Published on 16 October 2026. Changes that are not in your favour apply to existing accounts from 19 November 2026; changes in your favour or required by law apply on publication. Only strictly necessary cookies are set until you choose in the banner; "Customize" there lets you refuse every optional category at once ("Reject non-essential"). You can change your mind at any time with "Cookie settings" at the bottom of the site's pages and of creators' public pages, or in Settings › Security in the app.
This document exists in French and in English. Both versions have the same value; in case of doubt, the interpretation most favourable to the consumer prevails.
1What this covers
This policy explains how vvault uses cookies and similar technologies (local storage, pixels and web beacons) on vvault.app, on the public pages we serve, and in the emails sent through vvault. Read it alongside our Privacy Policy, which explains what we do with personal data generally.
vvault is operated from Belgium by Tom Nsengiyumva (sole proprietor), company number BE 1022.549.155. Questions: contact@vvault.app.
2What these technologies are
Cookies are small text files a site stores on your device so it can recognise your browser between requests: to keep you signed in, to remember a preference, or to count a visit.
Local storage does the same job with more room and lives outside the cookie jar. We use it for things like your theme and interface preferences.
Pixels and web beacons are tiny invisible images or requests embedded in a page or an email. Loading one tells the sender that the page was opened or the content was viewed.
This page calls all of them “cookies” for short.
3We ask first
Under EU and Belgian law we need your consent before storing or reading anything on your device that is not strictly necessary for the service you asked for. On your first visit, nothing but strictly necessary cookies is set, and no analytics or advertising script is even loaded: Google Analytics, Vercel Analytics, Speed Insights and the Meta pixel load only after you accept the corresponding category.
The banner offers "Customize" and "Accept all"; "Customize" opens the categories, with "Reject non-essential" to refuse them all at once. If you close the page without answering, nothing optional is set. Your choice is stored for 12 months in a cookie (vvault_consent_v1) and, if you are signed in, in your account so that our servers respect it too; we then ask again.
5What goes to Meta if you accept advertising
We would rather state this plainly than bury it. If you accept advertising cookies, we send Meta events about actions you take on vvault. Alongside the event we send a hashed version of your email address, a hashed user identifier, your IP address and your user agent. The last two are visible to Meta as they are.
Hashing means Meta does not receive your email in readable form, and it is not reversible in practice. It is still a sharing of personal data with an advertising platform, and it happens only because you consented. Decline advertising cookies, or withdraw consent later, and it stops, in your browser and on our servers.
This covers vvault's public pages and the app: page views, sign-up, starting a trial or a subscription, and purchases. Your files and their content are never sent.
5ACreators' pixels
Some creators connect their own Meta pixel or Google tag to their vvault pages and storefront (a feature of the Ultra plan). If you accepted advertising cookies, vvault loads it on that creator's pages only and sends it the pages you view there and your storefront actions (viewing an item, adding to cart, checkout, purchase), without the page's query string and without your e-mail address. For this collection and transmission, vvault and the creator are joint controllers: vvault runs the consent and answers your requests about it at contact@vvault.app; the creator, and then Meta or Google, decide what happens to the data in their accounts. Refusing or withdrawing consent stops it.
6Emails
Emails we send you, and campaigns you send through vvault, can contain a beacon that reports when the message was opened and which links were clicked. That is what produces the engagement figures in your analytics.
It depends on images loading, so the numbers are approximate: many mail clients block or pre-load images, which under-counts some opens and over-counts others. If you would rather not be measured, turn images off in your mail client.
If you send campaigns through vvault, you are the sender of those emails and responsible for the lawful basis to contact each recipient, including any consent the law of their country requires for open tracking; Safe Send turns open tracking off. See the Terms of Use, section 15.
7How to change your mind
Use "Cookie settings" at the bottom of the site's pages and of creators' public pages (profile, track, pack, kit, plugin, series), in Settings › Security in the app, or in the legal pages' side list, to reopen your preferences; refusing or withdrawing takes effect at once (a script already loaded stops sending and is gone at your next page load). Your choice is remembered per browser and per device.
You can also clear or block cookies in your browser settings; most browsers let you remove existing cookies and refuse new ones. Blocking essential cookies will break sign-in and other core features. Privacy-focused browsers and content blockers work here as they do anywhere.
Withdrawing consent stops future collection. It does not undo measurement that already happened, though you can ask us to delete data we hold about you (see Your rights in the Privacy Policy).
8Do Not Track
Some browsers send a “Do Not Track” or “Global Privacy Control” signal. There has never been an agreed standard for what a site must do in response, so we do not act on it automatically. The cookie banner is the control we do act on, and a refusal made there is honoured everywhere.
9Changes
If we change which cookies we use, we update this page and the date at the top, and where the change is material we ask for consent again rather than relying on an answer you gave about something else.