Cookie policy
Vulture sets no advertising, analytics or tracking cookies. This page lists every cookie and every piece of browser storage the app and this website use, what each is for, how long it lives, and how to remove it. Last updated 7 September 2026.
The short version
- One cookie exists, and only in the admin panel: it keeps the administrator signed in. Nobody else receives it.
- Everything you see as a user lives in your browser's own storage (localStorage and IndexedDB), on your device, encrypted where it is personal. It never travels to us on its own.
- Third parties set cookies only when you use them: Razorpay during a payment, on its own pages. Google Fonts serves the typeface on the public pages and sets none.
- There is nothing to opt out of, so the notice you see once at the bottom of the page is a notice, not a consent form.
Cookies
| Name | Set by | Purpose | Lifetime | Kind |
|---|---|---|---|---|
vulture_admin | vulture.gixts.com (admin panel only) | Keeps the administrator signed in to the admin panel. Signed, HttpOnly, sent only over HTTPS. | A few hours, then re-sign-in with a code | essential |
| Razorpay cookies | razorpay.com, during Checkout | Fraud checks and session handling for the payment you are making. Governed by Razorpay's own policy. | Set by Razorpay | essential to pay |
That is the whole list. The app itself, signed in or not, sets no cookies.
Browser storage
The app keeps its state in your browser (or, in the desktop build, in the app's own storage). None of it is a cookie, none of it is sent with requests, and clearing site data removes all of it.
| What | Purpose | Lifetime | Personal? |
|---|---|---|---|
| Profile data | Résumés, applications, notes, settings and any AI keys you enter, encrypted with your passphrase. | Until you delete the profile or clear site data | Yes, encrypted |
| Online session | The signed token that keeps an online account signed in and lets sync run. | Until sign-out; refreshed while in use | Yes |
| Appearance and preferences | Theme, font, density, effects, the last page you were on, chart settings, the tour you finished. | Until cleared | No |
| Install id | A random id per device for the first-party telemetry (page views, installs, app build). Off with one switch in Settings. | Until cleared | Not linked to you |
| Model cache | Weights for the built-in on-device model, in IndexedDB, so they download once. | Until cleared | No |
| Cookie notice | Remembers that you saw the notice at the bottom of the page. | Until cleared | No |
What we do not do
- No advertising networks, no ad cookies, no retargeting pixels.
- No third-party analytics scripts. Our own telemetry counts page views and installs with a random id, keeps no content, and can be switched off in Settings.
- No fingerprinting, no cross-site tracking, no selling or sharing of browsing data.
Your choices
- Clear everything: your browser's "clear site data" for vulture.gixts.com removes every item above. Local profiles are gone with it, so export a backup first from Settings.
- Telemetry: Settings → Telemetry, one switch.
- Online account: deleting the account from Settings removes the synced data on the server as well.
- Payments: Razorpay's cookies are controlled on razorpay.com and in your browser's cookie settings.
Changes
If a cookie is ever added, this page changes first and the date at the top moves. The privacy policy covers what the server stores about accounts.
Contact
Questions about anything here: gixts@hrsraiden.com, or the Contact form on the front page.