Cookie policy. What we store, and why.

What cookies are

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, session storage and pixels.

They help us recognise your device, keep you signed in, remember your preferences and understand how Capitaly is used.

Why we use them

To keep you signed in, remember your settings, keep the service secure and see which pages were visited. Some cookies are essential for the service to work.

The types we use

Essential: sign in and session management, security such as CSRF protection and rate limiting, load balancing, and your cookie choices. The service cannot work without them, so they cannot be switched off.

Performance: which pages were visited, where visitors came from and how quickly pages load, so we can see what to improve.

Functional: the preferences and settings you choose in the product.

Analytics: Google Analytics counts visits and shows which pages are used, and Apollo identifies the companies that visit so our team can follow up. We do not use advertising cookies.

First party and third party cookies

First party cookies are set by Capitaly on capitaly.vc to run the service, keep sessions and remember preferences.

Third party cookies are set by the services that make the product work, such as sign in, hosting and analytics providers. Each is bound to use them only to provide that service to us.

Session and persistent cookies

Session cookies are deleted when you close your browser. We use them for sign in state, temporary preferences and security tokens.

Persistent cookies stay on your device for a set period. We use them to keep you signed in, remember longer term preferences and count page visits. You can view and delete them in your browser settings at any time.

Managing and deleting cookies

Every browser lets you view, manage and delete cookies: Chrome (Settings, Privacy and security, Cookies), Firefox (Settings, Privacy and Security, Cookies), Safari (Settings, Privacy, Manage Website Data) and Edge (Settings, Cookies and site permissions).

Blocking essential cookies will stop you signing in to Capitaly, and blocking functional cookies may change how the product behaves.

Do Not Track signals

There is no universal standard for Do Not Track signals, and Capitaly does not respond to them. You can still control cookies through your browser settings.

Visitors who are not signed in

If you are not signed in, we may still use cookies to remember your cookie choices, see which public pages were visited and keep the site working. These cookies never reach account data.

Where cookie data goes

Some cookies send data to the services that make the product work, and those services may operate in other countries. Each is bound to use it only to provide that service to us. We do not sell it.

Keeping cookies secure

Cookies are sent only over HTTPS, marked HttpOnly where appropriate, and use the SameSite attribute to protect against cross site request forgery. Session cookies expire quickly, and we review our cookies regularly.

No system is completely secure, so use a strong password and keep your account to the people who should have it.

Changes

If we change how we use cookies in a way that matters, we will update this page and tell account holders before it takes effect.

Asking us about it

[email protected]. A person reads it.

You can also ask what we hold about you, ask for a copy, or ask for it to be deleted at the same address.