Cookie Policy
Learn how NVC File Check uses cookies and similar technologies, and how to control them.
1. What Are Cookies?
Cookies are small text files that a website places on your device (computer, tablet, or smartphone) when you visit it. They are widely used to make websites function properly, to remember your preferences, and to provide information to site owners. Cookies are not programs and cannot execute code, carry viruses, or access information on your hard drive beyond what the site places there.
In addition to traditional cookies, similar technologies such as session storage and local storage may be used for comparable purposes. This policy covers all such technologies collectively.
2. How NVC File Check Uses Cookies
We keep our cookie usage to an absolute minimum. We use only strictly necessary cookies required to operate the Service. We do not use advertising cookies, behavioral tracking cookies, or any third-party analytics cookies that follow you across the web.
3. Cookies We Use
3.1 Session Cookie (Strictly Necessary)
When you log in to NVC File Check, we set a session cookie (typically named PHPSESSID) that keeps you authenticated across page requests. This cookie:
- Is required for the Service to function — without it you cannot stay logged in;
- Stores only a random session identifier, not your personal data directly;
- Is set as
HttpOnly(inaccessible to JavaScript) for security; - Expires when you close your browser or log out.
3.2 CSRF Protection (Strictly Necessary)
We generate a CSRF (Cross-Site Request Forgery) token stored server-side in your session. A corresponding token is embedded in each HTML form or available via a meta tag for AJAX requests. This is a core security mechanism that prevents malicious third-party sites from submitting forms on your behalf. It does not track you or collect personal data.
3.3 Flash Message Storage (Strictly Necessary)
When you perform an action (such as logging in or completing a payment), brief status messages ("Payment successful," "Invalid password") are stored temporarily in your session and shown once on the next page load, then discarded. This uses the same session cookie described above.
3.4 Page Password Unlock State (Strictly Necessary)
If you unlock a password-protected page on our site, a session flag is stored to remember that you have unlocked it, so you are not asked for the password again during the same browser session.
4. Third-Party Cookies
4.1 Stripe
When you proceed to the Stripe-hosted payment checkout, Stripe may set its own cookies on the Stripe-hosted checkout domain for fraud prevention, security, and to maintain your checkout session state. These cookies are subject to Stripe's Privacy Policy and Stripe's Cookie Policy, not ours. We do not control Stripe's cookie practices.
4.2 AI Model Providers
Our AI document analysis is performed via server-to-server API calls. The AI provider APIs are never called from your browser; they do not set cookies on your device.
4.3 Web Fonts (Google Fonts)
Our site loads the Inter typeface from Google Fonts via a browser request, which means Google may log your IP address as part of serving the font file. Google's collection and use of this data is governed by Google's Privacy Policy. Google Fonts does not set cookies in the traditional sense, but the HTTP request does expose your IP address to Google's servers.
4.4 CDN Resources (Bootstrap / jsDelivr)
We load Bootstrap CSS and JavaScript from the jsDelivr CDN. As with any CDN, your browser makes a request directly to jsDelivr's servers, which may log your IP address as part of normal CDN operation. jsDelivr's practices are governed by their own privacy policy. These CDN requests do not set persistent tracking cookies.
5. What We Do NOT Do
- We do not use Google Analytics, Facebook Pixel, or any behavioral analytics or advertising platforms;
- We do not set any cookies that track your browsing activity across other websites;
- We do not sell data derived from cookies to any third party;
- We do not use cookies for targeted or interest-based advertising.
6. Your Cookie Choices
Because the cookies we set are strictly necessary for the Service to operate, they cannot be disabled without preventing the Service from functioning. Specifically:
- Disabling session cookies in your browser will prevent you from logging in and using the Service;
- We do not present a cookie consent banner for strictly necessary cookies, as they do not require consent under most applicable laws (including the EU ePrivacy Directive and GDPR).
You can control or delete cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Here are links to cookie management instructions for common browsers:
Note that blocking cookies on our site will break core functionality (login, session state, payment flow).
7. Do Not Track
Some browsers include a "Do Not Track" (DNT) signal. Because we do not track users across websites or for advertising purposes, our approach to user privacy already aligns with the intent of the DNT signal, regardless of whether it is enabled. We do not currently respond to DNT signals in a technically differentiated way, because the Service does not engage in the tracking practices DNT is designed to prevent.
8. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in our practices or applicable regulations. When we make material changes, we will update the "Last updated" date at the bottom of this page. We encourage you to review this page periodically.
9. Contact Us
If you have questions about how we use cookies or similar technologies, please contact us at: support@nvcfilecheck.com