Cookie Policy

Draft — review before launch
Last updated: pending legal review

We use only essential cookies

Little Vaulty does not use analytics cookies, advertising cookies, or any third-party tracking. We do not build profiles of how you browse the site. The cookies we set exist solely so the app can keep you securely signed in and protect your account.

What they're for, in plain words

When you use Little Vaulty, a small number of cookies are stored in your browser:

Keeping you signed in. A session cookie remembers that you have authenticated, so you do not need to enter your credentials on every page. Without it, the app cannot maintain a secure logged-in state.

Trusted devices. If you choose to trust a device after two-factor authentication, a cookie remembers that choice for up to 12 hours so you are not asked for a 2FA code on every visit within that window.

Security during sign-in. Additional short-lived cookies may be set during authentication flows (such as login or two-factor verification) to protect against cross-site attacks and keep the sign-in process secure.

Without these cookies, Little Vaulty cannot function as a secure, logged-in application.

Consent and legal basis

Under the EU ePrivacy Directive and UK PECR, strictly necessary cookies — those required to provide a service you have asked for — are exempt from the requirement to obtain prior consent. The cookies described above fall into that category. The cookie notice you may see on our public pages is a courtesy disclosure, not a consent gate: we do not need your permission to set essential cookies, and we tell you about them anyway.

If we ever introduce non-essential cookies (for example, analytics to understand how the marketing site is used), we will ask for your consent first with a genuine accept/reject choice, and no such cookie will be set until you accept.

Separately, we set a small lv_consent cookie when you dismiss the cookie notice. That cookie remembers you have seen the notice — it holds no personal information and is not used for tracking.

Managing cookies

You can clear cookies at any time through your browser settings. If you clear session or trusted-device cookies, you will be signed out and may need to complete two-factor authentication again on your next visit.

On public pages, you can re-open the cookie notice at any time using the Cookie preferences link in the site footer.

More about your data

Cookies are one part of how we handle information. For the full picture — including what personal data we process, our zero-knowledge encryption model, and your GDPR rights — read our Privacy Policy.