Cookie Policy.

Version 1.0 — in force from 7 October 2026

This policy explains what Viroan sp. z o.o. stores in your browser and on your device, why, how long it stays, and how you give or withdraw your consent. It is part of the Privacy Policy, which explains how we use the personal data involved and the rights you have. “Cookies and similar technologies” here means cookies, values stored in your browser (local and session storage), a device fingerprint, and content embedded from another service.

1. The rule we follow

We read or store information on your device only where it is strictly necessary for the service you asked for, or where you have given your consent. For anything that is not strictly necessary we ask first, through a consent banner on which refusing is as easy as accepting, with no pre-ticked boxes; you may change or withdraw your choice at any time (clause 6), and we ask again at least every 13 months. We use no third-party analytics, no advertising cookies and no cross-site tracking.

2. Strictly necessary — used without consent

These are required for the platform to work and for your account to be secure. They cannot be switched off while you use the service.

• Sign-in — a cookie that keeps you signed in (viroan_user_rt) and one that tells the site a session exists (viroan_session). Cookies, about 30 days.
• Your cookie choices — a record of what you accepted or refused, so we apply it and do not ask again every visit. Up to 13 months.
• Card payment — when you pay by card, the payment step is provided by our payment provider, Stripe, which may set its own cookies there to process the payment and prevent payment fraud, under its own cookie policy. It is loaded only at that step.
• Technical — a short-lived value that prevents a language-redirect loop. Session only.

3. Preferences — your own choices, kept on your device

These remember how you like to use the site. They stay in your browser and we do not read them off your device for any other purpose; clearing your browser data removes them.

• Appearance — the light or dark theme you picked.
• Language — the language you chose, so the site opens in it next time.
• Intro — whether you have already seen the opening animation this session.
• Drafts and lists — an unsent product draft in the creator studio, and products you saved before signing in (merged into your account once you do).

4. Optional — only with your consent

• Device security signal — a device fingerprint: a value computed in your browser from its characteristics (browser and version, language, platform, processor and memory hints, screen, time zone and a drawing and graphics measurement), kept in your browser (viroan_device_fp) and sent with your requests when you sign in and when you use the platform and the catalogue, to recognise the device and help detect fraud, account takeover and the opening of multiple accounts. It is computed, stored and read only if you allow it in the consent banner; until then nothing is computed, and if you withdraw your consent the stored value is deleted and no longer sent. You can use Viroan without it. How we use the value is in the Privacy Policy.
• Referral link — if you arrived through someone’s referral link and allow it in the consent banner, the referral code is kept in your browser (viroan_ref) for 30 days, so the person who referred you can be credited when you sign up. Without your consent the code is used only while the page is open and is not stored.
• Analytics — we currently use none. If we ever introduce measurement, it will appear here and run only with your consent.
• Embedded media — a Creator’s demonstration video is hosted on a third-party service (YouTube or Vimeo) and loads only when you choose to play it. Only then does your browser contact that service, which may set its own cookies under its own policy; until you do, it is not contacted.

We serve our own fonts, so displaying the site does not make your browser contact a font provider.

5. Software you install on your own computer

A Product you buy runs on your own machine, not in your browser, and may keep a small licence file there so that the licence can verify itself and resist tampering: a MetaTrader Product keeps a licence-state file in the terminal’s shared folder, and a cTrader Product keeps a value in the platform’s local storage. This is not a cookie we set, it stays on your computer, and it holds no more than the licence identifier, a verification token and a hash of your activation key — never the key itself, and nothing about your trading.

6. How to control what is stored

Strictly necessary storage (clause 2) is used without consent, because the service cannot work without it, and the preferences in clause 3 are kept because you set them yourself. Everything in clause 4 is used only after you agree — through the consent banner, or, for a video, by choosing to play it. You can change or withdraw your choice at any time through the “Cookie settings” link in the footer. You can also block or delete cookies and clear stored values in your browser settings; detailed instructions are published by each browser maker. If you block the strictly necessary items, signing in and parts of the platform will not work.

7. Changes, contact and language

We may update this policy; the version number and effective date are shown above, and a material change is notified as the Privacy Policy describes. For any question write to legal@viroan.com or support@viroan.com. This policy is published in English and Polish; if you are a Polish citizen or resident in Poland the Polish version applies to you, in all other cases the English version applies, and any other translation is for information only.