Cookie Policy

We use a limited set of browser technologies to operate the Service, keep you signed in, and remember interface preferences. We do not use advertising cookies or third-party tracking pixels for marketing purposes.

This policy should be read together with our Privacy Policy.

Session cookie (cl_session): an HTTP-only, signed authentication cookie that maintains your logged-in session after you authenticate. It is required to access your vault through the web application.

• Provider: Compliance Locker (first party)
• Purpose: authentication and session security
• Duration: up to seven (7) days, or until logout
• Attributes: HttpOnly; SameSite=Strict; Secure in production environments

Blocking this cookie will prevent the Service from functioning correctly while logged in.

We use browser local storage for non-essential interface preferences, including:

• cl_theme: your theme preference on this device (system, light, or dark)
• Per-user UI acknowledgment flags (for example, backup download confirmations) that do not contain document content

These values stay on your device and are not used for advertising or cross-site tracking.

• Third-party advertising or retargeting cookies
• Social media tracking pixels on authenticated vault pages
• Sale or sharing of cookie data for cross-context behavioral advertising

Strictly necessary cookies and storage are used based on our legitimate interest in providing a secure, functional service and, where applicable, to perform our contract with you. Preference storage is used to remember choices you make.

You can delete cookies and local storage through your browser settings. Doing so will sign you out and reset preferences such as theme. Most browsers also let you block cookies entirely; blocking strictly necessary cookies will prevent login and vault access.

We may update this Cookie Policy from time to time. The effective date at the top of this page will change when we do.

Questions: support@compliancelocker.app