Cookie Policy
Last updated: October 1, 2026
This Cookie Policy explains how HTMLvault (“we,” “us,” or “our”) uses cookies and similar technologies on our marketing website and application (the “Site”). It should be read alongside our Privacy Policy. This policy covers cookies on our own Site. It does not cover the links you publish through HTMLvault or any tracking codes you choose to inject into them — you are responsible for cookie disclosure and consent on your own content and white-labeled domains.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies include local storage, pixels, and tags. They help sites function, remember preferences, and understand how the site is used. Cookies may be “session” cookies (deleted when you close your browser) or “persistent” cookies (which remain until they expire or you delete them).
2. How we categorize the cookies we use
Strictly necessary cookies. Required for the Site to work and for you to log in and use the Service securely. These include authentication and session cookies and basic security functions. They do not require consent because the Service cannot be provided without them.
Analytics cookies. Help us understand how visitors use our marketing site so we can improve it — for example, which pages are visited and how people navigate. We use Google Analytics (GA4) and Vercel Analytics for this purpose. Where required by law, we load these only after you consent. With the same consent, we also set a first-party cookie that records how you first arrived at our site (the referring website and any campaign parameters), so that if you create an account we can attribute it to that channel. If you decline analytics cookies, we do not set it, and we delete it if it was set earlier.
Publishing attribution cookie. When you publish a link without an account, we set a first-party cookie holding a random identifier. If you sign in within 30 days, we use it to connect the links you published to your account. It is set only when you publish without an account, cannot be read by scripts on the page, and is deleted when you sign in.
We do not use advertising or cross-site tracking cookies on our Site.
3. Cookies we use
| Category | Provider | Purpose | Type |
|---|---|---|---|
| Strictly necessary | HTMLvault / WorkOS | Authentication, session, and security | Session / persistent |
| Strictly necessary | HTMLvault | hv_tos_assent: records that you accepted our Terms of Service when you sign up or sign in, until your sign-in completes | Persistent, 10 minutes (deleted when sign-in completes) |
| Analytics | Google Analytics (GA4) | Aggregate site usage measurement | Persistent |
| Analytics | Vercel Analytics | Aggregate site usage and performance | Persistent / cookieless where configured |
| Analytics | HTMLvault | htmlvault_lead_source: first-touch marketing attribution (the referring website and campaign parameters of your first visit), so a later sign-up can be attributed to that channel. Set only after you accept analytics cookies; deleted if you decline | Persistent, 90 days (deleted when you sign in) |
| Publishing attribution | HTMLvault | htmlvault_anon_id: a random identifier, set when you publish a link without an account, that connects those links to an account you sign in to later. Not readable by scripts (httpOnly) | Persistent, 30 days, renewed each time you publish without an account (deleted when you sign in) |
Specific cookie names and lifetimes may change as providers update their products; the categories above reflect how we use them.
4. Your choices
Consent. Where required by laws such as the EU/UK GDPR and ePrivacy rules, we ask for your consent before setting non-essential (analytics) cookies, and you can withdraw consent at any time using the cookie controls on our Site.
Browser controls. You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site from working.
California. We do not sell or share personal information for cross-context behavioral advertising. California residents can exercise applicable rights as described in our Privacy Policy.
Opt-outs. You can opt out of Google Analytics across sites using the Google Analytics Opt-out Browser Add-on.
5. Changes
We may update this Cookie Policy as our practices or applicable law change. Material changes take effect when posted, and we will update the “Last updated” date above.
6. Contact
HTMLvault, 704 13th St East, Suite 600, Whitefish, MT 59937. support@htmlvault.com