Legal
Cookie Policy
Last updated 16 August 2026
InfiniteVault uses only the cookies it needs to sign you in and keep you signed in. We set no advertising cookies, no analytics cookies, and no third-party tracking of any kind.
Cookies we set
All of the cookies below are strictly necessary: without them you cannot stay signed in. They are set only after you sign in, are scoped to this site alone, and are sent only over HTTPS (Secure, SameSite=Lax).
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| iv.<id>.id | Cookie — strictly necessary | Your signed-in session (ID token). Identifies you to the application. | 30 days |
| iv.<id>.at | Cookie — strictly necessary | Access token used to authorise requests to our API. | 30 days |
| iv.<id>.rt | Cookie — strictly necessary | Refresh token, so you are not asked to sign in on every visit. | 30 days |
| iv.<id>.cd, iv.<id>.sd | Cookie — strictly necessary | Clock-drift correction and sign-in details, used to validate your session. | 30 days |
| iv.u | Cookie — strictly necessary | Which account signed in last on this browser. | 30 days |
The <id> portion of each name is a stable, non-reversible identifier derived from your account. It is not your email address and cannot be turned back into it.
These cookies are readable by this site’s own JavaScript — they are not marked httpOnly, because the application reads your session directly in the browser. They are never sent to any third party.
Browser storage we use
Alongside cookies we keep a few preferences in your browser’s local storage. These never leave your device and are not sent to our servers.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| infinitevault.cookieConsent | Local storage | Records that you acknowledged the cookie notice, so it stops reappearing. | Until you clear it |
| infinitevault.orgId | Local storage | Remembers which organisation you last had selected. | Until you clear it |
| ezc-theme | Local storage | Remembers your light / dark appearance preference. | Until you clear it |
What we do not use
We do not use advertising or marketing cookies, analytics or product-telemetry cookies, social-media pixels, or any third-party tracker. Nothing on this site profiles you or follows you across other sites. If that ever changes, we will ask for your consent first and update this page.
Managing cookies
Signing out removes your session cookies. You can also clear cookies and site data for this site at any time through your browser’s settings — in Chrome, Firefox, Edge and Safari this is usually under Privacy. Clearing them signs you out and resets your saved preferences, including your acknowledgement of the cookie notice.
Blocking the cookies listed above will prevent you from signing in, since there is no other way for us to recognise your session.
Contact
Questions about this policy? Get in touch at privacy@infinitevault.app.