last updated: may 2026

Cookie Policy

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember information about your visit, like your login status and preferences.

This policy explains what cookies Vaulto uses, why we use them, and how you can control them.

2. Our approach to cookies

Vaulto takes a privacy-first approach:

✓We use cookieless analytics (Plausible) — no tracking cookies
✓We don't use advertising or marketing cookies
✓We don't sell data to third parties
✓We only use essential cookies required for the site to function

3. Essential cookies we use

These cookies are strictly necessary for the website to function. They cannot be disabled without breaking core functionality.

Cookie name

Purpose

Duration

Provider

sb-*-auth-token

Authentication session management

Session / 7 days with 'Remember me'

Supabase

sb-*-auth-token-code-verifier

PKCE code verifier for secure OAuth flow

Session

Supabase

vaulto_cookie_consent

Records cookie banner acknowledgment

Persistent

Vaulto (localStorage)

4. Analytics (cookieless)

We use Plausible Analytics, a privacy-focused analytics service that:

—Does not use cookies
—Does not track individual users
—Does not collect personal data
—Is fully GDPR, CCPA, and PECR compliant
—Is hosted in the EU

Plausible collects only aggregate data like page views and referrer sources. No consent is required because no personal data is processed.

5. Third-party services

Supabase (Authentication)

Supabase provides our authentication system and sets cookies to maintain your login session. These are essential for accessing protected areas of the site.

Stripe (Payments)

When you make a payment or connect your Stripe account, Stripe may set cookies for fraud prevention and payment processing. See Stripe's cookie policy for details.

DocuSeal (NDA signing)

When you sign an NDA, DocuSeal may set cookies for the document signing session. These are only present during the signing process.

6. Managing cookies

You can control cookies through your browser settings:

Note: Blocking essential cookies will prevent you from logging in or using authenticated features of Vaulto.

7. Legal basis (GDPR)

Under GDPR and the ePrivacy Directive:

—Essential cookies — No consent required (strictly necessary exemption)
—Analytics cookies — We don't use any (Plausible is cookieless)
—Marketing cookies — We don't use any

8. Updates to this policy

We may update this policy when we change our cookie practices. Material changes will be noted at the top of this page with an updated date.

9. Contact

Questions about our cookie practices?

privacy@vaulto.sh

See also: Privacy Policy · Terms of Service