Cookies Policy
Last updated: 3 May 2026
What are cookies
Cookies are small text files placed on your device by websites you visit. They make sites remember information about your visit — log-in state, preferences, and (with consent) usage analytics.
Categories we use
- Functional — required to operate the platform (login, session, your saved consent choice). Always on.
- Analytics — Google Analytics 4 with IP anonymisation. Set only after you grant analytics consent.
- Marketing — reserved for future advertising and retargeting. None active today.
Cookies in use
| Name | Purpose | Duration | Category | Party |
|---|---|---|---|---|
| session | Authenticated session — required to log in and trade. | 7 days | Functional | First-party |
| api-token | Short-lived API access token paired with the session. | 15 minutes | Functional | First-party |
| refresh-token | Refreshes the API token without forcing a re-login. | 30 days | Functional | First-party |
| hashlock_consent | Stores your cookie preferences so we do not re-prompt. | 1 year | Functional | First-party |
| _ga | Distinguishes unique users for Google Analytics 4. | 2 years | Analytics | Third-party |
| _ga_X5MW9B8VMC | Google Analytics 4 session state for our property. | 2 years | Analytics | Third-party |
Managing your consent
You can change or withdraw your analytics consent any time on the privacy settings page. Most browsers also let you block or delete cookies — see your browser’s help docs. Note that blocking functional cookies will break sign-in and the trading interface.
Do Not Track
If your browser sends a Do Not Track (DNT=1) signal, we honour it as an automatic refusal of analytics and marketing cookies. You will not see the consent banner.