Cookies & Local Storage Policy
Last updated: 23 September 2026 · Applies to visitors in the EU/EEA, the UK, Switzerland and the United States
This policy explains what Alfafolio and our advertising partner Google store on your device when you use our website and app, why, and how you can control it. In short: we use strictly necessary storage to run the service. We show ads through Google AdSense, which uses cookies to serve and measure ads. If you are in the EEA, the UK or Switzerland, Google's advertising cookies are only set after you agree to them in our consent banner. You can change your choice at any time with the Privacy settings link in the footer.
1. What we store on your device
Strictly necessary (always on) Session cookie (first-party, signed) Keeps you signed in to your account. Set only when you sign in. Expires in line with our session policy. Guest drafts (browser local storage) Saves portfolio and watchlist drafts while you use the app as a guest. Kept until your first sign-in, when they move to your account and are removed from your browser. UI preferences (browser local storage) Remembers chart indicator toggles, tab order and visibility, diligence notes and alert rules. Kept until you clear your browser's site data; synced to your account when signed in. Consent record (FCCDCF, FCNEC; cookie set by Google's consent tool) Stores the privacy choices you make in the consent banner. Kept for up to 13 months. Advertising (Google AdSense; only with your consent in the EEA, UK and Switzerland) __gads, __gpi (set by Google on alfafolio.com) Serve and measure ads and limit how often the same ad appears. Up to 13 months. __eoi (set by Google on alfafolio.com) Fraud prevention and ad security. Up to 6 months. IDE, test_cookie (set by Google on doubleclick.net) Personalised advertising and checking whether your browser accepts cookies. Up to 13 months / 15 minutes.
Strictly necessary storage is exempt from consent under Article 5(3) of the ePrivacy Directive and Regulation 6 of the UK PECR. Local storage stays in your browser and never leaves your device, except where it is synced to your account while you are signed in. Our pages are served from infrastructure located in the EU. Some chart libraries and fonts are loaded from public content delivery networks (CDNs). As with loading any website, those requests reveal your IP address to the CDN provider so the files can be delivered to you. Links to external news articles open the publisher's own website, which applies its own cookie and privacy policies.
2. Advertising cookies (Google AdSense)
We use Google AdSense to show ads. Google and its partners use cookies to serve ads based on your earlier visits to this and other websites, to limit how often you see the same ad, and to measure ad performance and prevent fraud. The main cookies Google may set are listed in the advertising table above. The exact cookies can change; Google keeps a current list at policies.google.com/technologies/cookies. • EEA, UK and Switzerland: we use a Google-certified consent management platform that follows the IAB Transparency & Consent Framework (TCF). Google will not set advertising cookies until you consent. If you decline, you may still see non-personalised or limited ads, which use fewer cookies. Some of these may still be used for fraud prevention and frequency capping where the law allows. • Opting out of personalised ads: you can turn off personalised ads at adssettings.google.com, or at www.aboutads.info for participating third-party vendors. • How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites
3. Managing your choices
• Privacy settings: click “Privacy settings” in the footer at any time to review or withdraw your consent for advertising cookies. • Browser settings: you can view and delete cookies and local storage in your browser's privacy or site-data settings. Clearing the session cookie will sign you out. Clearing local storage resets the app and deletes any guest drafts not yet saved to an account.
4. Visitors in the EU, EEA, UK and Switzerland
Strictly necessary storage relies on the exemption in Article 5(3) of the ePrivacy Directive and Regulation 6 of the UK PECR. Advertising cookies are set only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through Privacy settings. Where stored data relates to you as an identifiable person, such as your session cookie, we process it because it is necessary to provide the service you signed up for (Article 6(1)(b) GDPR and UK GDPR). You have the right to access, correct, delete and object to the processing of your personal data, and to lodge a complaint with your local data protection authority. See our Privacy Policy for details.
5. Visitors in the United States
Google's advertising cookies may count as “sharing” personal information for cross-context behavioural advertising under the California Consumer Privacy Act as amended by the CPRA and other US state privacy laws. You can opt out with the Privacy settings link in the footer or at adssettings.google.com. We also honour Global Privacy Control (GPC) signals. Depending on your state, you may have the right to know, access, correct and delete your personal information. See our Privacy Policy for how to exercise these rights.
6. Changes to this policy
We will update this page before we add new cookies or similar technologies, and ask for your consent where the law requires it. The date at the top of this page shows when it was last revised. Questions about this policy? Contact us using the details in our Privacy Policy.