1. Introduction
This Cookie Policy explains how FreelanceVault ("we," "us," "our") uses cookies and similar technologies when you visit or use our website at freelancevault.app and our application (the "Service").
This policy should be read together with our Privacy Policy, which provides further information about how we process your personal data.
2. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work, to work more efficiently, and to provide information to the website operators.
Cookies can be "session cookies" (which are deleted when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them). Cookies can be "first-party cookies" (set by us) or "third-party cookies" (set by other organisations whose services we use).
3. Legal Framework
Our use of cookies is governed by the following regulations:
- EU ePrivacy Directive (2002/58/EC as amended by 2009/136/EC): Requires consent for the use of cookies that are not strictly necessary for the provision of the service. Implementation varies by EU member state but generally requires informed, specific, and freely given consent.
- UK Privacy and Electronic Communications Regulations 2003 (PECR) (as amended): The UK implementation of the ePrivacy Directive. Regulation 6 requires that we provide clear and comprehensive information about any cookies we use, and obtain consent before setting non-essential cookies. The Information Commissioner's Office (ICO) guidance states that consent must be specific, informed, and given by a clear affirmative action.
- EU GDPR (Regulation 2016/679) and UK GDPR: Where cookies involve the processing of personal data (e.g., cookies that contain or enable the identification of users), the GDPR applies in addition to the ePrivacy rules. We must have a lawful basis under Article 6 for processing such data.
- US State Privacy Laws: The CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), and other state privacy laws may classify certain cookies and tracking technologies as "sale" or "sharing" of personal information. We do not use cookies for purposes that would constitute a sale or sharing of personal information under these laws.
4. Cookies We Use
We use only strictly necessary cookies. We do not use analytics, advertising, or tracking cookies.
4.1 Strictly Necessary Cookies
These cookies are essential for the Service to function. Without them, we cannot provide the Service. Under the ePrivacy Directive, UK PECR, and applicable US laws, strictly necessary cookies do not require consent because they are required for the service you have requested.
| Cookie Name | Purpose | Type | Duration | Set By |
|---|---|---|---|---|
| sb-*-auth-token | Supabase authentication session token. Keeps you signed in and authenticates API requests. | First-party, HTTP-only | Session / up to 1 year (refresh token) | Supabase |
| sb-*-auth-token-code-verifier | PKCE code verifier for secure OAuth authentication flow (used during Google sign-in). | First-party, HTTP-only | Session (deleted after authentication completes) | Supabase |
| __vercel_* | Vercel deployment and edge routing cookies. Required for the application to be served correctly. | First-party | Session | Vercel |
4.2 Cookies We Do Not Use
For the avoidance of doubt, we confirm that we do not use:
- Analytics cookies (e.g., Google Analytics, Mixpanel, Amplitude)
- Advertising or remarketing cookies (e.g., Google Ads, Facebook Pixel, Meta Pixel)
- Social media tracking cookies
- Cross-site tracking cookies
- Fingerprinting or other device identification technologies
- Any cookies for the purpose of profiling, behavioural advertising, or selling/sharing personal information
5. Local Storage and Similar Technologies
In addition to cookies, we may use browser local storage or session storage for similar purposes (e.g., storing authentication state, user preferences within the application). These technologies are subject to the same legal requirements as cookies under the ePrivacy Directive and UK PECR. We use local storage only for strictly necessary purposes.
6. Cookie Consent
As we currently use only strictly necessary cookies, consent is not required under the ePrivacy Directive, UK PECR, or applicable US laws.
If we introduce any non-essential cookies in the future (e.g., analytics or performance cookies), we will:
- Update this Cookie Policy to describe the new cookies
- Implement a cookie consent mechanism that allows you to accept or reject non-essential cookies before they are set
- Ensure that consent is freely given, specific, informed, and given by a clear affirmative action (as required by the GDPR and ICO guidance)
- Allow you to withdraw consent at any time, as easily as it was given
- Not use cookie walls that condition access to the Service on acceptance of non-essential cookies
7. How to Manage Cookies in Your Browser
Most web browsers allow you to control cookies through their settings. You can usually find these settings in the "Options" or "Preferences" menu of your browser. Please note that if you block or delete strictly necessary cookies, the Service may not function properly. For example, you will not be able to stay signed in.
For more information about how to manage cookies in your browser, visit your browser's help documentation:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
8. Changes to This Cookie Policy
We may update this Cookie Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes (such as introducing new categories of cookies), we will notify you through the Service or by email.
9. Contact Us
If you have questions about our use of cookies, please contact us at: privacy@freelancevault.app