Cookie Policy
Last updated: 5 November 2026
This Cookie Policy explains how APPSOLVE SRL ("Vitals", "we", "us") uses cookies and similar technologies on vitals.app and its subpages. It should be read together with our Privacy Policy, which explains how we handle personal data more generally and what rights you have.
Who we are
APPSOLVE SRL is the controller for the data collected through cookies on this website. You can reach us about anything in this policy at [email protected].
Company: APPSOLVE SRL
Trade Register: J40/16347/2017
VAT: RO38260784
Address: 11 Grigore Mora St., Room 1, 3rd Floor, Bucharest 011885, Romania
What cookies and similar technologies are
A cookie is a small text file a website saves in your browser. Websites also use similar technologies that work the same way: browser storage (localStorage and sessionStorage), pixels and tags that load from a third party. In this policy, "cookies" covers all of them.
Some cookies are set by us (first-party). Others are set by the services we use, such as Google or Meta (third-party).
How we ask for your consent
Under the EU ePrivacy rules (in Romania, Law no. 506/2004) and the GDPR, we can only use cookies that are not strictly necessary if you agree to them first.
When you first visit vitals.app, a banner gives you three choices:
- Accept all turns on Analytics and Marketing cookies.
- Only essentials sets no Analytics or Marketing cookies.
- Customize lets you turn Analytics and Marketing on or off separately.
Until you choose, we use only essential cookies and the two entries described under Install and partner attribution. Rejecting is as easy as accepting, and the site works the same either way.
We remember your choice for 12 months, then ask again. You can change your mind at any time with the Cookie settings link in the footer of every page or the button at the top of this page. When you turn Analytics or Marketing off, we stop setting that group's cookies and delete the ones our site stored in your browser. Cookies that Google and Meta set on their own domains (IDE, fr) can only be deleted in your browser settings. Withdrawing consent doesn't undo processing that happened before.
The cookies we use
Essential Always on
These keep the site working and remember your cookie choice. They don't need consent, and you can't switch them off in the banner.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
v-cookie, v-cookie-a, v-cookie-m, v-cookie-ts | Vitals (browser storage) | Remember your cookie choice for Analytics and Marketing, and when you made it, so we don't ask on every page | 12 months |
v-bar-closed:* | Vitals (browser storage) | Remembers that you closed the announcement bar | Until cleared |
v-popup-seen:* | Vitals (browser storage) | Remembers that you have seen a site pop-up, so it doesn't open again | Until cleared |
vtl-chat-visitor-id | Vitals (browser storage) | Keeps your support chat conversation on this browser | Until cleared |
__cf_bm | Cloudflare | Tells people apart from bots to protect the site from abuse. Only set when Cloudflare checks a visit for bot activity | 30 minutes |
Analytics Needs your consent
These show us how people use the site (which pages they visit, where they come from, where they get stuck) so we can improve it. The reports we look at are aggregated.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_ga | Google Analytics | Tells visits from the same browser apart | 2 years |
_ga_TPDXDVX333 | Google Analytics | Keeps track of your session | 2 years |
Marketing Needs your consent
These measure whether our ads work and let us show Vitals ads to people who have visited the site. They also let us connect a visit to vitals.app with a later Vitals install from the Shopify App Store. For example, if you click "Install" today and install a week later, we can tell the install came from the website.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_gcl_au | Google Ads | Links ad clicks to later sign-ups and installs | 90 days |
_gcl_aw | Google Ads | Stores the Google ad click ID from the link you arrived on | 90 days |
IDE | Google (doubleclick.net) | Lets Google show and measure ads across websites | 13 months |
_fbp | Meta | Identifies your browser for Meta ad measurement and audiences | 90 days |
_fbc | Meta | Stores the Facebook/Instagram ad click ID from the link you arrived on | 90 days |
fr | Meta (facebook.com) | Lets Meta show and measure ads | 90 days |
_gcl_ls | Google Ads (browser storage) | Keeps Google ad click details so a later sign-up or install can be linked to the ad | Until cleared |
lastExternalReferrer | Meta (browser storage) | Remembers the last outside website that sent you here, for Meta ad measurement | Until cleared |
lastExternalReferrerTime | Meta (browser storage) | Records when that visit happened | Until cleared |
multiFbc | Meta (browser storage) | Stores Meta ad click IDs from earlier visits | Until cleared |
__vt_attrib:* (ad click IDs) | Vitals (browser storage, this tab only) | Keeps the ad click ID from the link you arrived on (for example gclid or fbclid) and, if you click Install, a random ID for that click, so an install can be credited to the ad | Until the tab closes |
If you choose "Only essentials"
We set no Analytics or Marketing cookies. The two entries under Install and partner attribution still work, without ad click IDs. We use Google Consent Mode in advanced mode: Google's tags load on every visit and, until you agree, send only cookieless pings (that a page was viewed, the browser type and your consent state). These pings set no cookies and cannot be used to recognize you across visits. Google uses them to estimate total conversions in aggregate.
Install and partner attribution Always on
Vitals is installed from the Shopify App Store, often days after a visit to vitals.app. These two entries let us credit an install to the page, campaign or partner link it started from. They keep the page you landed on, the UTM tags of the link you arrived on and the partner link you clicked, whatever you choose in the banner. Neither follows you across other websites.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
__vt_attrib:* | Vitals (browser storage, this tab only) | Set when you open a page. Keeps the page you landed on and the UTM tags from the link you arrived on, so an install can be credited to the right page or campaign | Until the tab closes |
affId | Vitals (admin.vitals.app) | Set when you click Install on vitals.app or a link shared by one of our partners or referral partners. Stores the ID of that link, so a Vitals install within 30 days is credited to it. If the link came with a partner offer, such as a longer free trial or a discount, it also makes sure you get that offer | 30 days |
Who receives the data
Data from Analytics and Marketing cookies goes to the providers listed above, who use it on our behalf and, for ad cookies, also for their own purposes as described in their policies:
- Google: Google Ireland Ltd. / Google LLC. Privacy Policy · How Google uses data from sites that use its services
- Meta: Meta Platforms Ireland Ltd. / Meta Platforms, Inc. Privacy Policy
- Meta Conversions API: run by Meta for our Meta Pixel. After you accept Marketing cookies, the Pixel events also go to Meta through it.
- Cloudflare: Cloudflare, Inc. Privacy Policy
Some of these providers process data in the United States. Google, Meta and Cloudflare are certified under the EU-US Data Privacy Framework, which the European Commission recognizes as giving adequate protection. Where it doesn't apply, transfers rely on the European Commission's Standard Contractual Clauses.
Newsletter
Subscribing to our newsletter in the footer doesn't use cookies. If you subscribe, we keep your email address to send you news about Vitals. Every email has an unsubscribe link, and unsubscribing takes effect right away. The Privacy Policy explains how we handle your email address.
Controlling cookies in your browser
Besides the banner, you can block or delete cookies in your browser settings: Chrome · Safari · Firefox · Edge.
You can also limit ad personalization through Google Ad Settings and Meta Ad Preferences. If you block essential cookies, parts of the site may not work properly.
Your rights
Where cookie data is personal data, you have the rights described in our Privacy Policy: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To use them, email [email protected]. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or to the authority in your own EU country.
Changes to this policy
We update this policy when the cookies we use change. The date at the top shows the latest version. If we add a new kind of cookie that needs consent, we'll ask you again through the banner.