KeyVault.

Draft - under legal review

This document is published in draft form so users can read our intent. It has not yet been reviewed by counsel and is not yet binding on KeyVault Edge or its customers. A final version will replace this page and supersede any draft language. Last updated: 2026-10-04

Legal

Cookie Policy

Last updated: October 4, 2026

1. What are cookies?

Cookies are small text files placed on your device by a website. They are widely used to make websites work, remember your preferences, and provide analytics to site owners. We also use similar technologies such as localStorage and sessionStorage where appropriate.

This policy explains what cookies KeyVault Edge sets, why we set them, and what control you have over them. For more detail on how we handle personal data generally, see our Privacy Policy.

2. Cookies we set

KeyVault Edge uses only the cookies listed below. We do not use advertising cookies, cross-site tracking pixels, or sell data derived from cookies to third parties.

NameProviderPurposeDurationCategory
sb-*-auth-tokenSupabaseStores the authenticated session token. Required to keep you signed in across page loads.Session / 1 week (remember-me)Essential
__cf_bmCloudflareBot-management cookie set by Cloudflare to distinguish humans from automated traffic.30 minutesEssential
cf_clearanceCloudflareRecords when a browser challenge was passed, preventing repeated challenges.1 dayEssential
__paddle_sid / __paddle_vidPaddlePaddle uses these to identify checkout sessions and prevent fraud during payment flows.Session / 1 yearFunctional
themekeyvaultedge.comStores your light/dark mode preference so it persists between visits.1 yearFunctional
_ga / _ga_*Google AnalyticsDistinguishes visitors so we can measure which pages and docs are useful. Only set after you click Accept in the cookie banner.2 yearsAnalytics
EssentialRequired for the service to function. Cannot be disabled.
FunctionalEnhance your experience but are not strictly required.
AnalyticsHelp us understand how the service is used.

3. Third-party cookies

Some cookies on this list are set by our sub-processors rather than directly by keyvaultedge.com. Specifically:

  • Cloudflare — sets bot-management and security cookies on all pages to protect against DDoS and automated abuse. Governed by Cloudflare's Privacy Policy.
  • Supabase — sets authentication cookies when you sign in. Governed by Supabase's Privacy Policy.
  • Google Analytics — sets the _ga cookies above, only if you accept analytics cookies. We run it with advertising features and ad personalisation turned off. Governed by Google's Privacy Policy.
  • Paddle — sets session cookies during payment flows only. Governed by Paddle's Privacy Policy.

We also measure page views with Vercel Web Analytics and Cloudflare Web Analytics. Both are cookieless: they set no cookies and do not identify you across sites. We do not embed Facebook Pixel, Hotjar, or any advertising service.

4. Your choices

Browser settings. All modern browsers let you view, block, or delete cookies via the privacy or security settings menu. Blocking Essential cookies will prevent sign-in from working. Blocking Functional cookies means your theme preference will not persist.

Opt-out links. For Cloudflare cookies specifically, there is no opt-out — they are a security requirement for operating the service. Paddle cookies only appear during active payment flows and expire when the flow completes.

Analytics cookies. Google Analytics cookies are off until you accept them in the banner, and declining changes nothing else about the site.

localStorage. We store your theme preference (light/dark) and your analytics choice in localStorage, not a cookie. You can clear it via your browser's developer tools (Application → Local Storage → keyvaultedge.com).

5. Do Not Track

Some browsers support a “Do Not Track” (DNT) signal. Because we do not use behavioural advertising or cross-site tracking, enabling DNT has no practical effect on how KeyVault Edge operates — we do not change our behaviour based on it either way.

6. Changes to this policy

We may update this Cookie Policy when we add or remove cookies. Material changes will be announced via the notice in our Privacy Policy and reflected in the “Last updated” date above.

7. Contact

Questions about cookies or this policy? Email us at privacy@keyvaultedge.com. We aim to respond within 2 business days.