Cookie Policy
How does Virtnumber use cookies?
We use a small number of cookies: a few that keep the Service and your account working, one that remembers your cookie choice, and, only once you accept, one analytics cookie so we can see how the site performs.
We do not use Google Analytics, Google Ads, or any advertising cookie, and no cookie of ours is used to build an advertising profile. For more on what we do with any personal data these cookies touch, see our Privacy Policy.
What are cookies?
A cookie is a small file stored on your device that lets a website recognize and remember details about your visit. Cookies can serve different purposes, such as enabling site functionality, gathering analytics, storing preferences, or supporting advertising.
You control cookies through your browser settings, and most browsers offer a private browsing mode that avoids storing cookies at all.
Many jurisdictions require websites to inform users about their use of cookies and, in some cases, to obtain consent before placing certain cookies. Below is an overview of the cookies used on Virtnumber.
Cookies we use
Necessary cookies keep the site, your account, and basic security working, they can't be switched off. Analytics cookies (PostHog, EU-hosted) help us understand how the site is used, and are only set after you accept them in the consent banner.
| Subgroup | Cookie | Provider | Party | Purpose | Duration |
|---|---|---|---|---|---|
| Necessary | ourid | virtnumber.com | First Party | Identifies your logged-in account so the panel knows who you are. | 7 days |
| Necessary | sessionid | virtnumber.com | First Party | Keeps you signed in between page loads after login. | 7 days |
| Necessary | google_oauth_state | virtnumber.com | First Party | Security check used only during "Sign in with Google", prevents a forged login attempt. | 10 minutes |
| Necessary | apple_oauth_state | virtnumber.com | First Party | Security check used only during "Sign in with Apple", prevents a forged login attempt. | 10 minutes |
| Necessary | CookieConsent | Cookiebot | First Party | Remembers your cookie consent choice so we don’t ask again on every visit. | 1 year |
| Necessary / Security | Cloudflare challenge cookies | Cloudflare | Third Party | Set automatically when the anti-bot check (Turnstile) runs on login, registration, password reset, or the contact form. Not used for tracking. | Short-lived, set by Cloudflare |
| Analytics | ph_…_posthog | PostHog (EU) | First Party | Anonymous product analytics: which pages get used, page load speed. Only set after you accept. | Cleared if you withdraw consent |
PostHog's cookie is served through our own domain rather than posthog.com directly, which is why it counts as first-party even though PostHog is the provider.
Your consent
Your current choice, and the cookies found on this site by our consent provider, Cookiebot. You can change or withdraw your consent here at any time, or with "Privacy settings" in the footer.
What we don't use
No Google Analytics, no Google Ads, no Meta/Facebook pixel, and no third-party advertising or retargeting cookie of any kind. Sentry, our error-monitoring tool, runs without setting a cookie at all.
Sign in with Google
If you choose "Sign in with Google", you're briefly taken to Google's own accounts.google.com, where Google may set its own cookies under Google's own Privacy Policy. That part of the flow is between you and Google, not something we control. The same applies to Apple's Privacy Policy if you sign in with Apple instead.
Managing cookies
You can accept or decline non-essential cookies from the consent banner at any time, and change your choice later the same way. Browser settings can block cookies entirely, though staying signed in to your account won't work if necessary cookies are disabled. Only strictly necessary cookies are ever set before you've made a choice, nothing in the Analytics row above loads until you accept it. Since 27 July 2026, cookie consent rules sit directly in the GDPR itself (moved there from the older ePrivacy framework by EU Regulation 2026/1744), but the underlying rule you experience here hasn't changed: no non-essential cookie without your say-so first.