COOKIE NOTICE
V1.02 (Effective: 2026-08-18)
This Cookie Notice explains how VaultN B.V. uses cookies and similar technologies on the VaultN website and the VaultN Platform, the legal basis for their use, and how you can manage your preferences.
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website or use a web application. They are widely used to make websites and platforms function, to remember preferences, and to provide analytical information to site operators.
Similar technologies — such as local storage, session storage, and pixel tags — are covered by this notice on the same basis as cookies.
This notice applies to all cookies and similar technologies used by VaultN on:
- vaultn.com — the public-facing VaultN website.
- my.vaultn.com — the VaultN Platform, accessible to registered business users only.
- sandbox.vaultn.com — the VaultN test environment, accessible to registered business users only.
Consent preferences set at https://vaultn.com/cookie-settings/ apply across all three domains.
2. Legal Basis for Cookie Use
VaultN’s use of cookies is governed by Article 11.7a of the Dutch Telecommunicatiewet (Tw), which implements the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC), in combination with GDPR where personal data is processed.
Strictly necessary cookies are placed on the basis of legitimate interests and the performance of the Agreement (Article 6(1)(b) and (f) GDPR). These do not require consent under Article 11.7a(3) Tw.
All other cookies — including analytics cookies — require prior, freely given, specific, informed, and unambiguous consent under Article 11.7a Tw and Article 6(1)(a) GDPR. Consent is obtained via the mechanism at vaultn.com/cookie-settings/. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.
VaultN operates a B2B platform. The consent obligation under Article 11.7a Tw applies to all users regardless of whether the context is business-to-business or business-to-consumer. Analytics cookies on my.vaultn.com are subject to the same consent requirement as on vaultn.com.
Consent obtained via https://vaultn.com/cookie-settings/ extends to analytics cookie use on my.vaultn.com and sandbox.vaultn.com by virtue of the shared root-domain consent cookie (domain=.vaultn.com). Where a user accesses my.vaultn.com or sandbox.vaultn.com without having previously set cookie preferences, the consent mechanism will be presented before any non-necessary cookies are placed.
3. Strictly Necessary Cookies
These cookies are essential for the VaultN Platform and website to function. They cannot be disabled. No consent is required under Article 11.7a(3) Tw.
| Cookie / technology | Set by | Domain(s) | Purpose | Retention |
|---|---|---|---|---|
| Session cookies (authentication state) | VaultN | my.vaultn.com, sandbox.vaultn.com | Maintains the authenticated session. Without this cookie the Platform cannot identify your session and you cannot use the service. | Session (deleted on browser close) |
| CSRF protection token | VaultN | my.vaultn.com, sandbox.vaultn.com | Protects against cross-site request forgery attacks. Required for all authenticated API interactions. | Session |
| Cookie consent preference | VaultN | vaultn.com (shared across subdomains) | Stores your cookie consent preferences (as a cookie and in browser local storage) so they are not requested on every visit. | 12 months |
Auth0 SSO cookies (auth0, auth0_compat, did, did_compat) | Auth0, LLC (Okta) — sub-processor | prod-vaultn.eu.auth0.com (observable in my.vaultn.com browser context) | Auth0 SSO session — the credential that keeps the user authenticated. Set on the Auth0 tenant domain. Not set on vaultn.com. | Up to 24 hours idle / 72 hours maximum |
Auth0 SDK hint cookies (auth0.<clientId>, _legacy_auth0.<clientId>) | Auth0, LLC (Okta) — sub-processor | my.vaultn.com | SDK boolean login-state indicator. Stores no credentials — fast-path so the Auth0 SDK can detect login state without a network round-trip. Not set on vaultn.com. | Approximately 24 hours; auto-refreshed while SSO session remains valid |
Cloudflare security cookies (_cf_bm, cf_clearance) | Cloudflare, Inc. — sub-processor | vaultn.com, my.vaultn.com, sandbox.vaultn.com | Bot management, DDoS protection, and traffic security. Required to distinguish legitimate users from automated traffic. | 30 minutes to 1 year depending on cookie type |
Technologies that do not require consent. The vaultn.com website stores minor interface state (for example, the selected tab on a document page) in your browser’s local storage; this data never leaves your device and involves no tracking. This storage falls within Article 11.7a of the Telecommunicatiewet (Tw) but is exempt from the consent requirement under Article 11.7a(3) Tw as strictly necessary functionality of the service you have requested. The website also loads a performance measurement script (Real User Metrics) provided by Netlify, Inc., the website hosting provider. The script measures page loading performance, sets no cookies, and stores no data on your device. Measurement data is aggregated and does not identify individual visitors. VaultN’s primary position is that this measurement involves no storage of, or access to, information on your device, so that Article 11.7a Tw is not engaged. In any event, the measurement falls within the exception in Article 11.7a(3) Tw for obtaining information about the quality or effectiveness of a delivered information society service, as it has no or only minor impact on your private life, and therefore does not require prior consent.
4. Analytics Cookies
These cookies help VaultN understand how visitors and users interact with the website and platform. All data collected is pseudonymous. Analytics cookies are placed only with your prior consent. Withdraw consent at any time at vaultn.com/cookie-settings/.
| Cookie / technology | Set by | Domain(s) | Purpose | Retention | Controller status |
|---|---|---|---|---|---|
Google Analytics (_ga, _ga_*, _gid) | Google Ireland Limited | vaultn.com, my.vaultn.com, sandbox.vaultn.com | Collects pseudonymous data on website and platform usage including pages visited, session duration, and referral source. IP addresses anonymized prior to storage. Two separate GA4 properties are in use: G-H3E7MXFBYR on vaultn.com and G-058NKE2MB7 on my.vaultn.com / sandbox.vaultn.com. | _ga: 2 years; _gid: 24 hours; _ga_058NKE2MB7: 2 years | Google Ireland Limited acts as an independent data controller under its own privacy terms (policies.google.com/privacy). VaultN receives aggregated reports only. |
Microsoft Clarity (_clck, _clsk, CLID, MUID) | Microsoft Corporation | vaultn.com, my.vaultn.com, sandbox.vaultn.com | Collects pseudonymous interaction data including heatmaps and session recordings to identify usability issues. Does not process personal identifiers. Placed only after analytics consent is granted. | _clck: 1 year; _clsk: 1 day; MUID: 1 year | Microsoft Corporation acts as an independent data controller under its own privacy terms (privacy.microsoft.com). VaultN receives aggregated session data only. |
5. Cookies We Do Not Use
VaultN does not use the following categories of cookies on any of its domains:
- Advertising or marketing cookies — cookies used to track individuals across websites for the purpose of displaying targeted advertising.
- Social media tracking cookies — cookies placed by social media platforms to track user behavior across the web.
- Profiling cookies — cookies used to build individual profiles for automated decision-making or behavioral targeting.
6. Managing Your Preferences
Manage your cookie preferences at any time at https://vaultn.com/cookie-settings/. From that page you can accept all cookies, accept essential cookies only, or configure individual categories.
Preferences set at https://vaultn.com/cookie-settings/ apply across vaultn.com, my.vaultn.com, and sandbox.vaultn.com via a shared root-domain consent cookie.
You may also manage cookies through your browser settings. Note that blocking strictly necessary cookies will prevent the VaultN Platform from functioning. Instructions for common browsers:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data
- Safari: Preferences > Privacy > Manage Website Data
For Google Analytics, you may also install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
7. International Transfers
Certain cookies set by third parties (including Google Analytics and, when activated, Microsoft Clarity) may result in data being transferred to the United States. Both Google Ireland Limited and Microsoft Corporation have entered into Standard Contractual Clauses or operate under applicable adequacy frameworks to ensure such transfers comply with GDPR and Dutch data protection law.
Details of the transfer mechanisms applicable to each third-party cookie provider are available on request at [email protected].
8. Changes to This Notice
9. Contact
For questions about this notice or VaultN’s use of cookies, contact [email protected].
To exercise data protection rights in relation to personal data processed via cookies, see Section 8 of VaultN’s Privacy Notice at https://vaultn.com/privacy-policy/.
To lodge a complaint about VaultN’s cookie practices, contact the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.
VaultN B.V. — Kon. Wilhelminaplein 13, Tower 1, Floor 14, 1062 HH Amsterdam — KvK 80101704 — [email protected] — vaultn.com/cookie-notice/