Cookie Policy

The few cookies Vistra uses, and why.

Last updated: 12 October 2026

1. The short version

Vistra uses essential cookies only. These are small files that make the site work, keep it secure, or remember a choice you made, such as dark mode.

We do not use advertising or marketing cookies, and we do not use analytics cookies or tracking pixels. If we ever want to add analytics cookies, we will ask for your permission first and update this page.

2. What cookies are

A cookie is a small text file stored in your browser when you visit a website. Websites use them to remember things between visits or between pages. Similar tools, like your browser’s local storage, do the same job, and this policy covers those too.

3. What we set

3.1 Theme preference

When you switch between light and dark mode, we save your choice in a cookie called vistra-theme (and in your browser’s local storage). It lasts 1 year. It is set for the Vistra domain and its subdomains so the website and the web app show the same theme. It contains only the word “light”, “dark” or “system”.

3.2 Signing in and keeping the web app working

When you sign in to the Vistra web app, your sign-in details and a few settings (such as your timezone, date format and the business you are working in) are kept in your browser’s local storage, not in cookies. The web app also remembers whether its side menu is open or closed. These are needed for the app to work.

3.3 Security cookies for staff tools

Our internal administration tools, which only our staff use, set a session cookie (sessionid) to keep a staff member signed in and a security cookie (csrftoken) that protects forms against forged requests. You will only get these if you sign in to those tools.

4. What we do not set

  • No analytics cookies and no website tracking tools
  • No advertising, retargeting or social media tracking cookies
  • No cookies that follow you around other websites

Our app can send crash and performance reports to Google Firebase, but only if you agree to it in the app’s settings. That is a feature of the mobile app, not a website cookie. See our Privacy Policy.

5. Managing cookies

Because we only use essential cookies, we do not show a cookie banner. You can still block or delete cookies in your browser settings. If you do, the site keeps working, but it will forget your theme choice, and our staff tools will not work.

You can also clear your browser’s local storage, which signs you out of the web app.

6. Third parties

We do not allow third parties to place advertising or analytics cookies on our website. Our payment provider, Stripe, may use its own cookies on its hosted payment pages when you subscribe. Those pages are run by Stripe under its own privacy policy.

7. Changes to this policy

If we add any cookie that is not essential, we will ask for your consent first and update this page. The “last updated” date at the top shows the latest version.

8. Contact us

If you have questions about cookies or privacy:

Questions about this policy? Contact us or email hello@vistra.report.