Cookie policy
Last updated July 8, 2026
We use three categories of storage. Only “Necessary” is active by default; the other two require your consent, given through the cookie banner or the settings below.
Necessary — always on, no consent required
Stored only in your browser’s localStorage. Never sent to our servers or any third party.
| Key | Purpose | Lifetime |
|---|---|---|
vulnly:history | Your last 20 searches, so you can re-run or clear them. | Until cleared |
vulnly:consent | Your cookie category choices. | Until changed |
vulnly:ai-enabled | Whether the AI advisor toggle is on. | Until changed |
vulnly:ai-unlock | Your AI-advisor unlock token and remaining uses. | Up to 30 minutes, or until used up |
Analytics — requires consent
Google Analytics 4 (_ga, _ga_*) — anonymized page views and custom events (search, version list view, AI advisor usage), retained for 2 months. Loaded only after you accept the “Analytics” category.
Advertising — requires consent
Only relevant if this deployment uses Google Ad Manager for the rewarded-ad unlock; the default house ad sets no cookies and needs no consent. If Google Ad Manager is configured and you decline the “Advertising” category, the AI advisor stays locked — watching the ad is the only unlock path.
See our privacy policy for how this data is processed more broadly.