Cookie Policy
Last updated: April 2026
1. What are cookies
Cookies are small text files stored on your device when you visit a website or use a web application. They serve various purposes including remembering your preferences and enabling essential functionality.
2. Cookies we use
2.1 Essential cookies
These cookies are strictly necessary for the operation of the platform. They cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
cifravault_session | Session identifier. Required for CSRF protection and server-side session state. | Session |
XSRF-TOKEN | CSRF protection token. Included automatically in form submissions and API requests. | Session |
2.2 Analytics
CifraVault uses privacy-friendly analytics that do not use cookies and do not require consent under GDPR/ePrivacy. These tools do not set cookies, do not collect personal data, do not track users across sites, and process data in the EU.
2.3 Third-party cookies
CifraVault does not set any third-party cookies. Our platform does not embed third-party trackers, social media widgets, or advertising scripts.
When you interact with Stripe for payment processing, Stripe may set its own cookies on Stripe-hosted pages. These are governed by Stripe's Cookie Policy and are not under CifraVault's control.
3. Cookie consent
Because CifraVault only uses strictly necessary cookies (session and CSRF), no cookie consent banner is required under GDPR Article 5(3) and the ePrivacy Directive.
4. How to control cookies
You can control cookies through your browser settings. Blocking all cookies will prevent the platform from functioning correctly, as session management requires cookies. You can delete existing cookies at any time, which will end your current session.
5. Contact
For questions about this Cookie Policy, contact us at info@cifravault.com.