1. What this policy covers
This policy explains how OneVault LLC ("OneVault", "we") and our partners use cookies and similar technologies on:
- our public websites, including onevault.org and regional sites such as onevault.us, onevault.ae and onevault.lk; and
- the OneVault account site (account.onevault.org), including sign-in, registration, consent and account-recovery pages.
It should be read together with our Privacy Policy.
2. What cookies and similar technologies are
Cookies are small text files that a website stores in your browser. Similar technologies include local storage, session storage, pixels, tags and scripts that read or write information on your device. Some are set by us ("first-party"); others are set by our partners ("third-party"). Some are deleted when you close your browser ("session"), and others remain for a set period ("persistent").
3. Where we use which technologies
| Area | What we use | Advertising? |
|---|---|---|
| Account site (account.onevault.org): sign-in, registration, consent, recovery, Security, Connected apps, Privacy & data, developer area | Strictly necessary cookies only, plus Cloudflare security and Turnstile bot protection | No advertising, no advertising cookies |
| Staff systems | Strictly necessary cookies only | No advertising |
| Public websites (onevault.org and regional sites) | Strictly necessary cookies; and, subject to your choices, advertising and analytics cookies from third parties such as Google | May show advertising |
Your OneVault account data (such as your name, email address, phone number, date of birth, gender or sign-in history) is never used to target advertising and is never shared with advertisers.
4. Categories of cookies
Strictly necessary. These are required for the service you ask for and for security. They keep you signed in, protect forms against cross-site request forgery, carry the state of a sign-in or consent request, apply rate limits, balance load, and detect bots and abuse (including Cloudflare network security cookies and Cloudflare Turnstile). Examples on the account site include the session cookie and the XSRF-TOKEN security cookie. These cannot be switched off in our settings because the service would not work without them; you can block them in your browser, but sign-in will then fail. Where the law provides an exemption for strictly necessary cookies, we do not ask for consent to use them.
Preferences (functional). These remember choices you make on our public websites, such as your cookie choices. Where they are not strictly necessary, we ask for consent where the law requires.
Analytics. These help us understand how visitors use our public websites so that we can improve them. Where the law requires, we use them only with your consent.
Advertising. These are used on our public websites by advertising partners, including Google, to show ads, limit how often you see an ad, measure ad performance, prevent ad fraud and, where permitted, personalize ads based on your visits to our websites and other websites. Where the law requires, we use them only with your consent.
A current list of the cookies used on each site, with their provider, purpose and duration, is available from the cookie settings on our public websites.
5. Advertising on our public websites
Our public websites may display ads served by Google (for example, through Google AdSense) and other advertising partners.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our websites or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our sites and/or other sites on the internet.
- You may opt out of personalized advertising by Google by visiting Google Ads Settings.
- You may opt out of some third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info/choices or, in Europe, www.youronlinechoices.eu.
- To learn how Google uses information from sites that use its services, visit policies.google.com/technologies/partner-sites.
If you opt out of personalized advertising, you will still see ads, but they will not be based on your browsing on other websites. Non-personalized ads may still use cookies for purposes such as frequency capping, aggregated reporting and fraud prevention, where the law permits.
Advertisers and ad networks are independent companies. We do not control their cookies or their use of information, which is governed by their own privacy policies. An ad appearing on our website is not an endorsement by OneVault. OneVault will never ask you for your password or verification codes through an ad.
6. Consent and your choices
Where consent is required (including the European Union, EEA, United Kingdom and Switzerland, and other places whose laws require it), we do not place analytics, advertising or other non-essential cookies on your device until you have made a choice in our cookie banner. You can accept all, reject all non-essential cookies, or choose by category. Rejecting is as easy as accepting.
Changing your mind. You can change or withdraw your choices at any time through the cookie settings link on our public websites. Withdrawing consent stops future use of those cookies; it does not affect use before withdrawal. We will remove cookies we set ourselves where practicable, but you may need to delete third-party cookies in your browser.
Elsewhere, we may use analytics and advertising cookies on our public websites without prior consent where the law allows, and you can opt out as described in this policy.
7. Opt-out rights in the United States and Global Privacy Control
Under some United States state privacy laws, allowing third-party advertising cookies to collect information on our public websites may be considered a "sale" or "sharing" of personal information, or "targeted advertising". You can opt out through the "Your Privacy Choices" link on our public websites. When you opt out, we disable personalized advertising cookies for that browser.
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of sale, sharing and targeted advertising for that browser. Because these opt-outs are stored in your browser, you need to set them on each browser and device you use, and again if you clear your cookies.
We do not sell or share OneVault account data, so this opt-out concerns only cookie-based advertising on our public websites.
8. Browser controls
Most browsers let you view, block and delete cookies and to send a Global Privacy Control signal. Blocking all cookies will stop you from signing in to OneVault, because sign-in requires strictly necessary cookies. Some browsers also offer a "Do Not Track" setting; because there is no agreed standard for responding to it, we do not currently respond to "Do Not Track" signals, but we do honour Global Privacy Control as described in Section 7. Mobile devices also offer settings to limit ad tracking.
9. Changes to this policy
We may update this policy when we change the technologies we use or when the law changes. We will post the updated policy with a new version number and effective date. Where a change requires your renewed consent, we will ask for it.
10. Contact
If you have questions about this policy, please use our contact form and choose "Privacy request".