Cookie notice
Last updated: 26 June 2026
VelaCommerce ("we", "us") uses cookies and similar browser-storage technologies (localStorage, sessionStorage) on the marketing site (velacommerce.co.za), the merchant console (/app) and merchant storefronts (/s/*). This notice explains, per category, what we set, which vendors are involved, how long data is retained, and how you can change your mind at any time.
1. The categories we use
Each cookie we set falls into one of three categories. Only the "strictly necessary" category is loaded before you make a choice in the cookie banner.
1.1 Strictly necessary
Required to deliver the service you asked for — signing in, keeping your cart, processing checkout, and protecting against fraud. POPIA does not require consent for these because the service cannot be delivered without them. You can still block them in your browser, but checkout and login will stop working.
| Name | Set by | Purpose | Retention |
|---|---|---|---|
| sb-<project>-auth-token | VelaCommerce (Lovable Cloud) | Merchant console authentication session. | 7 days, rotating |
| vela_cart | VelaCommerce (storefront) | Cart contents stored in browser localStorage. | 30 days |
| vela_cookie_consent | VelaCommerce | Records whether you accepted, declined or customised cookies. | 12 months |
| vela_cookie_prefs | VelaCommerce | Your per-category cookie preferences (analytics, marketing). | 12 months |
| vela_csrf | VelaCommerce | Anti-forgery token for form submissions. | Session |
1.2 Analytics
Aggregated usage measurement so we can see which pages are slow, what breaks, and where merchants get stuck during onboarding. We only set these after you opt in via the cookie banner. Data is processed in aggregate; we do not sell it or use it for advertising.
| Name | Vendor | Purpose | Retention |
|---|---|---|---|
| _plausible_* | Plausible Analytics (EU) | Cookieless page-view counts and referrer tracking. | No persistent cookie; aggregated for 24 months |
| _vela_analytics | VelaCommerce | First-party session ID for product and funnel analytics. | 13 months |
| sentry-trace | Sentry (Functional Software, Inc.) | Front-end error and performance traces, sampled. | Session |
1.3 Marketing
Used to measure the effectiveness of campaigns that bring merchants to VelaCommerce, and — where a merchant has enabled it on their own storefront — to personalise adverts. Off by default; only set after you opt in.
| Name | Vendor | Purpose | Retention |
|---|---|---|---|
| _gcl_au | Google Ads | Attribution for ads that drove a merchant signup. | 90 days |
| _fbp | Meta (Facebook / Instagram) | Attribution and conversion measurement for Meta campaigns. | 90 days |
| li_sugr | LinkedIn Ads | Attribution for LinkedIn-sourced merchant leads. | 90 days |
2. Cookies on merchant storefronts
Each merchant operates their own storefront on VelaCommerce and is the responsible party (data controller) for the personal information of their shoppers. Where a merchant turns on analytics or marketing pixels, those vendors appear in the cookie banner that the shopper sees on that store. VelaCommerce does not load third-party advertising cookies on a storefront unless the merchant configures them.
3. Managing your consent
You can change your choice at any time from the panel below. Your new preferences take effect on the next page load.
You can also block or delete cookies directly from your browser settings — see aboutcookies.org for instructions. Note that disabling strictly-necessary cookies will break checkout and merchant login.
4. Your POPIA rights
Under the Protection of Personal Information Act, 2013 you may ask us to access, correct or delete personal information held about you, or object to its processing. Contact our Information Officer at privacy@velacommerce.co.za. We respond within 30 days. If you are not satisfied with our response you may lodge a complaint with the Information Regulator (South Africa).
5. Changes to this notice
We will update this notice if we add new vendors, change retention periods, or introduce new categories. The "last updated" date at the top reflects the most recent change.