Cookies

Short, because there is little to say.

Your session cookie, set when you sign in (including the demo vault). It keeps you signed in and is not used for anything else. If you open a password-protected published site, that site sets its own small cookie so it stays unlocked for you.
Nothing of ours on the marketing pages. Reading them sets no cookie of ours.
Analytics, only if you accept. The first time you visit, a small notice asks whether Memava may use Microsoft Clarity to see how this website is used: page views, clicks and scrolling. If you accept, Clarity loads and sets its own cookies and identifiers. If you decline, or do not answer, Clarity is never requested. What you type into forms is masked, and it never runs on the app or inside your vault. If your browser sends Global Privacy Control or Do Not Track, the notice does not appear and Clarity never loads.
Your choice is kept in your browser's local storage under the name memava-consent, not in a cookie. Cookie settings in the footer reopens the notice so you can change it. Choosing Decline stops Clarity from the next page; data already collected is handled by Clarity's retention period, which Microsoft sets.
No advertising or tracking scripts on this site. Apart from Clarity, and only if you accept, nothing from a third party runs on these pages. We also count page views on our own server by page and day, with no cookie and nothing about you. The light and dark switch on the Chief of Staff page keeps nothing after you leave.