1. About this policy
This Cookie Policy explains how Vocaler (operated by Wish Merge Wonder LLC) uses cookies and similar technologies across our marketing site and product. It should be read together with our Privacy Policy.
2. What cookies and similar technologies are
Cookies are small text files stored on your device by a website. "Similar technologies" include local storage and pixels. They can be strictly necessary (needed for the site to work), functional (remember your preferences), analytics (help us understand usage), or advertising (track you across sites — which we do not use). Cookies can be first-party (set by us) or third-party (set by a provider we use).
3. Our privacy-first approach
The marketing site measures traffic with cookieless analytics (Cloudflare Web Analytics), which does not set cookies, fingerprint your device, or collect personal data. As we roll out more detailed product analytics to understand usage and improve the Service, any analytics that rely on cookies or similar identifiers are turned on only with your consent through our cookie preferences. Essential cookies — including your session and Stripe payment processing — appear mainly once you sign in to the product.
4. Cookies and technologies we use
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| Session / authentication | Vocaler (app) | Strictly necessary | Keeps you signed in and secures your session. | Session / up to 30 days |
| CSRF token | Vocaler (app) | Strictly necessary | Protects forms and requests against cross-site forgery. | Session |
| __cf_bm, cf_clearance | Cloudflare | Strictly necessary | Bot management and security for the Service. | Up to 30 min / 1 year |
| __stripe_mid, __stripe_sid | Stripe | Strictly necessary | Fraud prevention on checkout and billing pages. | Session / 1 year |
| Theme preference | Vocaler (app) | Functional | Remembers light/dark preference. Stored in localStorage, not a cookie. | Until you clear it |
| Cloudflare Web Analytics | Cloudflare | Analytics | Aggregate, privacy-first traffic measurement. Cookieless — sets no cookie and does not fingerprint or identify you. | No cookie / no persistent ID |
| Product analytics | Vocaler / analytics provider | Analytics (consent) | Helps us understand feature usage and improve the product. Where it uses cookies, it is enabled only with your consent. | Up to 13 months |
| Payment processing | Stripe | Strictly necessary | Processes payments and prevents fraud when you subscribe or buy credits. | Session / 1 year |
Specific cookie names set by providers such as Cloudflare and Stripe are controlled by those providers and may change; the categories and purposes above describe how they are used in the Service.
5. Managing your preferences
Strictly-necessary cookies — including your session and Stripe payment processing — cannot be switched off without breaking core functionality such as signing in and paying. We do not use advertising or cross-site tracking cookies.
For analytics that use cookies, we ask for your consent first through our in-product cookie preferences, we do not set them until you agree, and you can change your choice at any time there. You can also control or delete cookies through your browser settings, and clear locally-stored preferences (like your theme) the same way.
6. Global Privacy Control and Do Not Track
Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control (GPC). Because we do not sell or share personal information or use advertising cookies, our behavior is the same whether or not such a signal is present.
7. Changes and contact
We will update this policy if our use of cookies changes, with a new "Last updated" date. Questions? Email privacy@vocaler.ai.