Cookie Policy
Effective 30 August 2026 · Operated by [Your name], an independent developer based in Hyderabad, India
nvault uses the minimum browser storage needed to keep you signed in and remember your display preferences. We do not use tracking, advertising or analytics cookies, and we load no third-party scripts.
1. Strictly-necessary cookies
| Name | Purpose | Type | Retention |
|---|---|---|---|
evrt | Holds your session refresh token so you stay signed in. HttpOnly, Secure in production, SameSite=Lax, and scoped to /api/v1/auth so it is only sent to the refresh and logout endpoints. | First-party, essential | Up to the session lifetime; cleared on logout |
These cookies are required for the app to function and cannot be switched off. They do not require consent under the GDPR's ePrivacy rules or comparable law because they are strictly necessary to deliver a service you have requested.
2. Local storage (not cookies)
The marketing site and app store two small preference values in your browser's localStorage: your theme (light / dark / system) and your accent colour. These never leave your device and are not sent to our servers.
3. What we do not use
- No advertising or retargeting cookies.
- No third-party analytics (no Google Analytics, no product-analytics SDKs).
- No social-media pixels or embedded trackers.
- No cross-site tracking of any kind.
4. Payment pages
When you start a checkout you are taken to a page hosted by our Merchant of Record, Polar. That page is governed by Polar's own cookie and privacy notices.
5. Managing cookies
You can clear or block cookies in your browser settings, but blocking the evrt cookie will sign you out and prevent you from using the app.
6. Contact
Questions: privacy@nvault.dev.