There is very little to say here, which is the point.
Version 1.0 · Effective 8 September 2026 · Last updated 8 September 2026
This website sets no cookies of its own. There is no analytics, no
tag manager, no advertising pixel, no session recording, no A/B testing tool and no
chat widget on any page of pfmvault.com. We do not know who visits, how
many of you there are, or what you look at.
That is also why there is no consent banner: there is nothing to consent to.
Everything on these pages — the styling, the scripts, the typeface, the app screenshots — is served from our own domain. Loading this page causes your browser to contact nobody but us.
That was not true until 13 September 2026. Until then the Libre Franklin typeface was loaded from Google’s font service, which meant Google received your IP address on every page load. The font files now sit on our own domain, and that request no longer happens.
One thing still sits between you and us, and it is our host:
| What | Who | What it means for you |
|---|---|---|
| Hosting | Cloudflare Pages | Our host may set a cookie of its own (typically named __cf_bm or
similar) to distinguish real visitors from automated traffic, and it keeps
standard server request logs including IP addresses. This is infrastructure
security, not analytics, and we do not read it as a report on you. |
The download buttons redirect to GitHub, which hosts our installers. Once you follow one, you are on GitHub’s site and their terms and privacy practices apply.
Your browser can block third-party requests and clear cookies for this site and the pages will still work. Blocking web fonts specifically gives you a system typeface instead of ours, which changes how the page looks and nothing else. We would rather tell you that than pretend the choice does not exist.
The desktop app is not a browser page and does not use cookies at all. It stores your preferences — your theme, which chart you last looked at, your date format — on your own computer. Those never leave it and are not readable by us.
There is no analytics SDK, no crash-reporting service, no advertising identifier and no telemetry in the application. We have no idea how many people open Vault on a given day. That is a deliberate trade: we lose product data, and you keep yours.
Australia does not require a cookie consent banner in the way the European Union does. What Australian privacy law requires is that we are open about what we collect, which is what this page and the Privacy Policy are for.
Even where a banner is required, it exists so you can refuse non-essential tracking. We have not built any, so a banner would be theatre — an interruption asking your permission for something that is not happening.
If we ever add analytics or any other tracking, we will update this page before it goes live, say plainly what it is and why, and give you a way to opt out. We will not add it quietly.