Cookie Policy
Last updated: March 2026
1. Introduction
This Cookie Policy explains how VMS (VAT Management System) uses cookies and similar technologies (such as browser local storage) when you use our Service. We are committed to transparency about the technologies we use and the data they collect.
Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work, to remember your preferences, and to provide information to the website operator. Local storage is a similar browser technology that allows websites to store data locally on your device.
2. Types of Cookies We Use
We use only essential cookies and local storage that are strictly necessary for the operation of the Service. We do not use any non-essential, tracking, or advertising cookies.
| Name / Pattern | Type | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Cookie | Supabase authentication session cookie. Keeps you signed in and validates your identity on each request. Essential for the Service to function. | Session / configurable expiry |
| theme | localStorage | Stores your preferred colour theme (light or dark mode) so the interface displays correctly on each visit. | Persistent until cleared |
| vms-cookie-consent | localStorage | Records your cookie consent choice (accepted or declined) so the consent banner is not shown repeatedly. | Persistent until cleared |
| sidebar:state | localStorage | Remembers whether the navigation sidebar is expanded or collapsed, preserving your interface preference. | Persistent until cleared |
3. What We Do NOT Use
We want to be clear about the technologies we do not use:
- No tracking cookies: We do not use cookies to track your browsing activity across websites.
- No advertising cookies: We do not use cookies for targeted advertising or remarketing.
- No third-party analytics cookies: We do not embed third-party analytics services that set their own cookies (such as Google Analytics cookies). Our analytics are collected server-side by Vercel and do not use client-side cookies.
- No social media tracking pixels: We do not embed social media tracking pixels or share buttons that transmit data to social media platforms.
- No fingerprinting: We do not use browser fingerprinting techniques to identify or track users.
4. Third-Party Cookies
During the normal use of our Service, no third-party cookies are set. However, when you initiate a payment through our payment processor (Paystack), Paystack may set cookies in your browser during the payment flow to facilitate secure transaction processing and fraud prevention. These cookies are governed by Paystack's Privacy Policy and are only set during the payment process.
5. Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies.
- Block all cookies or only third-party cookies.
- Set preferences for specific websites.
- Configure notifications when cookies are set.
Please note: If you disable or block the authentication session cookie (sb-*-auth-token), you will not be able to sign in to the Service or remain signed in between page visits. The Service requires this cookie to function.
Clearing localStorage items (theme, sidebar state, cookie consent) will reset your preferences to their defaults. You will see the cookie consent banner again if the consent record is cleared.
6. Local Storage
In addition to cookies, we use browser localStorage to store small amounts of preference data on your device. Unlike cookies, localStorage data is not sent to our servers with each request. It remains on your device and is only read by our client-side code to restore your interface preferences.
localStorage data persists until you manually clear it through your browser settings (typically found under "Site data" or "Storage" in your browser's privacy or developer settings) or until you clear all browsing data.
7. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in the technologies we use or for other operational, legal, or regulatory reasons. If we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
8. Contact Us
If you have any questions about our use of cookies or local storage, please contact us at privacy@vms.co.za.
For more information about how we collect and process your personal information, please see our Privacy Policy.