Legal

Cookie Policy

Last updated: July 20, 2026

What are cookies?

Cookies are small text files stored on your device when you visit a website. They're used to make websites work, keep you signed in, and understand how a site is used.

Cookies Dotvault actually sets

We keep this list to exactly what's in use — nothing invented, nothing vague:

dv_session (essential)

Set only when you sign in to the Dotvault web app. It's an HTTP-only, strictly-necessary session cookie that keeps you authenticated; it contains a random session identifier, not your credentials or vault data. Expires after 30 days or when you sign out. It is never set on the marketing site itself — only under /app.

_ga, _ga_*, _gid (analytics)

Set by Google Analytics (GA4) when you visit dotvault.app, to distinguish visitors and measure aggregate traffic — pages viewed, referral source, approximate location, device type. These cookies are only loaded in production, never in local development, and are not used to identify you personally or to serve ads.

We do not use advertising cookies, cross-site tracking pixels, or session-replay tools. The desktop app doesn't use cookies at all — it's a local application with no browser involved.

Third-party cookies

If you subscribe to Pro, Stripe's hosted checkout and billing portal may set their own cookies while you're on their pages to process payment securely and prevent fraud. These are governed by Stripe's cookie policy, not this one, and we don't control them.

Managing your cookies

You can block or delete cookies through your browser settings at any time. Blocking the dv_session cookie will prevent you from staying signed in to the web app. You can opt out of Google Analytics specifically using Google's browser opt-out add-on, without affecting your ability to sign in or use the desktop app.

Changes to this policy

If the cookies we use change, we'll update this page and the "Last updated" date above.

Questions about our use of cookies? Email us at hello@dotvault.app.