Skip to content
Log InGet Started

Legal

Cookie Policy

Last updated: April 17, 2026 · Effective: April 17, 2026

This Cookie Policy explains how VG-Real Estate Services Inc. ("VG Real Estate", "we", "us") uses cookies and similar technologies on vg-realestate.ca and the VG Real Estate CRM platform (together, the "Service"). Read this alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember your preferences and actions. Similar technologies we use include browser local storage and session storage, and pixel-free analytics beacons.

2. Categories of Cookies We Use

2.1 Strictly Necessary

Required for the Service to function. You cannot opt out of these without breaking core functionality.

  • NextAuth session cookie (authjs.session-token) — keeps you signed in to the CRM. HTTP-only, Secure, SameSite=Lax. Lifetime: 30 days (rolling).
  • CSRF token (authjs.csrf-token) — prevents cross-site request forgery on auth endpoints.
  • Callback URL cookie (authjs.callback-url) — remembers where to return you after sign-in.
  • Cloudflare Turnstile (cf_chl_*) — bot-protection challenge on login and registration. Set by Cloudflare on our behalf.
  • Rate-limit cookie — short-lived, used by our middleware to apply per-IP rate limits to login and API endpoints.

2.2 Functional

Remember your choices so the Service works the way you prefer.

  • Theme preference — dark or light mode selection.
  • Sidebar state — collapsed or expanded navigation.
  • Table preferences — column order, sort direction, per-module filters (stored in local storage).
  • Listings filter state — session storage keeps your filter, sort, and page when you navigate away and return.
  • Onboarding progress — tracks completed onboarding steps.

2.3 Analytics

We use privacy-friendly, aggregated analytics to understand how visitors interact with the marketing website and which CRM features are used. Analytics cookies collect de-identified data and do not link individual visitors to their CRM identity. You can opt out through your browser's "Do Not Track" signal or tracker-blocking extensions.

3. Third-Party Cookies

Certain features rely on third parties, which may set their own cookies under their own privacy policies:

  • Stripe (__stripe_mid, __stripe_sid) — fraud prevention on the Stripe-hosted checkout page. Stripe Privacy Policy.
  • Google — when you sign in with Google OAuth or connect Gmail, Google sets cookies under its privacy policy. Google Fonts are served self-hosted or via CSS and do not set cookies.
  • Cloudflare — Turnstile challenge cookies, as above.

We do not use advertising, retargeting, or social-media tracking pixels (no Meta Pixel, no TikTok pixel, no LinkedIn Insight Tag).

4. Cookie Duration

  • Session cookies — deleted when you close your browser.
  • Persistent cookies — remain on your device for the lifetime listed above (or up to 12 months) until cleared manually.
  • Local storage / session storage — not strictly cookies; persists until you clear site data or (for session storage) close the tab.

5. Managing Cookies

Most browsers let you view, block, or delete cookies:

Disabling strictly necessary cookies will prevent you from signing in and using the CRM. Disabling functional cookies will reset your preferences each session.

6. Updates to This Policy

We may update this Cookie Policy when we add features or integrations. Material changes will be posted here with an updated effective date.

7. Contact Us

Questions about our use of cookies:

VG-Real Estate Services Inc.

Toronto, Ontario, Canada

Privacy: privacy@vg-realestate.ca