Cookie Policy
Vestit uses only strictly necessary cookies. No analytics, no advertising, no third-party trackers — and therefore no consent banner.
1. What this policy covers
This Cookie Policy explains how Vestit Solutions Oy (“Vestit”, “we”, “us”) uses cookies and similar storage on our website and in our equity and cap-table management platform (the “Service”). It should be read together with our Privacy Policy.
2. What are cookies?
Cookies are small text files placed on your device when you visit a website or use an online service. Some are essential to make a service work; others are used for purposes such as analytics or marketing. Browsers also offer other forms of local storage that work in a similar way, and the same rules apply to them. This policy explains what we store on your device and why.
3. The cookies we use
We use only strictly necessary cookies — first-party cookies required for our website and the Service to work: to keep you logged in, to complete the login flow, and to remember the language you chose. We do not use analytics, advertising or other tracking cookies, and we do not allow third parties to set cookies through our site.
| Cookie | Purpose | Duration |
|---|---|---|
__Host-session_id | Keeps you logged in and identifies your session. Set only after you sign in. | Deleted when you close your browser. With “Remember me”, 7 days from your last use and at most 30 days in total. |
__Host-login_selection | Carries the company-selection step of login when your account belongs to more than one company. | 10 minutes |
PARAGLIDE_LOCALE | Remembers the interface language you selected, so pages load in that language. Set only when you choose a language. | 400 days |
All three are first-party cookies. The two __Host- cookies are marked HttpOnly, Secure and SameSite=Strict: scripts cannot read them, they are only sent over HTTPS, and they are not sent on requests originating from other sites. We do not use a separate anti-CSRF cookie — the SameSite=Strict attribute on the session cookie provides that protection.
4. Other storage on your device
In addition to cookies, the Service keeps a few display preferences in your browser’s local storage. These are strictly necessary to render the interface the way you configured it, are never sent to us, and contain no identifiers.
| Item | Purpose |
|---|---|
| Theme | Whether you chose the light or dark interface. |
| Language | The interface language you selected. |
| Number and date format | The regional format used for dates, quantities and amounts. |
| Accent colour | The brand colour of the company whose portal you last opened. |
Clearing your browser’s site data removes these; the interface then falls back to its defaults.
5. Why we do not show a cookie banner
Under the EU ePrivacy rules, consent is required only for cookies that are not strictly necessary. Cookies needed to deliver a service you asked for — keeping you signed in, completing login, and remembering a language or display preference you explicitly chose — are exempt. Those are the only cookies and storage we use, so we do not need to ask for your consent and do not show a banner. We still tell you about them here, in the interest of transparency.
6. Managing cookies in your browser
You can block or delete cookies through your browser settings. Because the cookies we use are strictly necessary, blocking them will prevent parts of the website or Service from working — in particular, you will not be able to sign in.
7. Changes to this policy
If we change what we store on your device — for example, if we introduce analytics — we will update this policy, change the date shown above, and, where required, introduce a consent banner before setting any non-essential cookies.
8. Contact us
If you have questions about our use of cookies, contact us at dataprivacy@vestit.fi.