Cookie Policy

Vorthra uses cookies and similar technologies primarily to keep the service secure and functional.

• Keep you signed in.
• Authenticate magic-link and OAuth sessions.
• Protect dashboard and organization routes.
• Remember active session state, including the active organization.
• Support billing, dashboard, and organization workflows.
• Prevent abuse and protect service reliability.

Essential cookies are required for Vorthra to work. Blocking or deleting them may break login, dashboard access, organization switching, billing management, and protected API workflows.

Examples include Better Auth session cookies and related authentication cookies used for secure sign-in and sign-out.

Vorthra uses Better Auth for passwordless magic-link login, Google OAuth when enabled, and session cookies. Session records may include token, expiry time, IP address, user agent, user ID, and active organization ID as described in the Privacy Policy.

Magic-link tokens are stored hashed, expire quickly, and are designed to be used once.

Public Vorthra Record analytics are first-party and privacy preserving by design. A public page may send a view event using browser APIs such as sendBeacon or fetch.

• Raw visitor IP addresses are not stored for public record analytics.
• A daily salted SHA-256 hash of the visitor IP is stored instead.
• User agent and referrer values are truncated.
• Country and city hints come from hosting or proxy headers where available.
• The analytics request does not rely on advertising cookies.

Stripe, Google OAuth, public source URLs, external thumbnails, and other third-party services may use their own cookies or similar technologies. Those cookies are governed by the policies of those third parties.

You can manage cookies through your browser settings. Most browsers let you view, delete, block, or restrict cookies by website.

For cookie or privacy questions, contact privacy@vorthra.com.