Cookie Policy
Effective date: 26 October 2026 · Version 1.0
MGVault uses only cookies that are necessary for the service to work securely. We do not use analytics, advertising, social media or any other third-party tracking cookies, which is why we do not show a cookie consent banner.
What are cookies?
Cookies are small text files that a website stores in your browser. Your browser's local storage can similarly be used to keep some information on your device.
Cookies we use
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| mgv_refresh | Keeps you signed in securely. Set with HttpOnly, Secure and SameSite=Strict; sent only with session refresh requests and cannot be read by page scripts. | First-party, strictly necessary | 30 days; renewed on each use, a session lasts at most 90 days |
| locale | Remembers the language you chose with the language switcher; created only when you choose a language. | First-party, preference (at your request) | 1 year |
Local storage
Your browser's local storage holds only information needed for the service to work securely: the email address you last used (for convenience at sign-in), encryption settings and verification records for organization keys. The browser extension keeps an encrypted copy of your vault on your device for offline use. Your master password, decryption keys and vault contents are never stored unencrypted on your device.
Payment page
On paid plans, payment takes place on a separate page that opens the payment institution's form. On that page, the payment institution may use its own cookies for payment security; these are subject to the payment institution's policies.
Managing cookies
You can delete or block cookies in your browser settings. If you block necessary cookies, you will not stay signed in and parts of the Service may not work. For details about your personal data, see the Privacy Policy and the KVKK Privacy Notice.