visitcard.app

Cookie Policy

Updated: November 5, 2026

How we use cookies on VisitCard

1. What is a cookie?

A cookie is a small text file placed on your device when you visit our site. It allows your browser to be recognized and certain information to be stored to improve your experience.

2. Types of cookies used

We use the following categories of cookies:

Visitors located in Switzerland (country of the IP address): Google Tag Manager and the Google tag load on every page as soon as you arrive, with Google Consent Mode v2 in advanced mode, set to “denied” by default (analytics_storage, ad_storage, ad_user_data and ad_personalization set to denied). Until you accept, no Google cookie is set or read; the tag nevertheless sends Google cookieless signals (“pings”): consent status, page viewed, timestamp, browser type and IP address (used for transmission and approximate location). Google uses them to estimate, in aggregated and modelled form, visits and conversions that are not measured. Once you consent, Google Analytics 4 and Google Ads set their cookies and measure, each according to the accepted category (Analytics / Marketing). Visitors located outside Switzerland: Google Tag Manager and the Google tag are loaded only after you consent (Analytics or Marketing); before that, nothing is sent to Google, not even cookieless signals.

Public cards (visitcard.app/c/…) set no cookies and load no third-party audience-measurement or advertising tools. Their fonts are served from visitcard.app: Google Fonts does not receive the visitor’s IP address.

3. Detailed cookie list

Name Purpose Duration
_ga, _ga_* Google Analytics (GA4) — pseudonymised audience measurement 2 years
_gcl_au Google Ads — links an ad click to a conversion (signup, purchase) 90 days
_gcl_aw, _gcl_gb Google Ads — identifier of the click on an ad (gclid, gbraid), to credit a conversion to that ad; only with your consent (marketing cookies) 90 days
visitcard_session VisitCard authentication session Session (30 days)
vc_lang User language preference 1 year (cookie)
vc_consent / vc_cookie_consent Cookie consent memory 1 year
csrf_token CSRF attack protection Session
vc_signup Strictly necessary — automatic sign-in after email verification 3 hours
totp_pending Strictly necessary — sign-in step with two-factor authentication 15 minutes
g_login_state, ms_login_state Strictly necessary — security of sign-in with Google or Microsoft (state of the sign-in request) 10 minutes
google_oauth_state Strictly necessary — security of connecting your Google account to install your signature in Gmail 10 minutes
vc_tzo Functional — your browser’s time zone, to show times in the dashboard 1 year
vc_conv Functional — one-time marker set after a payment and erased on the confirmation page, so that the purchase is counted only once there 15 minutes at most
vc_demo_lead Functional — one-time marker set after the demo request form is sent and erased on the confirmation page, so that the request is counted only once there 10 minutes at most
vc_src Internal measurement — remembers where your first visit came from (referring site, campaign, referral link or ad click, without any advertising identifier) for VisitCard’s internal statistics; linked to your account if you sign up, never shared with third parties. Visitors in Switzerland (country of the IP address): set on the first visit, deleted if you decline analytics cookies. Other visitors: set only if you accept analytics cookies 30 days
vc_gclid Ad conversion measurement — identifier of the click on a Google Ads ad (gclid, gbraid or wbraid) and time of the click; linked to your account if you sign up, then sent to Google Ads with the conversions (sign-up, trial, purchase). Marketing cookie rule: visitors in Switzerland, set on the first visit, deleted if you decline marketing cookies; other visitors, set only if you accept them 90 days
vc_ref Ambassador programme — remembers the code of the ambassador link you arrived through, to apply its discount and attribute your subscription to them; never shared with third parties 60 days

4. Analytics cookies (GA4)

We use Google Analytics 4 (GA4) to understand how visitors interact with our site. The data is pseudonymised (random identifier stored in the _ga cookie). These cookies are only set with your consent, in accordance with the GDPR and the Swiss FADP.

5. Marketing cookies (Google Ads)

We use Google Ads to measure the effectiveness of our advertising campaigns: knowing that a visit from an ad led to a signup or purchase, and improving the targeting of future campaigns. These cookies are only set if you have explicitly accepted the "Marketing" category (via the "Accept all" button or the toggle in "Customize"). Google Ads enhanced conversions: only if you accept marketing cookies, when you sign up, start a trial or make a purchase, your account’s email address is sent to Google in hashed form (a SHA-256 fingerprint computed in your browser, never in plain text nor in a web address), to credit that conversion to our ads.

6. Managing your preferences

You can refuse analytics and marketing cookies at any time via the cookie banner ("Cookie preferences" link in the footer) or by clearing your browser data. Functional cookies (session, CSRF) are necessary for the service to work properly and cannot be disabled.

7. Contact

For any questions regarding our use of cookies, contact us at: hello@visitcard.app