Cookie Notice

What we set today

Strictly necessary — always on. One cookie, vx_session, set when you sign in. It holds a random session identifier, nothing about you, and it is removed when you sign out. Without it we cannot keep you signed in.

That is the entire list. We do not currently set analytics, advertising or preference cookies.

What that means for consent

Because the only cookie we set is strictly necessary for a service you have asked for, we do not need your consent for it and we do not show you a consent banner for it. If we later add analytics or advertising technology, we will ask you first, refusing will be exactly as easy as accepting, and nothing non-essential will load until you agree.

Third parties

When you open a page that uses the Pwned Passwords service, your browser contacts that service directly. It does not set cookies for us. Payment pages are hosted by Stripe, which sets its own cookies necessary for payment and fraud prevention.

Controlling cookies

Your browser can block or delete cookies. If you block vx_session you will not be able to stay signed in.