Cookie Vault is a local-first tool. Your cookies, account snapshots, notes and settings never leave your device. They are stored only in your browser's local extension storage (chrome.storage.local).
The extension makes exactly one kind of network request: when you voluntarily enter an activation code to upgrade to Pro, that code is sent to our license server to be verified. Nothing else is ever transmitted.
We do not sell your data. We do not run ads, analytics, tracking, or any third-party SDKs.
To function as a cookie manager, the extension reads and writes cookies for the websites you visit, using the browser's cookies API. This includes cookie names, values, domains, paths and flags.
This data is never uploaded, transmitted, or shared. It is only:
When you save an account, the extension stores locally: the name and note you type, the site's domain, the page URL at the time of saving, the cookies in that snapshot, and timestamps (created / last used). Domain notes are also stored locally.
Theme preference, auto-reload preference, confirmation preference, and whether you have seen the welcome guide.
When you export a backup, a file is generated locally and downloaded by your browser. It is not uploaded anywhere. You may optionally encrypt it with a password (AES-GCM with PBKDF2 key derivation); we never receive that password.
⚠️ Backup and export files contain cookies, which are login credentials. Store them securely and do not share them.
If — and only if — you choose to upgrade to Pro and enter an activation code, the extension sends the following to our license server:
| Data | Purpose |
|---|---|
| The activation code you entered | To verify it is valid and not already used up |
| A randomly generated device identifier (UUID) | To enforce the per-code device limit |
| A request timestamp | To reject stale/replayed requests |
What our server stores: the activation code record, the device identifiers that have activated it, and activation timestamps. This is kept for as long as the license is active, so that the license can be validated and device limits enforced.
IP address: our license server runs on Cloudflare Workers. As part of serving the request and applying rate limiting (to prevent abuse), your IP address is processed and a short-lived counter keyed to it is stored for approximately 60 seconds, after which it expires automatically. We do not use IP addresses to build user profiles.
Periodic re-validation: while Pro is active, the extension may re-send the same activation code and device identifier periodically to confirm the license is still valid (for example, if a code has been revoked). No other data is included.
The device identifier is a random value generated on your device. It is not derived from and cannot be traced back to your name, email, browsing history, or any website account.
| Permission | Why |
|---|---|
cookies | The core function: read, create, modify and delete cookies so you can view/edit them and save or switch account snapshots. |
storage | Save your account snapshots and settings locally on your device. |
tabs | Read the current tab's URL to know which site's cookies to manage, and reload the page after you switch accounts. |
Host access (<all_urls>) | A cookie manager must be able to operate on whichever site you are currently viewing; the set of sites cannot be known in advance. The extension acts only on the site you are on, when you use it. |
No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
Our license server is operated on Cloudflare's global network, so activation requests may be processed in a country other than your own. Only the data described in Section 3 is involved.
Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have the right to access, correct, delete, or restrict processing of your personal data, to data portability, and to object to processing. Since almost all data stays on your device, you can exercise most of these rights directly within the extension. For the server-side license record, contact us at chrome@231652.xyz.
We do not sell or share personal information as those terms are defined under applicable privacy laws.
This extension is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them.
We may update this policy. Material changes will be reflected by a new effective date at the top of this page, and where appropriate we will note the change in the extension's release notes.
Questions or requests: chrome@231652.xyz
Cookie Vault 是一款本地优先的工具。你的 Cookie、账号快照、备注与设置从不离开你的设备，它们只保存在浏览器的本地扩展存储（chrome.storage.local）中。
本扩展只会发起一种网络请求：当你主动输入激活码升级 Pro 时，该激活码会被发送到我们的授权服务器进行校验。除此之外不传输任何数据。
我们不出售你的数据，不投放广告，不做统计分析与追踪，不集成任何第三方 SDK。
为实现 Cookie 管理功能，扩展会通过浏览器的 cookies 接口读取和写入你所访问网站的 Cookie，包括名称、值、域名、路径与各项标志。
这些数据绝不会被上传、传输或共享。 它们仅用于：
保存账号时，扩展在本地存储：你填写的名称与备注、站点域名、保存时的页面网址、该快照包含的 Cookie，以及创建与最近使用时间。域名备注同样仅存于本地。
主题偏好、切换后是否自动刷新、危险操作是否二次确认、是否已查看欢迎引导。
导出备份时，文件在本地生成并由浏览器下载，不会上传到任何地方。你可以选择用密码加密（AES-GCM + PBKDF2），我们不会收到该密码。
⚠️ 备份与导出文件包含 Cookie，属于登录凭据。请妥善保管，切勿分享。
当且仅当你选择升级 Pro 并输入激活码时，扩展会向我们的授权服务器发送：
| 数据 | 用途 |
|---|---|
| 你输入的激活码 | 校验其是否有效、是否已用尽 |
| 随机生成的设备标识（UUID） | 执行每个激活码的设备数限制 |
| 请求时间戳 | 拒绝过期/重放请求 |
服务器存储内容：激活码记录、已激活的设备标识、激活时间。这些信息在授权有效期内保留，用于校验授权与限制设备数。
IP 地址：授权服务器运行在 Cloudflare Workers 上。为处理请求并进行防滥用限流，你的 IP 地址会被处理，并以其为键存储一个约 60 秒后自动过期的计数。我们不会用 IP 地址构建用户画像。
定期复查：在 Pro 有效期内，扩展可能会定期重新发送同一激活码与设备标识，以确认授权仍然有效（例如激活码已被吊销的情形）。不包含其他任何数据。
设备标识是在你的设备上随机生成的值，与你的姓名、邮箱、浏览记录或任何网站账号无关，也无法反向关联。
| 权限 | 用途 |
|---|---|
cookies | 核心功能：读取、创建、修改、删除 Cookie，以支持查看编辑与账号快照的保存和切换。 |
storage | 在本机保存账号快照与设置。 |
tabs | 读取当前标签页网址以确定管理哪个网站的 Cookie，并在切换账号后刷新页面。 |
网站访问权限（<all_urls>） | Cookie 管理器必须能在你当前所在的任意网站上工作，无法预先限定网站范围。扩展仅在你使用时作用于当前站点。 |
任何存储或传输方式都无法做到绝对安全，我们无法保证百分之百的安全性。
授权服务器基于 Cloudflare 全球网络运行，激活请求可能在你所在国家/地区以外被处理。所涉数据仅限第 3 节所述内容。
根据你所在地区的法律（如 GDPR 或 CCPA/CPRA），你可能享有访问、更正、删除、限制处理、数据可携以及反对处理等权利。由于绝大部分数据都保存在你的设备上，你可以直接在扩展内行使大部分权利。涉及服务器端授权记录的，请联系 chrome@231652.xyz。
按适用隐私法规的定义，我们不出售也不共享个人信息。
本扩展并非面向 13 岁以下（或你所在司法辖区规定的相应最低年龄）的儿童，我们不会有意收集其个人信息。
我们可能会更新本政策。重大变更将通过更新页首的生效日期体现，必要时会在扩展的更新说明中一并告知。
如有疑问或请求：chrome@231652.xyz