Legal

Cookie Policy

Effective September 30, 2026Last updated September 30, 2026Version 1.0

This policy is provided in Arabic and English. If the two versions differ, the English version prevails.

This policy explains the cookies and similar technologies used on voclalabs.com and in the Vocla app, and how you control them. By default we use only essential cookies; anything else runs only if you accept it.

Who we are

Vocla is operated by an individual (sole proprietor), not a registered company.

Contact: support@voclalabs.com (support, billing and refunds) · privacy@voclalabs.com (personal data) · legal@voclalabs.com (legal notices).

Payments are processed by Dodo Payments, our merchant of record: Dodo Payments sells subscriptions and credits to you, charges your payment method, and handles billing, sales tax/VAT and invoices. Your card details are never shared with us.

Operator details (full legal name, country of residence and postal address) will be published here before launch.

1. What cookies are

Cookies are small text files a website stores in your browser. Similar technologies include local storage and scripts that read information from your device. We refer to all of these as “cookies”.

2. How we use cookies

Essential cookies keep you signed in, protect sign-in against forgery, remember your language and store your cookie choice. They are always on because the site and app cannot work without them.
Analytics. We use PostHog to understand how the website is used. Before you choose, we only count page views, clicks and scrolling without cookies and without storing anything on your device. If you accept analytics, PostHog sets its cookie so repeat visits are recognised, and records your session (pages, clicks and movements, with passwords, emails and phone numbers hidden) so we can fix what gets in your way. If you reject, nothing is stored and nothing is recorded.
We do not use advertising or cross-site tracking cookies, and we do not sell data collected through cookies.

Name	Purpose	Type	Duration
vocla_session	Keeps you signed in to the Vocla app; your security (CSRF) token is tied to it	Essential	7 days, or 30 days if you choose “Keep me logged in”; extended while you use the app
vocla_oauth_state	Protects “Sign in with Google” against forged requests	Essential	10 minutes
NEXT_LOCALE	Remembers the language you chose on the website	Essential	Until you close your browser
vocla_consent	Stores your cookie choice so we don't ask again	Essential	12 months
vocla_ref	Credits the affiliate whose referral link you followed (set only when you open a referral link)	Functional	60 days
ph_<project>_posthog	PostHog analytics: recognises repeat visits and links a website visit to your later sign-up	Analytics (website: only with your consent)	1 year

All of these are first-party cookies set by Vocla. None are shared with third parties.

4. Third-party services

Cloudflare Turnstile protects sign-up and demos against bots. It may process device and browser signals to tell humans from bots; see Cloudflare's privacy policy at www.cloudflare.com/privacypolicy/.
Dodo Payments checkout runs on Dodo Payments's own pages and may set cookies needed for payment and fraud prevention, governed by Dodo Payments's privacy policy (dodopayments.com/legal/privacy-policy).
Google sign-in pages set their own cookies when you choose them.

5. Managing your choice

When you first visit, a banner lets you accept all, reject non-essential or manage cookies by category. Rejecting is as easy as accepting. You can change your choice at any time with “Cookie settings” in the site footer or the button on this page.

You can also block or delete cookies in your browser settings. If you block essential cookies, sign-in and language preferences will not work.

6. Changes and contact

We will update this policy and the table above before we start using a new cookie. Questions: privacy@voclalabs.com.