Cookie Policy
This page lists everything Vapura stores in your browser, what each item is for, and how long it stays. Analytics cookies are off until you turn them on, and every part of this site — including booking and pricing — works the same whether you allow them or not.
Change your choice
You can change your answer at any time, as easily as you gave it. Your choice takes effect immediately.
Your current choice
Checking your saved choice…
Turning analytics off stops new analytics cookies from being set and tells Google's tags to stop using them. Cookies already stored in your browser are removed through your browser's own settings, which the section below explains. Nothing on this site depends on your answer — booking, pricing, and every page work exactly the same either way.
Cookies we set ourselves
Two, both strictly necessary, neither used for analytics or advertising. If you never sign in to the Console, this site sets no cookies of its own at all.
| Name | What it does | How long it lasts |
|---|---|---|
| vapura_session | Keeps you signed in to the Console after you log in. Set only when you sign in. Marked HttpOnly, Secure, and SameSite=Lax, so it cannot be read by scripts and is not sent on cross-site requests. | Until the session ends or you sign out |
| vapura_qbo_oauth_state | Protects the QuickBooks connection step against request forgery. Only ever set for an administrator connecting accounting, and scoped to that one API path. | Cleared as soon as the connection finishes |
| vapura_gcal_oauth_state | Protects the Google Calendar connection step against request forgery. Only ever set for an administrator connecting scheduling, and scoped to that one API path. | Cleared as soon as the connection finishes |
| vapura_gmail_oauth_state | Protects the Gmail connection step against request forgery. Only ever set for an administrator connecting the mailbox Vapura sends from, and scoped to that one API path. | Cleared as soon as the connection finishes |
Information kept in your browser
These are not cookies. They are stored locally on your device and are never sent to our server, so they are not part of any request you make. They are listed because you deserve a complete answer to “what is this site keeping on my device,” not just the part that meets the technical definition of a cookie.
| Name | What it does | How long it lasts |
|---|---|---|
| vapura_consent_v1 | Remembers your answer to the cookie question so you are not asked again. Necessary in order to honour your choice at all. | Until you change it or clear site data |
| vapura_qualification | Remembers the ZIP code and service-area result from a check you already completed, so booking does not ask you for it twice. Holds ZIP and area status only. | Until you clear site data |
| vapura_zip_check | Older version of the same ZIP result, kept so a returning visitor's saved check still works. | Until you clear site data |
| vapura_book_selection | Remembers the service and plan you selected so a part-finished booking survives a page reload. | Until you clear site data |
| vapura_alacarte_reco_dismissed | Remembers that you chose to keep your à la carte selections instead of a suggested plan, so the same suggestion is not repeated for an unchanged selection. | Until you close the tab |
| vapura_utm | Remembers which campaign link brought you here, so we can tell which advertising is worth paying for. | Until you clear site data |
Analytics cookies, only if you allow them
We use Google Analytics through Google Tag Manager to understand which pages people find useful. Google's tags load with all consent categories set to denied, so no analytics or advertising cookie is set unless and until you allow it. Turning it off again through the control above tells those tags to stop.
| Name | What it does | How long it lasts |
|---|---|---|
| _ga | Google Analytics. Distinguishes one visitor from another. | 2 years |
| _ga_<container-id> | Google Analytics. Keeps track of a single visit. | 2 years |
| _gcl_au | Google Ads conversion measurement, set only if you arrive from a Google ad and only while an Ads account is linked. | About 90 days |
Expirations above are Google's published values, from Google Analytics 4 cookie usage and How Google uses cookies. Google may change them, and we do not control that.
Two other Google services
- reCAPTCHA. When you submit a form, we load Google reCAPTCHA to tell a real person from an automated one. It runs only at that moment, and it protects the form from abuse rather than measuring you. Because it exists to keep the form working, it is not covered by the analytics choice above.
Removing what is already stored
Turning analytics off stops anything new from being set. To delete what is already there, use your browser's own controls — in Chrome, Edge, Firefox, and Safari this is under privacy or site settings, usually as “Cookies and site data” or “Clear browsing data.” Clearing site data for https://getvapura.com also erases your saved cookie choice and your saved ZIP check, so this page will ask again on your next visit.
Questions
Email service@getvapura.com or call (520) 261-2615. Our Privacy Notice covers information you send us through forms, and our Terms cover use of the site.