Legal

Cookie policy

What we set, when, and how to say no.

Last updated: [DATE].

The short version

We set nothing but strictly necessary cookies until you tell us otherwise. When you first visit, you get a choice with the same prominence for accepting and rejecting. Rejecting is one click, and so is changing your mind later.

What cookies are

Small files a website stores on your device. Similar technologies include local storage and tracking pixels, and this policy covers those too.

What we use

Strictly necessary
Keep you signed in, remember your region, protect forms from abuse. These are set without consent because the site cannot work without them, and they carry no tracking.
Analytics
Tell us which pages are used and where people hit errors, in aggregate. Set only if you agree.
Preferences
Remember choices such as a dismissed banner. Set only if you agree.
Marketing
Measure whether our advertising works. Set only if you agree. We do not currently run advertising, so none of these are in use today. If that changes, we will ask again before setting any.

The cookies we actually set

vaultly_session
Strictly necessary. Keeps you signed in. Expires when you close the browser.
vaultly_csrf
Strictly necessary. Protects forms from cross-site abuse. Session.
vaultly_consent
Strictly necessary. Remembers your cookie choice so we do not ask again. 6 months.
[analytics cookie name]
Analytics. [Provider]. [Duration]. Set only with your consent.

This table is the full list. If we add anything, we update this page and ask you again before setting it.

Changing your mind

Open Cookie settings in the footer of any page. Withdrawing consent is as easy as giving it, and takes effect immediately. You can also block or delete cookies in your browser settings, though blocking strictly necessary cookies will stop sign-in working.

Third parties

Where a cookie is set by someone other than us, the provider is named in the table above and their own privacy policy applies. We do not allow third parties to set cookies on our site for their own purposes without your consent.

Contact

privacy@vaultly.app.

Need a hand, or want to complain?

Every case gets a reference you can track and a written outcome. We acknowledge complaints within one business day.