Cookies Policy

Cookies Policy

Last updated: 24/03/26

This Cookies Policy explains how Valyu.Network Ltd ("Valyu", "we", "us", or "our") uses cookies and similar tracking technologies when you visit our website at valyu.ai and its subdomains (the "Website"). It explains what these technologies are, why we use them, your rights to control them, and how applicable data protection laws in the United Kingdom, European Economic Area, and United States affect our use of them.

1. What Are Cookies

Cookies are small text files placed on your device (computer, tablet, or mobile) by websites you visit. They are widely used to make websites work more efficiently and to provide information to site owners. Cookies may be set by the website you are visiting ("first-party cookies") or by third parties whose services the website uses ("third-party cookies").

We also use similar technologies such as local storage, JavaScript-based tracking scripts, and browser and device fingerprinting, which function in a comparable manner. References to "cookies" in this policy include these similar technologies where applicable.

Browser and device fingerprinting is a technique that collects and combines technical attributes of your browser and device — such as browser type and version, operating system, installed plugins, screen resolution, language settings, and time zone — to generate a unique or semi-unique identifier for your device. Unlike cookies, fingerprinting does not store a file on your device.

2. How We Use Cookies

We use cookies for two purposes:

  • To operate the Website. Certain cookies are essential for authentication, security, and storing your privacy preferences. The Website cannot function properly without these.
  • To understand how visitors use the Website. With your consent (where required by law), we use analytics cookies and fingerprinting to collect pseudonymous data about page visits, session behaviour, and site performance. This helps us improve the Website. We do not use advertising cookies, advertising networks, or cross-site behavioural tracking. We do not sell personal data.

The legal requirements for cookies vary by jurisdiction. We apply the highest applicable standard to ensure compliance regardless of your location.

3.1 United Kingdom and European Economic Area

Under the UK Privacy and Electronic Communications Regulations 2003 (PECR), the EU ePrivacy Directive 2002/58/EC (as implemented by EEA member states), the UK General Data Protection Regulation (UK GDPR), and the EU General Data Protection Regulation (EU GDPR):

  • Essential cookies and essential fingerprinting may be placed or performed without consent, as they are essential for the Website to function (including security and fraud prevention) and fall within the exemption under PECR Regulation 6(4) and Article 5(3) of the ePrivacy Directive. The lawful basis for processing any personal data collected is Article 6(1)(f) of the UK GDPR / EU GDPR (legitimate interests).
  • Analytics cookies and analytics fingerprinting require your explicit, informed, and freely given consent before they are activated. These are only activated if you affirmatively opt in via our cookie consent banner. The lawful basis for processing any personal data collected is Article 6(1)(a) of the UK GDPR / EU GDPR (consent), in conjunction with PECR Regulation 6 or the applicable national implementation of the ePrivacy Directive.

No non-essential cookies are set unless you actively choose to accept them. Browsing our Website does not constitute consent. Consent is not a precondition for using the Website.

3.2 United States

There is no federal law requiring cookie consent in the United States. However, certain state privacy laws grant you rights over the personal information collected through cookies:

  • California (CCPA/CPRA): The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the right to know what personal information is collected, to request its deletion, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. Analytics data collected through cookies on this Website is used solely for our own internal business purposes (improving the Website) and does not constitute a "sale" or "sharing" under the CCPA/CPRA.
  • Other US State Laws: Several other states, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and Oregon (OCPA), have enacted consumer privacy laws that may grant you similar rights, including the right to opt out of targeted advertising and to request deletion of personal data. Because we do not use cookies for targeted advertising and do not sell personal data, the primary applicable rights relate to access, deletion, and transparency — all of which are addressed in this policy and our Privacy Policy.

Even where consent is not legally required, we provide all visitors — regardless of location — with the ability to accept or reject non-essential cookies via our consent banner.

4. Categories of Cookies We Use

4.1 Essential Cookies

These cookies are essential for the Website to function. They enable core functionality such as account authentication, security, and saving your cookie consent preferences. You cannot opt out of these cookies, as the Website cannot function properly without them. They do not collect information used for marketing or to track your browsing activity across other websites.

4.2 Analytics Cookies

These cookies allow us to understand how visitors interact with our Website by collecting pseudonymous data about pages visited, time spent on pages, session behaviour, and any errors encountered. This data is used solely to improve the performance and usability of our Website. For visitors in the UK and EEA, these cookies are only set after you provide consent. All visitors may opt out of these cookies at any time.

4.3 Browser and Device Fingerprinting

We may use browser and device fingerprinting techniques to generate a unique or semi-unique identifier based on technical attributes of your browser and device (such as browser type and version, screen resolution, installed plugins, operating system, language settings, and time zone).

  • Essential fingerprinting (security and fraud prevention): We may use fingerprinting without separate consent to detect automated or abusive access, prevent fraud, and maintain the security of our Services. This falls within the same exemption as essential cookies (PECR Regulation 6(4) / Article 5(3) of the ePrivacy Directive).
  • Analytics fingerprinting: Fingerprinting used for analytics purposes (understanding how visitors use the Website) is treated as non-essential and is only activated after you provide your explicit consent via our cookie consent banner. For visitors in the UK and EEA, analytics fingerprinting is only performed after you provide consent. All visitors may opt out at any time.

5. Specific Cookies We Use

The following table sets out the specific cookies placed on your device when you use our Website.

Essential Cookies

Cookie NameProviderPurposeTypeDuration
cookiesValyu (first-party)Stores your cookie consent preferences so we do not ask you again on each visitHTTP cookie1 year
Session / authentication cookiesValyu (first-party)Maintains your logged-in session and secures authenticated access to the Valyu platformHTTP cookieSession / up to 30 days
Cookie NameProviderPurposeTypeDuration
ph_phc_*_posthogPostHog, Inc. (first-party*)Product analytics: records a pseudonymous device identifier, session information, and user interaction events to help us understand how visitors navigate and use the WebsiteHTTP cookie1 year
_gaGoogle LLC (first-party*)Distinguishes unique visitors to the Website by assigning a randomly generated Client IDHTTP cookie2 years (effectively ~13 months due to browser limitations)
_ga_<container-id>Google LLC (first-party*)Persists session state data, including session duration and page interaction informationHTTP cookie2 years (effectively ~13 months due to browser limitations)
_gidGoogle LLC (first-party*)Distinguishes users for the purpose of session-level analyticsHTTP cookie24 hours

*These cookies are set on the valyu.ai domain (first-party), but the data is processed by the respective third-party service provider.

Technologies That Do Not Use Cookies

TechnologyProviderHow It Works
Vercel Web AnalyticsVercel, Inc.Vercel Web Analytics does not set cookies or use persistent identifiers. Visitors are identified by a privacy-preserving hash derived from the incoming request, which is automatically discarded after 24 hours. No data is stored on or accessed from your device. This technology operates without requiring consent under PECR or the ePrivacy Directive, as no information is stored on or read from your device.

6. Third-Party Data Processing

Where analytics cookies are activated (either with your consent or in jurisdictions where consent is not required), data collected by those cookies is processed by the following third-party service providers:

  • PostHog, Inc. — Product analytics. PostHog processes interaction data on our behalf to help us understand how the Website is used. PostHog's privacy policy is available at https://posthog.com/privacy.
  • Google LLC — Web analytics via Google Analytics 4. Google processes aggregated and pseudonymous usage data on our behalf. Google's privacy policy is available at https://policies.google.com/privacy. You may additionally opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
  • Vercel, Inc. — Cookieless web analytics as described in Section 5. Vercel's privacy policy is available at https://vercel.com/legal/privacy-policy.

We do not use advertising cookies, advertising networks, or cross-site behavioural tracking technologies. No data collected through cookies on our Website is sold or shared with third parties for advertising purposes.

7. Your Choices and How to Control Cookies

When you first visit our Website, you will be presented with a cookie consent banner that allows you to:

  • Accept All — enables all cookies, including analytics cookies.
  • Reject All — only essential cookies will be set. No analytics cookies will be activated.
  • Manage Preferences — choose which categories of non-essential cookies to enable or disable.

Non-essential cookies default to off and are only activated if you affirmatively opt in.

7.2 Changing Your Preferences

You may change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of any page on our Website. This will re-display the consent banner and allow you to update your choices. Where you withdraw consent for or opt out of analytics cookies, those cookies will be deleted and the associated tracking scripts will be deactivated.

7.3 Browser Settings

Most web browsers allow you to manage cookies through their settings. You can typically configure your browser to refuse cookies, delete existing cookies, or alert you when a cookie is being set. If you disable essential cookies via your browser, certain features of the Website may not function correctly.

Instructions for managing cookies in common browsers:

7.4 Google Analytics Opt-Out

You may prevent Google Analytics from collecting data by installing the Google Analytics Opt-Out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. This works independently of your cookie consent preferences.

8. Data Retention

Cookie data is retained only for as long as described in the duration column of the cookie tables in Section 5 above. Analytics data processed by PostHog and Google Analytics is retained in accordance with our configured data retention settings within those services and is subject to each provider's data processing terms.

9. International Data Transfers

Some of our third-party service providers — PostHog, Inc., Google LLC, and Vercel, Inc. — are based in the United States.

  • For UK visitors: Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, including reliance on the UK International Data Transfer Agreement (UK IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or the provider's participation in an adequacy framework recognised by the UK Secretary of State.
  • For EEA visitors: Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the EU GDPR, including reliance on the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision under Article 45 of the EU GDPR, such as the EU-US Data Privacy Framework where applicable.

10. Your Rights

10.1 UK and EEA Residents

In relation to any personal data collected through cookies, you have the right to:

  • Withdraw consent at any time via our Cookie Settings, without affecting the lawfulness of processing carried out before withdrawal.
  • Access the personal data we hold about you.
  • Rectify inaccurate personal data.
  • Request erasure of your personal data.
  • Restrict or object to processing of your personal data.
  • Data portability — receive your personal data in a structured, commonly used, machine-readable format.
  • Lodge a complaint with a supervisory authority:

10.2 US Residents

Depending on your state of residence, you may have the following rights under applicable state privacy laws (including the CCPA/CPRA, VCDPA, CPA, CTDPA, and others):

  • Right to Know / Access: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
  • Right to Opt Out: You may opt out of the "sale" of personal information or "sharing" for cross-context behavioural advertising. As noted above, we do not sell personal information or share it for cross-context behavioural advertising. You may still opt out of analytics cookies via our Cookie Settings.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • Right to Correct: You may request correction of inaccurate personal information.

To exercise any of these rights, please contact us using the details in Section 12 below.

10.3 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. There is currently no universally accepted standard for how websites should respond to DNT signals. We do not currently alter our data collection practices in response to DNT signals, but you may control cookies through the mechanisms described in Section 7.

11. Changes to This Policy

We may update this Cookies Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Where changes are material, we will update the "Last updated" date at the top of this page and, where required, present a renewed consent prompt via our cookie banner.

12. Contact Us

If you have any questions about this Cookies Policy, our use of cookies, or wish to exercise any of your rights, please contact us at:

Valyu.Network Ltd

Email: contact@valyu.ai