Cookies Policy

This policy explains the cookies and similar technologies AveryQ uses, why we use them, and how you can control them.

Last updated: 7 July 2026

The short version: AveryQ is privacy-first. We use only strictly-necessary storage to run the vault securely, keep you signed in, and work offline — plus a record of your choice on the cookie banner. We set no advertising, analytics, retargeting or third-party tracking cookies.

1. What are cookies and similar technologies?

"Cookies" are small text files a website can store in your browser. Modern web apps also use related browser-storage technologies — local storage, session storage, IndexedDB and the Cache Storage API — for the same broad purposes. In this policy, "cookies" refers to all of these.

2. Consent

The first time you visit, a banner lets you choose Accept all or Essential only. Strictly-necessary storage is always active because the site cannot function securely without it, and — under India's DPDP Act 2023 and the GDPR — it does not require consent. We do not currently load anything that depends on your consent, but if that ever changes, it will stay switched off until you choose "Accept all". Your choice is remembered so you are not asked again unless this policy changes.

3. What we store

Technology	Purpose	Category	Retention
Cache Storage `averyq-v68` (service worker)	Serves the app shell and assets so pages load fast and the app works offline.	Necessary	Until the cache version changes or you clear site data.
Local storage `averyq_consent_v1`	Records that you signed the in-app data-storage & policy consent, so you are not re-prompted.	Necessary	Until you clear site data.
Local storage `averyq_cookie_consent_v1`	Remembers your choice on this cookie banner.	Preferences	Up to 12 months; reset if this policy changes.
Session storage `vault9_shareKeys`, `vault9_anthropic_key`	Holds family-share decryption keys and (only if you use AI auto-fill) your AI key, for the current browser tab only.	Necessary	Cleared when you close the tab.
Firebase Authentication (cookies + IndexedDB)	Keeps you securely signed in while you use the app.	Necessary	For the sign-in session; cleared when you sign out.
Firestore offline cache (IndexedDB)	Stores your vault for performance and offline access. The content is encrypted ciphertext only — it cannot be read without your master password.	Necessary	Until you sign out or clear site data.

4. Third-party services

AveryQ relies on a small number of Google services. When they are used, your request reaches Google and is governed by Google's own privacy policy. We do not use them to profile or advertise to you.

Google Fonts — serves the site's typefaces (Sora & Inter). Google may receive your IP address as part of loading the fonts. We set no cookies through this.
Google Firebase & Google Sign-In — authentication and encrypted data storage for the application. Used only inside the app when you sign in.
Google Gemini (AI auto-fill) — only when you choose to use AI auto-fill, the document image you pick is sent to Google's Gemini API to extract the fields. It is processed to return your result and is not used to train models, per Google's API terms.

We do not use analytics, advertising, retargeting, social-media or any other third-party tracking cookies.

5. Managing cookies

You can change your banner choice at any time using the Manage cookie preferences button above. You can also control or delete stored data through your browser settings — for example, "Clear site data", or blocking cookies for this site. Note that clearing strictly-necessary storage will sign you out and remove the offline cache, and the site may not work correctly until it is re-created.

6. Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the date above and, where appropriate, ask for your consent again.

7. Contact

Questions about this policy? Write to us at contact@altrixlabs.ai. For how we handle your personal data more broadly, see our Privacy Policy.