1. What we store on this website

This section and Sections 2 to 4 cover www.vitalsentinel.com. Section 5 covers our tracking scripts on our customers' websites, Section 6 the application at app.vitalsentinel.com, and Sections 7 and 8 our documentation and status page.

Name (local storage)	Set when	Lasts	Purpose
`vs_cookie_consent`	When you answer the banner	Until you withdraw it or clear your browser storage	Your answer to the banner, when you gave it, and the version of the purposes it covers, so we do not ask again.
`vs_vid, vs_vid_exp`	Only after you accept	180 days from when it was created	A random visitor identifier and its expiry, so a returning visit is recognized.
`vs_sid, vs_sid_ts`	Only after you accept	Expires after 30 minutes of inactivity	A session identifier grouping the pages of one visit, and when it was last used.
`vs_fv, vs_fa`	Only after you accept	Until you withdraw your choice or clear your browser storage	When you first visited and what first brought you here.
`vs_cg`	Only after you accept	Up to 180 days, or until you withdraw your choice	A marker that you accepted, so our scripts keep honoring your choice over a Do Not Track or Global Privacy Control signal.

vs_cookie_consent

Your answer to the banner, when you gave it, and the version of the purposes it covers, so we do not ask again.

Set when:: When you answer the banner
Lasts:: Until you withdraw it or clear your browser storage

vs_vid, vs_vid_exp

A random visitor identifier and its expiry, so a returning visit is recognized.

Set when:: Only after you accept
Lasts:: 180 days from when it was created

vs_sid, vs_sid_ts

A session identifier grouping the pages of one visit, and when it was last used.

Set when:: Only after you accept
Lasts:: Expires after 30 minutes of inactivity

vs_fv, vs_fa

When you first visited and what first brought you here.

Set when:: Only after you accept
Lasts:: Until you withdraw your choice or clear your browser storage

vs_cg

A marker that you accepted, so our scripts keep honoring your choice over a Do Not Track or Global Privacy Control signal.

Set when:: Only after you accept
Lasts:: Up to 180 days, or until you withdraw your choice

2. Before you choose

Until you accept, we store nothing in your browser apart from your answer once you give it. We still count page views, measure page performance, and see which page elements you click and how you interact with forms, without what you type. The pages of one visit, and repeat visits on the same day, are recognized on our servers through a key derived from your IP address and browser that changes every day, without storing anything on your device. From your IP address our servers also look up your country, region, city and time zone (only the country if your browser sends a Do Not Track or Global Privacy Control signal), and whether you connect from a data center or hosting network, without storing the IP address.

To do that, our scripts read a few values from the browser without storing them: the window size, how far down the page you scroll, basic browser characteristics used to filter automated traffic, and whether you have set a Do Not Track or Global Privacy Control preference, which we honor until you accept.

3. Third parties

Cloudflare Turnstile runs on some of our free tool pages to stop automated abuse. It loads from Cloudflare when the page opens, so Cloudflare receives your IP address and examines your browser to tell a person from a script. It does not measure you for us.
Cloudflare Web Analytics, which Cloudflare adds to our pages, counts page views and measures page load times. It stores nothing in your browser and reads your browser's user agent and the page you came from.
Cloudflare serves this website, and its network may store something of its own in your browser, for security and to report connection errors.

These providers act under their own terms, and we do not read what they store.

4. Accepting, declining, and withdrawing

Accept lets our Web Analytics script store the identifiers in Section 1, and our RUM script the visitor and session identifiers among them, so a later visit is recognized as the same visitor, and lets our scripts read details of your device and connection, such as screen size, pixel density, memory, processor cores and network type. Decline keeps the default: nothing is stored apart from your answer, nothing beyond Section 2 is read, and identifiers from an earlier acceptance are cleared. Measurement under Section 2 continues either way.

You can change your choice at any time with the Cookie choices link at the bottom of every page, which clears your answer and shows the banner again. You can also clear the entries in your browser settings. Withdrawing works from that moment on and does not undo measurements already made. To have those erased, email legal@vitalsentinel.com.

If we change what we ask your consent for, we ask again.

5. Our tracking scripts on other websites

If you came here from a website that uses VitalSentinel, what it stores depends on a setting its operator chose:

"none" (the default): nothing is written to or read from your device storage, except that identifiers left there by a higher level are deleted without being read.
"session": a session identifier and its last-activity time (vs_sid, vs_sid_ts) in session storage, cleared when you close the browser tab or after 30 minutes of inactivity, and, where the operator's consent banner passes your consent to our script, a vs_cg marker cleared when you close the tab.
"persistent": the local storage entries in Section 1, with a visitor identifier lasting 180 days from its creation, and, where the operator tracks across its subdomains, a vs_vid cookie that expires at the same time. The vs_cg marker stays for up to 180 days, or until consent is withdrawn or the operator lowers the level.

Our RUM script stores the same visitor and session identifiers at these levels, never in a cookie. At every level, our servers recognize the pages of one visit, and repeat visits on the same day, through the daily key described in Section 2. In "session" and "persistent", both scripts also read the device and connection details described in Section 4. The operator must get your consent before choosing "session" or "persistent", and is the one to contact about collection on its site.

A Do Not Track or Global Privacy Control signal from your browser overrides the consent level set in the site's script tag, but not consent you give in the site's consent banner, which the banner passes to our script. Without that consent we assign you no visitor or session identity and run no engagement measurement, keep only your country as your location, and your page view is counted without an identifier.

6. The application

The application at app.vitalsentinel.com uses cookies and browser storage needed to keep you signed in, protect your account and remember your settings. It asks for your consent to analytics. If you accept there, our Web Analytics script stores the identifiers in Section 1 and a vs_vid cookie on .vitalsentinel.com that expires with the visitor identifier, which your browser also sends to this website. Our RUM script stores the visitor and session identifiers in Section 1 in local storage, never in a cookie. Both scripts read the device and connection details described in Section 4. Without your acceptance, we measure the application without storing anything.

Apart from those, the application stores the following, all of it needed for the application to work or to remember a choice you made:

Cookies: access_token and refresh_token keep you signed in, for up to 7 days; csrf_token protects your account against requests forged by other websites, for 24 hours; vs_signup_bind ties the verification link of a new account to the browser that signed up, for 24 hours
Local storage, until you clear it: cookie-consent (your answer to the application's banner), selectedWorkspaceId (the workspace you last opened), theme-preference (your color theme), privacy-mode (whether data on screen is blurred), support-widget-expanded (how you left the support chat), vs-ticket-replies:, g2-review-prompt: and vs_critical_checks: followed by your user ID (support replies you have seen, your answer to our review request, and when a page was last checked for Critical issues to show you), vs:banner: keys (notices you dismissed), and keys that start with rum- or analytics- followed by a domain ID (the options you chose for that domain's tracking scripts)
Local storage, used for up to a day: vs_post_auth_return (the page to open once your new account is verified)
Session storage, until the tab closes: vs:onboarding-google-return (where to bring you back after you connect Google), onboardingTheoHidden (that you hid Theo during setup), vs:offer-walkthrough (that setup offered you a walkthrough), robots-draft: followed by a domain ID (a robots.txt draft you open in the tester) and vs_flash_notice (a notice shown on the next page, for up to a minute)

7. Our documentation

docs.vitalsentinel.com sets no cookies. It stores your answer to its banner (vs-cookie-consent) and, if you change it, your color theme (theme) in local storage. It uses our own scripts in the same way as this website: nothing is stored until you accept, and Section 4 applies to your choice there. Cloudflare Web Analytics (Section 3) runs there too.

8. Our status page

status.vitalsentinel.com is operated by Better Stack. It loads Google tags (Google Analytics and Google Ads) and Google reCAPTCHA under Better Stack's control, and these may store something of their own in your browser. Better Stack's privacy policy applies there.

9. Our browser extension

Our browser extension sets no cookies. It keeps its settings, caches and, if you sign in, your sign-in tokens in its own storage in your browser, which websites cannot read. It uses only the names and settings of the cookies of the page you analyze, discarding their values, to show them in its report, and keeps those names and settings only until the browser closes. Section 6.3 of our Privacy Policy lists what it stores and for how long.

10. Questions

Email legal@vitalsentinel.com, or see our Privacy Policy.

Cookie Policy