Cookie Notice

We use no advertising cookies, and our pages load no third-party analytics such as Google Analytics. Most of our cookies keep you signed in and keep the service secure. A few remember your layout, and three help us or a page owner count visits and referrals.

The service cannot work safely without these.

• session: keeps you signed in to the studio. 30 days.
• customer_session: keeps you signed in to the account site, account.vexastudio.art. 30 days.
• aff_session: keeps you signed in to the affiliate portal. 30 days.
• aff_view: lets our staff view the affiliate portal for support. 8 hours.
• vx_trust, vx_trust_aff: remember a trusted browser, so you are not asked for an email code every time. 30 days.
• vx_site_pass: holds an early-access pass while the site is closed to the public. 30 days.
• rv_…: keeps a guest signed in to a Client Review room. 7 days.
• google_oauth_…, fv_…, so_…, pin_…: protect the step where you connect Google, Fanvue, X, Reddit or Pinterest. 10 minutes.
• vx_launch: in the desktop app only, a secret that lets the app’s window talk to its own local server. Ends when the app closes, and never reaches us.

Cloudflare protects our site, and it may set its own security cookies. These include __cf_bm, for telling people from bots, which ends after 30 minutes of inactivity, and cf_clearance, which shows a browser has passed a security challenge.

Cloudflare Turnstile is a check on forms such as sign-up. It runs from Cloudflare’s own domain and may store data there. See Cloudflare’s cookie list.

These only remember how you like the screen. They are set in your browser and last 1 year.

• gp_asst: whether the assistant panel is open.
• gp_cols, gp_fw: how your gallery is laid out.
• gp_navfit: how the top menu fits your screen.
• gp_ff_…: whether a gallery filter is on.

We also use your browser’s local storage for settings such as your theme. That data stays in your browser unless the feature you are using needs to send it.

The service still works if you block these.

• vx_src: the first campaign tag or website that brought you here, copied to your account if you sign up. 30 days.
• vx_ref: the affiliate link you arrived through, so a sale can be credited to that affiliate. 30 days by default.
• lp_visitor: a random ID on link-in-bio pages and short links, so the page owner can count unique visitors. 1 year. Details are in the Privacy Notice.

Payment takes place on Stripe’s own checkout pages, under Stripe’s cookie rules. A link-in-bio page may embed a video or music player, such as YouTube or Spotify, and those services may then set their own cookies. Sign-in through Google or connecting a social account happens on that company’s site, under its rules.

You can block or delete cookies in your browser settings. If you block the sign-in and security cookies, you will not be able to sign in. If you have a question, email [email protected]. The Privacy Notice explains how we handle personal data.