Legal
Cookie Policy
Last updated: April 8, 2026
1. What are cookies
Cookies are small text files that websites place on your device to remember information about you — for example, to keep you signed in, remember your preferences, or measure how you use the site.
This Cookie Policy explains which cookies VeloxScript uses, why, and what choices you have.
2. Cookies we use
We try to use as few cookies as possible. The current list is:
Strictly necessary (cannot be disabled)
- __Secure-authjs.session-token — stores your authenticated session after you log in. Set by our auth library (NextAuth). Expires after 7 days of inactivity.
- __Host-authjs.csrf-token — prevents cross-site request forgery on auth endpoints. Session-scoped.
- __Secure-authjs.callback-url — tracks where to return you after login. Session-scoped.
Functional
We currently do not set any functional cookies beyond the auth cookies listed above.
Analytics
We use privacy-respecting analytics (Vercel Analytics) which does not set tracking cookies, does not use fingerprinting, and does not identify individual users. Page view counts and Core Web Vitals are aggregated and anonymous.
Advertising
We do not use advertising cookies. VeloxScript does not run ads and does not participate in any advertising networks.
3. Third-party cookies
When you use the billing portal, you are redirected to stripe.com, which sets its own cookies for payment processing and fraud prevention. Stripe's use of those cookies is governed by Stripe's Privacy Policy. We do not control and are not responsible for Stripe's cookie practices.
4. How to control cookies
Most browsers let you refuse or delete cookies through their settings. If you disable the strictly necessary cookies listed above, you will not be able to log in or use the VeloxScript dashboard — the Service relies on these cookies to function.
You do not need to do anything to opt out of advertising or tracking cookies because we do not set any.
5. Loader and end-user cookies
The VeloxScript loader script you install on your GoHighLevel sites does not set any cookies on end users of those sites. The loader only makes a fetch request to our API to retrieve script configurations, then injects the scripts you defined. Any cookies set by those scripts are your responsibility and are governed by your own privacy and cookie policies.
6. Changes to this policy
If we change our cookie usage, we will update this page and the "last updated" date at the top.
7. Contact
Questions about cookies? Email privacy@veloxscript.com.