Cookie Policy

Status: Human-voice rewrite, pending counsel review. Document version: 2026.05.01 Last updated: 2026-05-01 Effective date: 2026-05-01

What this means in plain English: Cookies are small files we ask your browser to keep so the Service remembers things — that you are signed in, what theme you picked. We use the bare minimum, do not run advertising trackers, and ask you before turning on anything that is not strictly necessary.

This Cookie Policy explains what cookies and similar technologies the Service uses, why, and how you can control them.

1. What a cookie is

A cookie is a small text file a website asks your browser to store. The browser sends it back on every later request to that site, which lets the site remember things — that you are signed in, what theme you picked, what page you came from. Local storage and session storage work the same way; we treat them the same in this policy.

We also use a small number of "pixel" requests (1x1 transparent images on emails) to confirm that an email reached your inbox.

2. Cookie categories we use

2.1. Strictly necessary

These cookies are needed to run the Service. They run regardless of consent:

• The session cookie that keeps you signed in.
• The CSRF token that protects the sign-in form.
• The load-balancing cookie that pins your requests to a particular backend.
• The cookie that records your cookie-consent choice.

Lifetime: from "session-only" up to 12 months, depending on the cookie.

You can disable these in your browser. The Service will not work if you do.

2.2. Functional

These cookies remember your preferences. They run only on consent:

• Theme (light / dark).
• Language.
• Last-used market view, last-used scan filter, last-used watchlist.
• The decision you made on the first-login Risk Disclosure modal.

Lifetime: typically 12 months.

2.3. Analytics

We use a privacy-preserving analytics tool to count page views, count active users, and measure feature uptake. The tool does not set per-user identifiers, does not fingerprint, and does not share data with advertising networks. We do not currently use Google Analytics.

Analytics cookies run on consent.

Lifetime: typically up to 13 months in line with GDPR guidance.

2.4. Advertising / marketing

Off by default. We do not currently run advertising or marketing pixels on the Service. If we ever do, we will update this policy and re-prompt for consent.

3. The cookie banner

If you are in the EU/EEA, the UK, Switzerland, or another jurisdiction that requires consent, you see a banner on your first visit:

• "Accept all" turns on functional and analytics cookies.
• "Reject non-essential" runs only the strictly necessary cookies.
• "Manage preferences" lets you toggle each category.

You can change your choice at any time at Account → Privacy → Cookies.

If you are outside the consent-required jurisdictions, functional and analytics cookies run by default with a notice; you can still opt out from the same page.

4. Third-party cookies

We try to minimise third-party cookies. Where a third party does set a cookie:

• Stripe (during checkout): a small number of cookies for fraud prevention. Stripe's cookie practices are at https://stripe.com/cookies-policy/legal.
• Cloudflare or a similar CDN (where used): bot-prevention and rate-limiting cookies that count as "strictly necessary".

We do not embed advertising-network pixels.

5. Email tracking

Marketing emails contain a 1x1 pixel that confirms delivery and open. Transactional emails (receipts, password resets, security alerts) generally do not. You can usually turn off email image loading in your email client to suppress the pixel; we will still send the email itself.

6. Changes

We may update this Cookie Policy from time to time. The "Last updated" date at the top will change. If we add a new cookie category, we will re-prompt the consent banner.

Change log