Cookies Policy

Cookies are small files or pieces of information that a website can store on, or retrieve from, a computer, mobile phone, tablet or other device. They can help a website: • recognise a device; • maintain a secure session; • keep a user signed in; • remember preferences; • remember language choices; • remember cookie choices; • protect accounts; • prevent fraud and abuse; and • provide requested functionality. Cookies are not the only technologies covered by this Policy.

This Policy also applies, where relevant, to other technologies that store information on or access information from your device, including: • browser local storage; • session storage; • pixels; • scripts; • tags; • browser-storage technologies; and • similar storage or access technologies. References to “cookies” in this Policy may therefore include these similar technologies where appropriate.

Essential cookies and technologies are required for NeverExpiry to operate securely or provide functionality requested by you. They may be used for purposes such as: • secure login; • authentication; • maintaining a signed-in session; • account security; • fraud prevention; • protecting forms; • maintaining navigation; • preventing unauthorised access; • security controls; • load balancing; • remembering essential cookie choices; and • providing core account functionality. Where applicable law permits, strictly necessary technologies may operate without prior consent. Blocking essential cookies through your browser may prevent parts of NeverExpiry from working correctly.

When you create an account or sign in, NeverExpiry may use secure session technologies so the service can recognise your authenticated session between requests. These technologies may: • confirm that you are signed in; • maintain your session; • protect account access; • support secure password-reset or verification processes; and • help prevent unauthorised access. NeverExpiry does not store your password itself inside a browser cookie. Signing out may clear or invalidate relevant authentication or session information. Security-related session technologies may also be used for authorised administrative access.

NeverExpiry may use cookies or browser-storage technologies to remember choices you make. These may include: • selected language; • interface preferences; • relevant display settings; • account-related preferences; and • other functionality expressly selected by you. Where applicable law permits these technologies to operate without prior consent, NeverExpiry will comply with the conditions applying to that exception. Where consent is required, the technology will not be activated before the required consent is obtained.

NeverExpiry supports multiple languages and regional language preferences. When you select a language through the NeverExpiry language selector, the service may remember that preference so pages continue to appear in your chosen language on later visits. The preference may be stored: • locally in your browser; • in a cookie; • in browser storage; or • within your NeverExpiry account where appropriate. Only information reasonably necessary to remember the language choice should be used for this purpose.

NeverExpiry may remember choices you make concerning cookies and similar technologies. This may include whether you: • accepted optional technologies; • rejected optional technologies; • changed a previous choice; • withdrew consent; or • objected to a permitted use. Remembering these choices helps prevent the website from repeatedly asking you the same question and helps NeverExpiry respect your preferences.

NeverExpiry may use limited statistical or analytics technologies where appropriate to understand matters such as: • website usage; • page visits; • general navigation patterns; • technical performance; • errors; • service reliability; and • how NeverExpiry can be improved. Where NeverExpiry relies on an applicable legal exception for statistical technologies, the relevant legal requirements will be followed. Where consent is required, the relevant analytics technology will not be activated until consent has been obtained. Analytics technologies must not unnecessarily expose private document contents.

NeverExpiry does not treat advertising, behavioural tracking or cross-site tracking as essential to the service. If NeverExpiry introduces technologies for: • behavioural advertising; • third-party advertising; • cross-site tracking; • marketing profiling; • advertising pixels; or • similar advertising purposes, they will only be activated in accordance with applicable consent requirements. Private NeverExpiry document contents must not be used to create behavioural advertising profiles.

NeverExpiry does not use private vault document contents to: • select advertising; • create behavioural advertising profiles; • track users across unrelated websites for advertising; • sell advertising audiences; or • provide private document contents to advertising providers. Cookies or analytics technologies should not expose private vault document contents to advertising services.

Payments and subscriptions may be handled through specialist payment services. Those providers may use their own necessary cookies or similar technologies for purposes such as: • completing transactions; • authenticating payments; • preventing fraud; • maintaining secure payment sessions; and • managing billing functionality. NeverExpiry does not use browser cookies to store your full payment-card number or card security code. Third-party payment technologies may also be subject to the relevant provider’s own privacy and cookie practices.

Cookies are not used as the storage location for documents saved in your NeverExpiry private vault. Uploaded documents are stored through the relevant NeverExpiry storage systems rather than being placed inside ordinary browser cookies. Cookies may, however, be used to authenticate your session and ensure that only appropriately authorised requests can access account functionality.

NeverExpiry may process account and document information needed to provide features such as: • expiry dates; • renewal dates; • review dates; • reminders; • document categories; • profiles; and • account preferences. This information is not ordinarily stored as the complete document inside a cookie. Limited browser or session information may be used where needed to operate the relevant functionality.

Cookies are not intended to store document contents submitted for OCR or AI-assisted processing. Where OCR or AI functionality is used, relevant information is processed according to the NeverExpiry Privacy Policy and applicable security arrangements. Cookie technologies should not be used to copy private document contents into unrelated advertising or tracking systems.

NeverExpiry may use cookies or similar technologies where reasonably necessary to: • protect accounts; • detect suspicious activity; • prevent fraud; • protect authentication; • prevent unauthorised access; • maintain secure sessions; • protect forms; and • protect NeverExpiry infrastructure. Where these technologies qualify for an applicable legal exception, they may operate without consent where permitted by law.

Some NeverExpiry functionality may involve specialist third-party services. Depending on the functionality actually used, these may include providers supporting: • authentication; • hosting; • databases; • payments; • security; • communications; • technical monitoring; • OCR; or • other infrastructure. A third-party provider should not be listed in this Policy unless it is actually used by NeverExpiry. NeverExpiry will not invent cookie names, providers or purposes.

A first-party cookie is generally set in connection with the NeverExpiry website itself. A third-party cookie or technology may be supplied by another service used to provide part of NeverExpiry’s functionality. Where third-party technologies are used, NeverExpiry aims to provide appropriate information about their purposes and applicable choices.

Where consent is legally required, NeverExpiry will request the required choice before activating the relevant optional technology. Consent should be obtained through a clear positive choice. Where applicable, users should be able to: • accept optional technologies; • reject optional technologies; • manage categories; and • change their choices later. Simply continuing to browse the website should not by itself be treated as consent where valid consent is legally required.

Where NeverExpiry relies on your consent, you may withdraw that consent at any time through the available Cookie Preferences controls. Withdrawal does not make processing that was lawful before withdrawal unlawful. Once consent has been withdrawn, technologies requiring that consent should no longer be used for the relevant purpose, subject to reasonable technical time needed to apply the change.

Certain storage or access technologies may qualify for legal exceptions that do not require prior consent. Where an applicable exception requires NeverExpiry to provide a means of objecting, NeverExpiry will provide an appropriate method for doing so. An objection will be respected in accordance with the conditions applying to that particular technology and purpose.

Where optional technologies are used, NeverExpiry’s Cookie Preferences functionality may allow you to: • accept optional technologies; • reject optional technologies; • review categories; • withdraw previous consent; • change previous selections; and • object where an applicable legal exception requires an objection mechanism. Essential technologies may remain active where genuinely required to provide or secure a service requested by you.

Most browsers allow you to: • view cookies; • delete cookies; • block cookies; • restrict third-party cookies; • clear site information; and • control some browser-storage technologies. Browser settings operate separately from NeverExpiry’s own Cookie Preferences. If you block essential technologies, you may be unable to: • remain signed in; • access your account; • use secure features; • retain language preferences; or • complete certain account actions. Browser controls generally apply only to the particular browser and device on which you make the change.

Some cookies operate only for the current session. Others may persist for a limited period so that NeverExpiry can: • maintain appropriate account functionality; • remember selected preferences; • remember cookie choices; • protect the service; or • provide another disclosed function. NeverExpiry should not keep a cookie longer than reasonably necessary for its stated purpose.

Cookie and preference records should be retained only for as long as reasonably necessary for their stated purpose. This may include time reasonably required to: • maintain a session; • remember preferences; • remember consent; • demonstrate consent; • record withdrawal or objection; • maintain security; • prevent fraud; or • comply with applicable law. Exact cookie durations should reflect the technologies actually used by NeverExpiry. NeverExpiry will not publish invented retention periods merely to populate this Policy.

NeverExpiry should maintain an accurate record of the cookies and similar technologies actually used in production. Where appropriate, Cookie Preferences or this Policy may identify: • cookie or technology name; • provider; • purpose; • category; • whether it is first-party or third-party; and • duration. The inventory must reflect the actual NeverExpiry implementation. Cookie names, providers or durations must not be invented.

Depending on the technology used, information associated with cookies or similar technologies may include: • IP address; • authentication or session identifiers; • browser information; • device information; • security events; • language; • preferences; • website interaction information; and • technical information. Where this information constitutes personal information, it is also handled in accordance with the NeverExpiry Privacy Policy.

Cookie identifiers or browser technologies may be associated with an authenticated account for legitimate service and security purposes. However, routine cookies should not contain the complete contents of private documents stored in the NeverExpiry vault. Private document contents should not be included in advertising cookies or unrelated tracking technologies.

Where NeverExpiry functionality is used in connection with documents relating to children or dependants, additional privacy considerations may apply. NeverExpiry does not intentionally use children’s private document information for behavioural advertising.

A device or browser may be used by more than one person. Cookie preferences, language selections or logged-in sessions stored on a shared device may therefore affect another person using the same browser. Users of shared devices should: • sign out when finished; • avoid saving credentials where inappropriate; and • review browser and cookie settings where necessary.

NeverExpiry aims to use appropriate protections for authentication, session and security technologies. Security-sensitive cookie or session configurations should be designed to reduce risks such as: • unauthorised access; • session theft; • manipulation; and • inappropriate exposure. No internet technology can provide absolute security.

NeverExpiry may change the cookies or similar technologies it uses as the service develops. Changes may arise from: • new account functionality; • security improvements; • payment systems; • analytics; • infrastructure changes; • new features; or • changes in law. Where a new technology requires consent, it will not be activated before the required consent has been obtained. Where necessary, Cookie Preferences and this Policy will be updated.

NeverExpiry may update this Cookies Policy from time to time. The “Last updated” date at the top of this page indicates when it was most recently revised. Where changes materially affect your choices or require new consent, NeverExpiry will provide appropriate information or request a new choice where required.

English is the master Cookies Policy. The complete Cookies Policy is available in every language currently supported by NeverExpiry. When a user selects a language or regional language through the NeverExpiry language selector, the entire Cookies Policy will be translated and displayed in that selected language. This includes: • page title; • all headings; • all paragraphs; • all bullet points; • cookie-category explanations; • consent and preference information; • browser-control information; • Cookie Preferences labels and controls; and • all other Cookies Policy text. Translations will preserve the meaning and protections of the English master Policy. Nothing in a translated version limits any mandatory rights available under applicable law.

If you have questions about NeverExpiry’s use of cookies or similar technologies, contact: cookies@neverexpiry.com Please do not send passwords, payment-card security codes or unnecessary copies of private documents when contacting us.