Necessary cookies
Vybentis uses technically necessary cookies for authentication, language selection and protected workflow state. It does not use advertising cookies.
Choice and review
PostHog and Microsoft Clarity product analytics are disabled until you explicitly allow analytics. You can change or withdraw that choice at any time through Cookie settings. Withdrawal applies to future collection.
Authentication cookies
Neon Auth and the Vybentis web application use secure cookies to maintain a requested sign in and protected session. Their exact names may vary by deployment. Session cookies are limited to the authentication purpose and are removed or expire according to the authentication configuration.
Free Scan entitlement
The technically necessary HttpOnly cookie vybentis_free_scan_device contains a random browser identifier and is used only to protect the Quick Scan request path against abuse. The one time free Quick Scan is enforced per public network address. Vybentis persists only a keyed one way digest of that address, never the raw address in the redemption ledger. The cookie expires after two years.
Local interface state
The browser stores your analytics choice so Vybentis can respect it on later visits. When analytics is allowed, PostHog EU Cloud processes an anonymous browser identifier, locale and a coarse page route category. PostHog does not receive full URLs, query parameters, customer slugs, resource identifiers or account identifiers. PostHog automatic interaction capture, session recording, performance capture and heatmaps remain disabled. Microsoft Clarity may set the consent permitted analytics cookies _clck and _clsk. For heatmaps and session replay on public pages, Clarity may process masked DOM and layout structure, clicks, scrolling and other interactions, public page URLs and referrers, device, browser, operating system and viewport details, performance and diagnostic data, identifiers, IP addresses and approximate location derived from them. Strict masking hides page text but does not remove structural, URL or technical metadata. Account, authentication, dashboard, sign in, sign up, scan and report routes are excluded. Clarity advertising storage is denied. Withdrawing analytics consent sends a denied signal, stops collection and removes the known Clarity analytics cookies. Vybentis does not use marketing cookies.
Legal basis
Strictly necessary storage and access is used only where required to provide the digital service expressly requested by the user. PostHog and Microsoft Clarity analytics rely on prior consent under section 25 TDDDG and Article 6 paragraph 1 letter a GDPR.