Cookies & Local Storage
Working draft of the cookie and browser-storage disclosure. The inventory below lists everything the product actually stores in your browser today — nothing else. This document is a working draft prepared for operator and counsel review. It is not counsel-approved and is not final. Bracketed items require operator input before publication.
Status of this document
This document is a working draft prepared for operator and counsel review. It is not counsel-approved and is not final. Bracketed items require operator input before publication.
What cookies are
Cookies are small text files a site asks your browser to store and send back on later requests. Local storage is a browser feature that keeps small values on your device only. This page lists both, because the product uses one of each.
The complete inventory
Cookie — ve_session (the only cookie): Keeps you signed in (server-validated session token). Attributes: HttpOnly, SameSite=Strict, path /, Secure in production. Expires with your session lifetime (30 days by default; the operator can configure 1–90 days) and is cleared on sign-out or password change. The server stores only a SHA-256 hash of the token, never the token itself.
Local storage — veltrixeye:watchlist: Stores the watchlist you build in the Markets workspace, in your browser only.
Local storage — veltrixeye:cookie-notice.ack: Remembers that you dismissed the cookie notice, in your browser only.
Service worker & push (optional): Only if you turn on push notifications in Settings: your browser’s push subscription (an endpoint URL and two encryption keys) is stored server-side and encrypted at rest. You can turn it off at any time.
What is not used
No advertising cookies.
No third-party analytics or tracking scripts.
No cross-site tracking pixels.
No other cookies — the session cookie above is the only one.
Managing cookies and storage
Your browser can block or delete cookies and clear site data. Blocking or deleting the session cookie will sign you out and prevent signing in until it is allowed again. The watchlist and the cookie-notice dismissal are cleared by clearing site data for this site in your browser settings.
The cookie notice is informational — it does not gate any feature — and it is the only consent the product asks for: dismissing it stores the acknowledgement key listed above.
Changes and contact
If the product ever stores something new in your browser, this inventory and the tests pinning it will be updated in the same change. [OPERATOR TO CONFIRM: how changes to these terms are announced] Contact: support@veltrixeye.com.