Overview
No tracking cookies on this website
This website has no analytics, no advertising or marketing cookies, no third-party embeds and self-hosted fonts. It only stores two small, strictly necessary values in your browser, and neither is sent to any server.
In short:
- Website: we set no HTTP cookies. We use your browser’s local storage to remember your cookie choices and, if you pick one, your light/dark theme.
- Hosting: our hosting provider may set a strictly necessary security cookie to protect the site against bots and attacks.
- App: the free version shows non-personalised ads through Google AdMob, which can access on-device identifiers. Buying Pro stops the ad SDK from loading at all. The vault itself uses no cookies or tracking.
What this website uses
| Name | Type | Provider | Purpose | Category | Duration |
|---|---|---|---|---|---|
pv-consent | localStorage | Personal Vault (first party) | Remembers your consent choices, whether a Global Privacy Control signal was detected, when you chose, and the policy version. | Strictly necessary | Until you clear it, or until we change the consent version and ask again |
pv-theme | localStorage | Personal Vault (first party) | Remembers “light” or “dark” — only set when you press the theme toggle. | Strictly necessary (feature you asked for) | Until you clear it |
| Security cookies (if applicable) | HTTP cookie | Vercel Inc. | Bot and DDoS protection. For example, if Cloudflare is used it may set __cf_bm or cf_clearance. | Strictly necessary | Short-lived (typically minutes to hours) — set by the provider |
Neither local storage value is ever sent to us or anyone else. Our hosting provider also processes standard server logs (such as IP address, browser type and the page requested) to deliver and secure the site. See their privacy policy: https://vercel.com/legal/privacy-policy.
What we don’t use
- No analytics or statistics tools.
- No advertising, marketing, retargeting or social media cookies or pixels.
- No third-party embeds (videos, maps, chat widgets or social buttons).
- No fonts or scripts loaded from third-party servers — fonts are self-hosted.
- No fingerprinting, and no selling or sharing of your data.
The consent manager still includes Analytics and Marketing categories, but they are off by default and nothing loads even if you turn them on. If we ever add such a tool, we will update this policy first, list the tool, and ask for your consent again.
Your choices and the consent manager
Our consent manager
On your first visit, a banner offers Reject non-essential, Accept all and Customise. Rejecting is exactly as easy as accepting. The categories are:
- Strictly necessary — always on; needed for the site to work and to remember your choice.
- Analytics — off by default; not currently used.
- Marketing — off by default; not currently used.
You can change your choice at any time here, or from the “Cookie settings” link in the footer:
Browser controls
You can also view, block or delete cookies and site data in your browser. Clearing site data removes your saved choices, so you will see the banner again. Help pages:
Global Privacy Control (GPC)
If your browser sends a Global Privacy Control signal, we honour it automatically: the Marketing category is switched off and locked, and we treat it as an opt-out of sale, sharing and targeted advertising. See Your Privacy Choices.
Do Not Track
There is no agreed standard for how websites should respond to “Do Not Track” signals, so we don’t act on them specifically. We honour GPC instead — and this website does not track you across sites anyway.
In the app: advertising identifiers and SDKs
Mobile identifiers are not cookies, but regulators treat them in a similar way, so we explain them here. The Personal Vault vault itself uses no cookies, tracking or analytics SDK. Your settings are kept in encrypted on-device storage, which is strictly necessary for the app to work.
| Technology | Provider | What it accesses or stores | Purpose | When |
|---|---|---|---|---|
| Google Mobile Ads SDK (AdMob) | Android Advertising ID (AD_ID), app set ID, and SDK local storage on your device | Showing non-personalised ads, frequency capping, fraud prevention and aggregated ad measurement | Free version only; never loads once you buy Pro | |
| Google User Messaging Platform | Your ad consent choice, stored on your device | Asking for and remembering consent where the law requires it | Free version, in regions where consent is required | |
| Encrypted settings storage (MMKV) | Personal Vault (on your device) | App settings, encrypted, never sent anywhere | Making the app work | Always — strictly necessary |
We only request non-personalised ads. Google explains how it uses this data at policies.google.com/technologies/ads and policies.google.com/technologies/partner-sites.
How to control this in the app
- Consent (EEA, UK, Switzerland): before any ads load, Google’s consent message asks for your choice. Even non-personalised ads need consent to store or access information on your device there; if you don’t consent, limited ads may be shown. You can revisit your choice any time from the privacy/ad consent option in the app’s Settings.
- Advertising ID: on Android 12 and later, go to Settings > Privacy > Ads > Delete advertising ID. On older versions, use Reset advertising ID or Opt out of Ads Personalization.
- Remove ads entirely: buying Pro stops the ad SDK from starting at all.
Region-specific information
We apply the same privacy-first approach everywhere. The notes below explain how it meets specific local rules.
United Kingdom
Cookies and similar technologies are governed by the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. In line with guidance from the Information Commissioner’s Office (ICO), we only use storage that is strictly necessary (which is exempt from consent), optional categories are off until you opt in, and rejecting is as easy as accepting. In the app, consent is requested before ads load. You can complain to the ICO at ico.org.uk/make-a-complaint.
European Union / EEA
Article 5(3) of the ePrivacy Directive, as implemented in each country, requires consent before storing or reading information on your device, unless it is strictly necessary. Consent must meet the GDPR standard: freely given, specific, informed, unambiguous and as easy to withdraw as to give. Our approach follows national guidance such as that of the French CNIL and Germany’s TDDDG (§25). You can complain to your local data protection authority.
Switzerland
We comply with the Federal Act on Data Protection (FADP) and Article 45c of the Telecommunications Act (TCA), which requires that you are informed about device storage and can refuse it. In the app, consent is requested before ads load.
United States
Under the California Consumer Privacy Act as amended by the CPRA, and similar laws in states such as Colorado, Connecticut, Virginia, Texas and Oregon, some cookies can count as a “sale” or “sharing” of personal information. We do not sell or share personal information and do not use it for cross-context behavioural or targeted advertising — in-app ads are non-personalised. We honour Global Privacy Control, which several states (including California, Colorado and Connecticut) require. As required by the California Online Privacy Protection Act (CalOPPA), our response to “Do Not Track” is described above. More at Your Privacy Choices.
Canada
We follow PIPEDA and Quebec’s Law 25, which requires privacy by default. Any technology that could identify, locate or profile you is off by default on this website, and we don’t use any.
Brazil
Under the LGPD, we process data through cookies only where necessary for the site to work, or with your consent. You can exercise your rights as described in our Privacy Policy.
India
Under the Digital Personal Data Protection Act, 2023, consent must be free, specific, informed, unconditional and unambiguous, with a clear affirmative action, and as easy to withdraw as to give. Our consent manager and the app’s consent flow are designed to meet this.
Australia and New Zealand
We handle information in line with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and New Zealand’s Privacy Act 2020. This website collects no personal information through cookies.
Japan
The Telecommunications Business Act’s external transmission rules require disclosure when a website sends user information to third parties. This website does not send user information to third parties. For the app, the Google Mobile Ads SDK and the information it handles are described above.
South Korea
Under the Personal Information Protection Act (PIPA), we tell you what is stored on your device and how to refuse it. You can refuse optional storage through our consent manager or your browser settings without losing access to the website.
Other countries
Wherever you live, the same approach applies: strictly necessary storage only on this website, optional technologies off by default, and clear controls in the app. If your local law gives you extra rights, contact us and we will help.
Changes to this policy
We will update this policy if the technologies we use change, and update the “Last updated” date above. If we ever add analytics or marketing tools, we will list them here before they go live, change the consent version and ask for your choice again.
Contact
Questions about cookies or this policy? Email khanmudassir1248@gmail.com. This website and app are provided by Mudassir Khan. We aim to reply within 3 business days. You can also visit our Contact page.