Cookie Policy
Last updated: 16 March 2026
1. What Are Cookies?
Cookies are small text files that a website stores on your device when you visit. They are sent back to the website on subsequent requests so the site can remember information about you - for example, that you are logged in.
GemVault uses httpOnly cookies. These are a specific type of cookie that cannot be read or modified by JavaScript running in your browser. They are set and read exclusively by the server, which makes them significantly more secure than ordinary cookies for storing authentication tokens.
2. Cookies We Use
Strictly necessary - always active
| Name | Purpose | Duration |
|---|---|---|
| access_token | JWT authentication token - identifies your logged-in session and authorises API requests. | 1 hour |
| refresh_token | Refresh token - keeps you logged in and allows silent token renewal. | 30 days |
| theme | Remembers your light or dark interface preference. | 1 year |
| lens | Remembers which view of the app you prefer (collector, dealer, or cutter). | 1 year |
| compare | Holds the stones you selected for side-by-side comparison. | 1 day |
| demo_mode | Marks a demo session so the demo banner is shown. | 1 hour |
The authentication cookies are set with the httpOnly, Secure, and SameSite=Strict flags for security.
Analytics - cookieless, no consent required
| Provider | Storage | Purpose | Consent required? |
|---|---|---|---|
| Plausible Analytics | No cookie, no local storage - cookieless | Aggregate page view stats. No personal data collected or stored. | No (cookieless, no personal data) |
Because Plausible stores nothing on your device and processes no personal data, GemVault does not show a cookie consent banner.
3. Strictly Necessary Cookies
The authentication and preference cookies are strictly necessary for the service to function. Under the ePrivacy Directive (Directive 2002/58/EC) as transposed into Belgian law, strictly necessary cookies do not require your prior consent.
You cannot disable the authentication cookies without losing access to your GemVault account.
4. What We Do Not Use
GemVault does NOT use:
- Google Analytics or any Google tracking.
- Advertising or targeting cookies.
- Third-party social media cookies or pixels (Facebook, LinkedIn, Twitter/X, etc.).
- Fingerprinting or device tracking techniques.
- Any third-party scripts beyond what is listed above.
5. Managing Cookies
You can view, manage, and delete cookies at any time using your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Preferences → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions.
Please note: clearing your GemVault cookies will log you out of the service.
6. Future Changes
If we ever introduce non-essential cookies (for example, optional analytics to improve the service), we will update this policy and, where required by law, implement a consent mechanism before activating those cookies.
Material changes to this Cookie Policy will be announced in line with our Privacy Policy (14 days' notice by email for registered users).
7. Contact
Questions about this Cookie Policy: info@gemvault.me
For more information about how we handle personal data, see our full Privacy Policy.