1. The honest summary

This site sets no advertising cookies, no analytics cookies, and no third-party cookies of any kind.

There is no Google Analytics, no Meta pixel, no LinkedIn tag, no advertising network and no consent-management vendor on vdmdigital.io. That is not a promise we are asking you to take on trust — a strict Content Security Policy on our server refuses to load any script we did not ship ourselves, so a third-party tracker cannot be added casually or accidentally.

That is also why you are not being shown a cookie banner. Under POPIA and the GDPR, a banner is required when you need consent for non-essential tracking. We do not do non-essential tracking, so there is nothing to consent to.

2. What we do store

Everything below is first-party — stored by vdmdigital.io in your own browser and readable only by vdmdigital.io.

2.1 Analytics identifiers (localStorage and sessionStorage)

  • vdm_anon_id — stored in localStorage. A random identifier, generated in your browser, with nothing derived from you in it. It lets us tell a returning visit from a new one without knowing who you are. Persists until you clear your browser storage.
  • vdm_session_id — stored in sessionStorage. A random identifier for this browsing session, so a single visit reading four pages counts as one visit and not four. Deleted the moment you close the tab.

These are not cookies. They are never transmitted to any third party, and they are not attached automatically to requests the way a cookie is.

We do not create either of them if your browser sends a Do Not Track or Global Privacy Control signal, if you look like a bot, or if you are signed in to our admin area. In those cases nothing is stored and nothing is recorded.

What we do with the events they identify is set out in clause 3.4 of our Privacy Policy.

2.2 Sign-in session (localStorage)

  • sb-<project>-auth-token — written by our authentication provider when you sign in to the client and staff area. It holds your session token so you stay signed in between pages. Strictly necessary for the sign-in to work; it is not used for tracking, and it does not exist unless you have signed in.
  • Clearing it signs you out. Signing out removes it.

2.3 What we do not store

  • No advertising or retargeting identifier.
  • No cross-site identifier, and no participation in any identity graph.
  • No device fingerprint. We do not read your fonts, canvas, audio stack, hardware concurrency or screen dimensions to build one.
  • No IP address in our analytics table.

3. Third-party storage you may encounter

Three places on our site involve someone else's infrastructure. None of them tracks you across the web:

  • Payment pages. When you pay us, you are handed to our payment processor's own hosted page. That page is theirs, and their cookies and their privacy policy apply while you are on it — Paystack for ZAR payments, and Stripe for international card payments in future. They use strictly necessary and fraud-prevention cookies. We do not receive them.
  • Testimonial videos. Approved testimonial videos are served from our file-storage provider. Playing one is a plain media request and sets nothing on your device.
  • Links out. Once you follow a link to a client site or anywhere else, that site's own policy applies.

4. Fonts, and why there is no third-party request for them

All fonts on this site are self-hosted from our own server. There is no request to Google Fonts, so no third party learns that you visited us by serving us a typeface. The same applies to our images, styles and scripts: everything loads from vdmdigital.io.

5. How to clear or block it

  • Clear it: your browser's Clear browsing data / Clear site data for vdmdigital.io removes everything listed above. The site keeps working; you will simply be signed out and counted as a new visitor.
  • Block it: browser settings that block site data will stop localStorage and sessionStorage from being written. Our code handles that gracefully — every read and write is guarded, so nothing breaks. The public site works fully with storage blocked; the sign-in area will not be able to keep you signed in.
  • Opt out of analytics entirely: enable Do Not Track or Global Privacy Control in your browser. We check for both before we store or send anything.

Blocking site data does not disable any part of the public site.

6. Changes

If we ever add something that stores data in your browser, we will list it here before it ships, and if it needs consent we will ask for it properly rather than assume it.

7. Contact

Questions about this policy: erik@vdmdigital.io

VDM Digital (Pty) Ltd (Reg. No. 2026/179981/07), 13 Jigger Avenue, Somerset West, Western Cape, 7130, South Africa

Last updated: 10 September 2026.