Cookie Policy
Updated date: 24 August 2026.
Address: Dimostheni Severi 12, 6th floor, Flat/Office 601, 1080, Nicosia, Cyprus.
1. What Are Cookies
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve user experience, and provide information to site owners. We also use similar technologies such as web beacons, pixels, and local storage; references to “cookies” in this Policy include these technologies. Session cookies expire when you close your browser; persistent cookies remain until a set expiration date or until you delete them.
This Cookie Policy forms part of, and should be read together with, our Privacy Policy, which describes more generally how we process personal data.
2. Who Sets Cookies on This Site
This Cookie Policy is issued by FLUTTWINGS INVESTMENTS LIMITED, the operator of pdfvault.ai. First-party cookies are set by us; third-party cookies are set by our service providers (see Section 4).
3. Categories of Cookies We Use
3.1 STRICTLY NECESSARY COOKIES
Essential for the Service to function; they cannot be disabled. They include authentication and security cookies. The legal basis for these cookies is our legitimate interest in operating a secure, functioning Service; consent is not required for strictly necessary cookies.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| __client_uat | Clerk (authentication) | Records whether a user is currently signed in and keeps session state in sync. | Up to 1 year |
| __clerk_db_jwt | Clerk (authentication) | Authentication / session token used to keep you signed in. | Session |
Clerk may set environment-specific variants of the two Clerk cookies above (for example, with a suffix identifying the application instance); these serve the same authentication purpose and are not separately listed.
3.2 FUNCTIONAL COOKIES
Remember your preferences and choices to make the Service more convenient to use. These are set only with your consent where required by applicable law.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| cookie_consent | PDFVault (first-party) | Stores your cookie consent choices so the banner is not shown again. | 1 year |
| ui_theme | PDFVault (first-party) | Remembers your light / dark mode display preference. | 1 year |
| lang_pref | PDFVault (first-party) | Remembers your language preference so the site loads in your chosen language on every visit. | 12 months |
| wglang | Weglot | Stores the language Weglot serves so translations persist across pages. | 1 year |
| csrf | Trustpilot | Security token that protects the Trustpilot review widget against cross-site request forgery. | Session |
| _iidt | Trustpilot | Recognizes a returning visitor across sessions for fraud-prevention purposes. | ~13 months |
| jwt | Trustpilot | Authentication token used internally by the Trustpilot widget. | Session |
| OptanonAlertBoxClosed | Trustpilot (via OneTrust) | Records that a visitor has dismissed Trustpilot's own cookie banner within the widget. | 1 year |
| OptanonConsent | Trustpilot (via OneTrust) | Stores the visitor's cookie consent choices made within the Trustpilot widget. | 1 year |
| tp-consumer-id | Trustpilot | Identifies the visitor to Trustpilot for review-collection purposes. | Not confirmed |
| TP.uuid | Trustpilot | Unique identifier assigned by Trustpilot to the visitor's browser. | Not confirmed |
3.3 ANALYTICS COOKIES
Help us understand how visitors use the Service so we can improve it. These cookies assign a pseudonymous identifier to your browser; we use the resulting data to produce aggregated statistics and do not use it to identify you by name. Analytics cookies are set only with your consent where required by applicable law.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors by assigning a randomly generated identifier. | 2 years |
| _gid | Google Analytics | Distinguishes visitors for short-term usage analysis. | 24 hours |
3.4 MARKETING AND ADVERTISING COOKIES
We do not display third-party advertisements on the Service. However, we advertise PDFVault through Google Ads, and we use Google advertising cookies and pixels on the Service to measure the performance of those campaigns (conversion tracking) and, where enabled, to build audiences for remarketing. These cookies are set only with your consent where required by applicable law, and you can withdraw consent at any time via the “Cookie Settings” link (see Section 5). Under some US state privacy laws, this activity may constitute a “sale” or “sharing” of personal information, and the opt-out rights described in Section 5 and in our Privacy Policy apply to it.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _gcl_au | Google Ads (via Google tag) | Stores ad-click information to measure conversions from our Google Ads campaigns. | 90 days |
| _gcl_aw | Google Ads | Stores the click identifier (GCLID) when you arrive via a Google ad, for conversion attribution. | 90 days |
| IDE | doubleclick.net (Google) | Used by Google advertising services for ad measurement and, where enabled, remarketing. | Up to 13 months (EEA/UK) / up to 2 years elsewhere |
| test_cookie | doubleclick.net (Google) | Checks whether your browser supports cookies. | 15 minutes |
The exact cookies set may vary with how the Google tag is configured; we review and update this table when our configuration changes.
4. Third-Party Cookies
Some third-party services we use may set their own cookies, including Clerk (authentication), Adyen (fraud prevention during checkout), Zendesk (customer support), CloudConvert (file conversion), Google LLC (analytics and sign-in) and Trustpilot (online review platform). These providers’ own privacy and cookie policies apply to their processing.
4.1 COOKIES ASSOCIATED WITH GOOGLE SIGN-IN
The only Google integration on the Service is the optional “Sign in with Google” feature (provided via Clerk) on our sign-in and sign-up pages. No page on the Service automatically loads Google-owned scripts, and Google cookies are not set for visitors who do not use Google sign-in.
If you choose to sign in with Google, the sign-in flow redirects through accounts.google.com, where Google LLC may set or refresh its own account cookies (for example SID, HSID, SSID, APISID, SAPISID, and their __Secure-1P / __Secure-3P variants) on the google.com domain. These cookies are set by Google on its own domain, not by us; we cannot set, read, or control them. They are used by Google to authenticate your Google Account and protect it from unauthorized access, and are governed by Google’s own Privacy Policy. If you are already signed in to a Google Account in your browser, Google’s cookies may be present on your device independently of the Service.
5. Your Choices and Consent
EEA and UK visitors:on your first visit you will see a cookie consent banner allowing you to accept or reject non-essential cookies before they are set. You can change or withdraw your consent at any time via the “Cookie Settings” link in the footer of the Service. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
US visitors:where state law grants you the right to opt out of “sales,” “sharing,” or targeted advertising via cookies, you may do so via the “Cookie Settings” link. We honor Global Privacy Control (GPC) browser signals where required by law.
You can also control cookies through your browser settings (Chrome, Firefox, Safari, and Edge each provide cookie controls under their privacy settings). Disabling strictly necessary cookies will prevent the Service from functioning.
6. Do Not Track
Some browsers offer a “Do Not Track” (DNT) signal. There is currently no accepted industry standard for responding to DNT signals, and our website does not currently respond to them. We do, however, honor Global Privacy Control (GPC) signals as described in Section 5.
7. Changes to This Policy
We may update this Cookie Policy periodically, including to reflect changes in the cookies we use. Material changes will be announced via a notice on the Service, and the “Updated date” above will be revised accordingly.
8. Contact
Questions about this Cookie Policy: dpo@pdfvault.ai.
FLUTTWINGS INVESTMENTS LIMITED
Dimostheni Severi 12, 6th floor, Flat/Office 601, 1080, Nicosia, Cyprus.