Cookie Policy
Version 2026-10-16. In effect from 16 October 2026.
This policy lists the cookies and other browser storage that valtorapro.com uses on its public pages, in the client app and in the staff back office: what each one does, how long it lasts, and the choices you have.
Who we are
Valtora is a brand of 2ndline Inc., a Florida corporation (United States), which operates this website and platform. Questions about this policy: .
In short
- We set cookies to keep you signed in and to protect shared document links. The service can't work without them.
- One item is optional: the referral memory, which keeps an agent's code in your browser for up to 30 days. We store or read it only if you allow it.
- valtorapro.com doesn't load analytics, advertising or social media scripts. Our fonts are served from our own site, so loading a page doesn't contact Google or another font service.
Needed for the service
These are set only when you use the feature they support. We don't ask for consent for them; the last section explains why.
| Name | Type | What it does | How long |
|---|---|---|---|
vt_session | Cookie | Keeps you signed in to the client app after you sign in with a passkey. | 7 days from sign-in, or until you sign out |
vshare_… | Cookie | Only for someone opening documents a client has shared with them: shows that the access code was entered. | 2 hours |
vt_consent | Browser storage | Remembers your choice about the referral memory, so we don't ask again. Holds only the choice and its date. | 12 months. After that we ask again the next time it applies |
| Notification service | Service worker and push subscription | Only if you turn on notifications for secure messages and your browser allows them. Lets this device show an alert that a message is waiting; the alert never contains the message. | Until you turn notifications off, or remove the site's data or permission in your browser |
vt_session and vshare_… are set with the HttpOnly flag, so scripts running in the page can't read them. On valtorapro.com they are also Secure (sent only over HTTPS). Their SameSite setting (Lax for vt_session, Strict for vshare_…) stops other websites from sending them with background requests or form posts. Signing out ends your session on our servers as well as removing the cookie.
Staff only
Valtora staff signing in to the back office at /staff also receive this cookie. Clients never do.
| Name | Type | What it does | How long |
|---|---|---|---|
vt_staff | Cookie | Keeps a staff member signed in to the back office. HttpOnly, SameSite=Lax and, on valtorapro.com, Secure. | Up to 1 day from sign-in. The session stops working after 30 minutes without activity, or at sign-out |
Optional: referral memory
| Name | Type | What it does | How long |
|---|---|---|---|
vt_ref | Browser storage | If you arrive through an agent's link and allow it: keeps the agent's code, with the date it was saved and the date it expires, so the agent is credited if you come back later to sign up. | 30 days at most. Removed sooner when you create your account or turn the referral memory off. Browser storage doesn't expire by itself, so we check the date every time it's read and delete it once it has passed. |
When you arrive through an agent's link, we ask before storing anything. Saying no doesn't affect signing up or signing in. The code from the link is still shown on the sign-up form, where you can remove it. If you sign up, the code is kept with your account for up to 30 days until you apply, and your application then records which agent introduced you. We keep that record because we pay the agent's commission from it, as the Privacy Policy explains. Turning the referral memory off removes the code from your browser; it doesn't change a referral already recorded with your account or application.
Other companies' pages
- Card details. When you choose to see a card's details, they are shown in a frame provided by the card issuer, which may use its own cookies or storage under its own policy.
- Partner pages you go to. Linking a bank account, paying by bank or adding a payment card takes you to a page run by a bank or payment partner. Those pages use their own cookies under their own policies.
- Hosting. Vercel delivers this website. If Vercel's attack protection is switched on, Vercel may ask your browser to pass a check and set its own security cookie. We don't receive or use it.
Your choices
Change your choice about the referral memory at any time with (also at the bottom of every page). You can also delete cookies and site data in your browser settings. If you block the cookies needed for the service, you won't be able to sign in.
Why some storage needs no consent
In the United Kingdom and the European Economic Area, the law allows a website to store information on your device without consent when it is strictly necessary for a service you have asked for. We rely on this only for the sign-in cookies, the shared-document cookie and the notification service you turn on, and only for the purposes described above. Keeping your consent choice lets us respect it. Paying agents is our business purpose, not a service you asked for, so the referral memory needs your consent. Other countries we serve have their own rules; we apply the same choices wherever you are.
Changes
We update this policy when the storage we use changes. The date at the top shows when it last changed.