Last Updated: October 2026
This Cookie Policy ("Policy") explains whether and how cookies and similar technologies are used by the Avalun website (avalun.io, including the web version at avalun.io/app) and the Avalun Android application (together, the "Platform"). This Policy is part of our Privacy Policy.
Operator: Avalun Ltd. — contact: [email protected]
Cookies are small text files placed on your computer, tablet, or mobile device by websites. They can be used to recognize you, remember your preferences, or measure how a website is used.
The avalun.io website itself does not set cookies, does not use Google Analytics or any other analytics or advertising cookies, and does not embed third-party trackers. The web version (avalun.io/app) and the website purchase page keep your login session and language choice in your browser's local storage; the session is removed when you log out. Google Sign-In and wallet connection (Reown/WalletConnect) are loaded only when you use them and are governed by their providers' own policies. The website also loads web fonts from Google Fonts, which does not set cookies. Our content delivery and security provider, Cloudflare, may set strictly necessary security cookies (for example __cf_bm) to protect the site from automated abuse; these contain no advertising or tracking data and are deleted automatically.
Because only strictly necessary security cookies may be set, no cookie consent banner is shown. If we ever add cookies to the website, this Policy will be updated first and, where required, consent will be requested.
The Avalun Android application does not use browser cookies. It does use the following on-device technologies, which serve a similar purpose:
4.1. Session token: a login token stored securely on your device so that you stay signed in. It is deleted when you log out or delete your account.
4.2. Firebase Analytics SDK: the app includes the Firebase Analytics SDK (Google), which records app-usage events (for example: app opened, session started, withdrawal requested) together with a random app-instance identifier and basic device information. This helps us find crashes and understand which features are used. It is not used for advertising. See the Privacy Policy for details on this data and how to object.
4.3. Firebase Cloud Messaging token: a push-notification token so we can notify you when a session is ready to collect or a withdrawal is completed. You can disable notifications in your device settings.
4.4. Google Play Integrity: a device-integrity attestation issued by Google to confirm the app is genuine and running on a real device. It contains no personal data beyond what Google's own policy describes.
You can clear the app's local data or uninstall the app at any time from your device settings. You can turn off push notifications in Android settings. Analytics collection can be objected to by contacting [email protected]; deleting your account (see the Account Deletion Policy) anonymizes all data linked to you.
We may update this Policy from time to time. In case of significant changes, we will inform you through the Platform. We recommend that you regularly check the most current version of this Policy.
If you have any questions or concerns about this Policy, please contact us by sending an email to [email protected].