anonymous information about:

  • Pages visited and time spent

  • Clicks, cursor movements, and scrolling

  • Forms you interact with (without capturing entered data)

  • Device and browser used

  • Errors or technical problems encountered

Hotjar cookies:

  • _hjSessionUser_*: Identifies unique users (1 year)

  • _hjSession_*: Current session data (30 min)

  • _hjIncludedInSessionSample_*: Recording sampling control (30 min)

  • _hjAbsoluteSessionInProgress: First session detection (30 min)

  • _hjFirstSeen: First visit marker (session)

  • _hjTLDTest: Root domain determination (session)

Legal basis: Implied consent by using the platform. You can disable Hotjar by following their opt-out instructions: https://www.hotjar.com/policies/do-not-track/

5. Third-Party Cookies

5.1. Services Used

Firebase Authentication (Google)

Purpose: User authentication management (email/password and Google sign-in).
Cookies: __session (set by Vlogerly using Firebase Admin SDK).
Data processed: User UID, email, name, profile photo (if using Google Sign-In).
More information: Firebase Privacy Policy

Hotjar

Purpose: User behavior analysis, session recording (without sensitive data capture), heat maps, and feedback.
Cookies: _hjSessionUser_*, _hjSession_*, _hjIncludedInSessionSample_*, _hjAbsoluteSessionInProgress, _hjFirstSeen, _hjTLDTest.
Data processed: Device technical information, interface interactions, pages visited.
More information: Hotjar Privacy Policy

Sentry

Purpose: Error and application performance monitoring.
Cookies: Sentry does not use traditional cookies but may store information in browser local storage to track errors.
Data processed: Error technical information, stack traces, session data related to failures.
More information: Sentry Privacy Policy

Cloudinary

Purpose: Storage and delivery of images (avatars, article covers, project logos).
Cookies: Cloudinary does not set cookies in the user's browser from Vlogerly.
Data processed: Images uploaded by authenticated users.
More information: Cloudinary Privacy Policy

Note about Google Sign-In: If you use the Google sign-in option, Google may set its own authentication cookies. See Google's Cookie Policy.

6.1. Essential Cookies

Legal basis: Legitimate interest (Art. 6.1.f GDPR) and contractual necessity (Art. 6.1.b GDPR).

Essential cookies are strictly necessary to provide the service you have requested (blog and article management). Without these cookies:

  • You could not log in or maintain an active session

  • You would not have access to administrative workspace functionalities

  • You could not create, edit, or publish projects or articles

They do not require prior consent according to the ePrivacy Directive (Directive 2002/58/EC) and local regulations such as the Spanish LSSI.

6.2. Analytical Cookies

Legal basis: Implied consent (continued use of the platform).

Hotjar's analytical cookies help us to:

  • Identify usability problems and errors

  • Understand which functionalities are most used

  • Optimize design and workflow

  • Improve the overall platform experience

You can disable these cookies at any time using your browser options or Hotjar's opt-out mechanism without affecting Vlogerly's basic functionality.

7.1. Browser Control

All modern browsers allow cookie management. You can:

  • Block all cookies: Prevents websites from storing cookies

  • Delete existing cookies: Removes already stored cookies

  • Accept/reject specific cookies: Decide which cookies to allow

  • Private browsing: Prevents cookie storage on your device

Warning: Blocking the essential __session cookie will prevent you from logging into Vlogerly.

7.2. Instructions by Browser

Google Chrome

  1. Open Chrome and click the menu (three dots) > Settings

  2. Go to Privacy and security > Cookies and other site data

  3. Select See all cookies and site data

  4. Search for Vlogerly's domain and manage cookies individually

Official documentation: https://support.google.com/chrome/answer/95647

Mozilla Firefox

  1. Open Firefox and click the menu (three lines) > Settings

  2. Go to Privacy & Security > Cookies and Site Data

  3. Click Manage Data to view and delete specific cookies

Official documentation: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Safari

  1. Open Safari > Preferences (Cmd+,)

  2. Go to the Privacy tab

  3. Click Manage Website Data to control cookies

Official documentation: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

Microsoft Edge

  1. Open Edge and click the menu (three dots) > Settings

  2. Go to Cookies and site permissions > Cookies and site data

  3. Select See all cookies and site data to manage cookies

Official documentation: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Private/Incognito Browsing

  • Chrome: Ctrl+Shift+N (Windows) / Cmd+Shift+N (Mac)

  • Firefox: Ctrl+Shift+P (Windows) / Cmd+Shift+P (Mac)

  • Safari: Cmd+Shift+N

  • Edge: Ctrl+Shift+N (Windows) / Cmd+Shift+N (Mac)

7.3. Consequences of Blocking Cookies

Essential cookies (__session):

  • You will not be able to log into Vlogerly

  • You will lose access to the administrative workspace

  • You will not be able to manage projects or articles

Analytical cookies (Hotjar):

  • The platform will function normally

  • You will not contribute to usage statistics

  • Your sessions will not be recorded for UX analysis

Recommendation: Keep essential cookies enabled and decide according to your preferences regarding analytics.

8. Similar Technologies

In addition to cookies, Vlogerly uses other browser storage technologies:

LocalStorage

Purpose: Persistent storage of user preferences and application state (Pinia store).
Stored data:

  • Authenticated user information (UID, name, email, avatar)

  • Last session verification timestamp (lastMeAt)

  • Temporary form state (article drafts)

Duration: Indefinite until the user logs out or deletes browser data.
Location: apps/app/app/stores/auth.ts, apps/app/app/stores/article/new.ts

SessionStorage

Purpose: Vlogerly does not currently use SessionStorage.
Status: Not implemented.

IndexedDB

Purpose: Vlogerly does not directly use IndexedDB.
Status: Not implemented (may be used internally by Firebase or Service Workers).

Service Workers / PWA (Progressive Web App)

Purpose: Offline functionality and resource caching to improve performance.
What it stores:

  • Loaded images ("images" cache, max 60 entries, 30 days)

  • API responses ("api" cache, NetworkFirst strategy)

  • Application static files (HTML, CSS, JS)

Technology: @vite-pwa/nuxt with Workbox.
Configuration: apps/app/nuxt.config.ts (lines 105-122).

Management:

  • Service Workers can be disabled from browser DevTools (Application > Service Workers > Unregister)

  • Cache is automatically cleared according to defined policies (30 days for images)

Note: Service Workers are essential for PWA functionality (installation as native app, limited offline access). Their deactivation does not prevent normal use of Vlogerly in online mode.

9. Social Media Cookies

Current status: Vlogerly does not integrate social media sharing buttons that set third-party cookies directly on our platform.

Google Sign-In: When using the "Sign in with Google" option, communication is established with Google servers, which may generate Google's own cookies in your browser. These cookies are outside Vlogerly's control.

Applicable policy: Google's Cookie Policy

Future: If social media sharing buttons (Twitter/X, Facebook, LinkedIn) are implemented, this policy will be updated with the specific cookies of each service.

10. Advertising Cookies

Vlogerly DOES NOT use advertising cookies.

We do not use cookies to:

  • Track your behavior for advertising purposes

  • Create user profiles for targeted advertising

  • Share data with advertising networks

  • Display personalized ads based on your browsing

Commitment: Vlogerly is a productivity platform oriented to content creators. We do not monetize through advertising and have no intention of introducing advertising cookies in the future.

11. International Data Transfers

Some of the third-party services we use may transfer data outside the European Economic Area (EEA):

Firebase (Google)

Server location: United States and other global regions.
Transfer mechanism: Standard Contractual Clauses (SCC) approved by the European Commission.
Certification: Google complies with the EU-U.S. Data Privacy Framework.
More information: https://firebase.google.com/support/privacy

Hotjar

Server location: European Union (main servers) and United States.
Transfer mechanism: Standard Contractual Clauses (SCC).
Certification: Hotjar complies with GDPR.
More information: https://www.hotjar.com/legal/policies/privacy/

Sentry

Server location: United States.
Transfer mechanism: Standard Contractual Clauses (SCC).
Certification: Sentry complies with GDPR and is certified under the EU-U.S. Data Privacy Framework.
More information: https://sentry.io/legal/dpa/

Cloudinary

Server location: Configurable by region (United States, Europe, Asia).
Transfer mechanism: Standard Contractual Clauses (SCC) depending on configuration.
More information: https://cloudinary.com/privacy

Guarantee: All our providers comply with applicable data protection regulations (GDPR, LGPD, CCPA) and use appropriate security measures to protect your data.

12. User Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding the processing of your data through cookies:

Right of access: Request information about which cookies are active and what data they collect.

Right of rectification: Correct inaccurate personal data stored through cookies or similar technologies.

Right to erasure ("right to be forgotten"): Request the deletion of your personal data. You can delete cookies manually from your browser.

Right to object: Object to the use of non-essential cookies (analytical). Use Hotjar's opt-out options or disable cookies from your browser.

Right to data portability: Request a copy of your data in a structured, machine-readable format.

Right to withdraw consent: You can withdraw your consent to the use of analytical cookies at any time without affecting the lawfulness of prior processing.

How to exercise your rights:

Response time: We will respond to your requests within a maximum of 30 days.

13. Changes to the Policy

Vlogerly reserves the right to modify this Cookie Policy at any time to:

  • Reflect changes in the technologies used

  • Comply with new legal obligations

  • Improve the clarity and transparency of information

Change notification:

  • We will update the "Last updated" date at the beginning of this document

  • Substantial changes will be notified through a notice on the platform

  • It is your responsibility to periodically review this policy

Recommendation: Review this policy each time you access Vlogerly to stay informed about how we use cookies.

14. Relationship with Other Policies

This Cookie Policy should be read in conjunction with:

Privacy Policy: Describes how we collect, use, store, and protect your personal data beyond cookies (account information, generated content, communications).

Terms of Service: Establish the conditions of use of Vlogerly, rights and obligations of users and the platform.

Data Processing Agreement (DPA): For business users managing third-party data through Vlogerly (available upon request).

Policy access:

  • Privacy Policy: [Link available in Vlogerly footer]

  • Terms of Service: [Link available in Vlogerly footer]

Hierarchy: In case of conflict between policies, the Privacy Policy will prevail for data protection issues and this Cookie Policy for specific cookie and similar technology issues.

15. Frequently Asked Questions

Can I use Vlogerly without accepting cookies?

Only essential cookies (__session) are mandatory to use Vlogerly. You can reject Hotjar's analytical cookies and the platform will continue to function normally.

How do I delete Vlogerly cookies?

Access your browser's cookie settings (see section 7.2), search for Vlogerly's domain and delete stored cookies. Keep in mind that you will close your session if you delete __session.

Does Vlogerly sell my data to third parties?

No. Vlogerly does not sell, rent, or commercialize users' personal data. Third-party services (Firebase, Hotjar, Sentry, Cloudinary) act as data processors under our instructions and are subject to strict confidentiality agreements.

What happens if I disable JavaScript?

Vlogerly is a modern web application (SPA) that requires JavaScript to function. Disabling JavaScript will prevent full use of the platform, including authentication, article editing, and interface navigation.

Do cookies affect my device's performance?

No. Vlogerly's cookies are small text files (generally less than 4 KB) that do not affect your device's performance or occupy significant space.

Can I trust the third-party cookies that Vlogerly uses?

Yes. All third-party services we use (Firebase, Hotjar, Sentry, Cloudinary) are internationally recognized providers that comply with GDPR and other privacy regulations. We periodically review their security and privacy policies.

Does Vlogerly track my location through cookies?

No. Vlogerly's cookies do not track your precise geographic location. Analytical services may detect your approximate country/region through your IP address, but this information is aggregated and not linked to your personal identity.

How does incognito mode affect cookies?

Incognito/private mode prevents cookies from being permanently stored on your device. When you close the incognito window, all cookies from that session are automatically deleted. However, you will still need to temporarily accept the __session cookie to log in during that session.

Can I review what data Hotjar collects about me?

Hotjar anonymizes data and does not allow individual user identification. You can request general information about processing through their privacy policy or exercise your GDPR rights by contacting Hotjar directly.

Does Vlogerly use cookies to remember my password?

No. Vlogerly never stores passwords in cookies or browser storage. Authentication is managed through secure tokens generated by Firebase Authentication.

Contact our support team via the email provided in the Privacy Policy. We will investigate immediately and update this policy if necessary.

Vlogerly - Content management platform for creators.
This Cookie Policy is an integral part of our commitment to transparency and protecting your privacy.

Powered By