Website Cookie Policy

Website only. This Policy covers the public vaultfy.ai website. It does not cover native-app SDKs, device permissions or tracking inside the Vaultfy app; those matters are addressed in the separate App Privacy Policy and in-app controls.

This Policy explains how VAULTFY AI TRADING CO LTD ("Vaultfy", "we", "us" or "our") uses cookies and similar technologies on vaultfy.ai. It should be read with our Website Privacy Notice.

1. What Cookies Are

Cookies are small text files stored on a browser or device. Similar technologies include pixels, tags and local storage. They can keep a website secure, remember a preference, measure performance or understand whether an advertisement led to a visit. Session cookies expire when the session ends; persistent cookies remain until expiry or deletion.

2. Categories We Use

• Strictly necessary: security, network delivery, request routing, form protection and recording Cookie Preferences. Active only where genuinely necessary.
• Preferences: remember language, region, accessibility or display choices where offered. Consent where required; otherwise controlled by the requested feature.
• Analytics: measure visits, page use, campaign performance, errors and Website performance. Off until consent under our standard configuration.
• Advertising: measure conversions and, where separately enabled, personalise advertising across services. Off until consent. Withdrawal is available at any time.

3. Website Cookie Schedule

The live Cookie Preferences tool is the definitive current list for the browser and region from which you visit. Exact names can include a site or container suffix and can change when a provider updates its service. The expected core inventory is:

• Vaultfy security, routing and form-protection cookies: strictly necessary operation, abuse prevention and secure form submission. Typical duration: session or up to 24 hours.
• Vaultfy consent record: remember whether optional categories were accepted or rejected. Typical duration: up to 12 months.
• Vaultfy preference storage: remember optional display, language or region settings. Typical duration: up to 12 months.
• Google Analytics: _ga, _ga_<container>, and _gid where configured: distinguish visits and produce analytics and performance reports. Typical duration: _gid about 24 hours; _ga variants up to 2 years, subject to configuration.
• Google Ads: _gcl_au and related conversion tags where enabled: attribute advertising campaigns and measure conversions; personalisation only if separately enabled and consented. Typical duration: typically up to 90 days; other advertising identifiers may last up to 13 months as shown in Cookie Preferences.

Not every listed technology is present on every page or device. Planned advertising technologies will not be activated before the required consent controls and live inventory are in place.

4. Consent and Cookie Preferences

On first visit, the banner should provide equally accessible options to accept all, reject non-essential cookies or manage categories. Optional categories must not be pre-selected. Non-essential analytics and advertising cookies are not set before consent under our standard configuration.

Change or withdraw consent at any time through the Cookie Preferences link. Withdrawal does not affect earlier lawful processing. Strictly necessary cookies cannot be disabled through our tool because the requested Website function would not operate securely, but browsers can block them and some features may then fail.

Consent is specific to the browser, device and profile. We may ask again after preferences are cleared, the consent period expires or purposes materially change.

5. Third Parties and Transfers

Third-party analytics and advertising providers may receive online identifiers, device and browser information, approximate location, page activity, referrer, campaign information and consent status. They may use information as described in their own notices where you have consented or law otherwise permits.

Where cookie information is transferred outside the UK or EEA, we use or require an applicable transfer mechanism as described in the Website Privacy Notice.

6. Browser Controls and Signals

Browsers allow you to view, delete and block cookies. Blocking all cookies may prevent forms, security controls or other functions from operating. Where applicable law requires it, we recognise supported opt-out signals such as Global Privacy Control for sale, sharing or targeted advertising.

7. Changes and Contact

We update this Policy and the live cookie inventory when technologies or legal requirements change. A material new non-essential purpose will not be activated using an earlier consent that did not cover it.