Cookie policy
Effective date: 2026-10-08 (revision 3)
Written for an open-source project; not legal advice. Suggestions welcome via GitHub.
In short. CryoShield sets no cookies, and a page never stores anything by itself. If you pick Light or Dark in the Theme menu, your browser remembers that one choice, and nothing else. The only analytics is a cookieless Cloudflare beacon on the home page, which is off if your browser sends Global Privacy Control or Do Not Track.
What we store on your device
No cookies, and nothing a page stores by itself. The first table below lists every cookie and every kind of browser storage that any CryoShield page, or any third party embedded in one, creates on your device when you visit. Today every cell is "None". An automated test loads each page, runs the vault app's create and unlock steps, and fails if anything appears that is not listed here. The table lists the pages that test visits; the build also refuses any browser-storage code in every script it ships, including the /architecture, /devices and /support pages, except the theme setting below.
| Route | Cookies | localStorage | sessionStorage | IndexedDB | Cache Storage | Service workers |
|---|---|---|---|---|---|---|
/ | None | None | None | None | None | None |
/app/ | None | None | None | None | None | None |
/privacy | None | None | None | None | None | None |
/terms | None | None | None | None | None | None |
/cookies | None | None | None | None | None | None |
Cloudflare Web Analytics beacon (/) | None. Cloudflare states the beacon uses no cookies or localStorage. It runs only on the landing page, only when enabled, and never when GPC or Do Not Track is on. | |||||
Saved only if you choose it
Every page has a Theme menu (System, Light, Dark). If you choose Light or Dark, your browser keeps that one choice in its local storage under the name cryoshield-theme, so every page opens in your theme. It holds only the word light or dark: no identifier and nothing about you or your vault. It is never sent anywhere: no request, no analytics. Choosing System deletes it, and clearing this site's data in your browser removes it too. The test above also checks this: after choosing Dark it finds only this entry, and after choosing System it finds nothing.
| Name | Where | Value | What it is for | When it is saved | How long it stays |
|---|---|---|---|---|---|
cryoshield-theme | localStorage | light or dark | Every page (one key for the whole site). Remembers the theme you picked in the Theme menu, so every page opens in it. | Only when you choose Light or Dark. Choosing System deletes it. | Until you choose System or clear this site's data in your browser. It holds no identifier and is never sent anywhere. |
Your security key's credential lives on the key itself, not in your browser. The secret it produces for this site is held in memory only for a moment and then wiped.
Analytics on the landing page
The home page (/) loads the Cloudflare Web Analytics beacon from static.cloudflareinsights.com, which reports to cloudflareinsights.com. It runs only on the home page: never in the vault app at /app/, and never on these legal pages.
- It reads the page path (we strip any query string or fragment first), the referring page, your browser's user agent and page-load performance timings. Your IP address passes through Cloudflare in transit.
- Cloudflare states that the beacon sets no cookies and uses no local storage.
- The script is pinned: your browser only runs it if it matches the exact version we reviewed (its integrity hash).
- Cloudflare, Inc. processes this data for us in the US and the EU under its data processing agreement.
Your choices
- If your browser sends Global Privacy Control or Do Not Track, the beacon is not loaded at all.
- You can block
cloudflareinsights.comwith any content blocker; the site keeps working normally. - The theme setting is yours to keep or remove: choose System in the Theme menu, or clear this site's data in your browser. If your browser blocks local storage, the site still works and follows your device's theme.
- There is nothing else to opt out of, because nothing else is stored or measured.
When this would change
We would add a consent choice before using any of the following: a cookie, or browser storage that is not strictly necessary and that you did not ask for yourself (the theme setting is saved only when you pick it), a cross-site or persistent identifier, a second analytics or marketing service, advertising or tracking pixels, or any analytics in the vault app. Any change will update the effective date and the list below.
Contact
Questions about this policy: open an issue in the repository (there is no email address). See also our privacy policy and terms of service.
Changes
The full history is public in our source repository.
- 2026-10-08 (revision 3): the Theme menu. If you pick Light or Dark, your browser remembers that one choice (
cryoshield-theme), listed in the new "Saved only if you choose it" table. It is never sent anywhere. - 2026-10-08: says which pages the table covers and that the build checks every other page too.
- 2026-10-03 (revision 2): contact via GitHub (open-source project; no email address).
- 2026-10-03: first draft.