vaultdropLast updated 20 September 2026
vaultdrop uses a handful of first-party cookies and browser storage entries, all of them needed to sign you in, protect forms and remember choices you make. There are no advertising or tracking cookies. This page lists every one.
A cookie is a small text file a website stores in your browser so it can recognise you on the next request, for example to keep you signed in. Browsers also offer local storage and IndexedDB, which work like cookies but are never sent to the server. Under the EU ePrivacy rules, storage that is strictly necessary for a service you asked for doesn't require consent; anything else does. vaultdrop uses only the strictly necessary kind.
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
vd-cookie-notice | Local storage | Remembers that you dismissed the cookie notice so it isn't shown again. | Until you clear site data |
vaultdrop database | IndexedDB | Stores the folder permission you grant for “Add to Spotify” (Chromium desktop only) so you're not asked to pick the folder every time. Created only when you use that feature. | Until you clear site data |
Player state (what's playing, the queue) is held in memory only and is gone when you close the tab.
vaultdropsets no analytics, advertising or social-media cookies, and our web fonts are self-hosted so no font provider is contacted. Two situations involve other companies' cookies, on their sites, not ours:
One more is strictly necessary and set on our domain by our security provider: traffic reaches vaultdrop through Cloudflare, which may set a short-lived __cf_bm cookie (30 minutes) or a cf_clearance cookie after a security check, to tell real visitors from bots. They are not used for tracking or advertising. See Cloudflare's cookie reference.
Artist portraits are images loaded from Spotify's and Deezer's image servers. Loading an image sends your IP address and browser details to that server, as with any image on the web, but it sets no cookies on vaultdrop.
You can view, block or delete cookies in your browser settings (usually under Privacy or Site data). Because vaultdropuses only necessary cookies, blocking them means you can't stay signed in; everything public still works. Clearing site data also resets the cookie notice and the Spotify-folder permission.
If we ever add optional cookies (for example analytics), we'll update this page and ask for your consent first, with a real choice to refuse.
Questions about cookies: [email protected]. The wider picture of how we handle personal data is in the Privacy Policy.