Cookie Policy

Last updated: September 30, 2026

1. Cookie Usage

VectorFi uses essential session cookies. Google Analytics 4 cookies are enabled only with your permission. Declining analytics does not restrict app features.

2. Essential Cookies and Preferences

The session cookie (connect.sid) maintains your sign-in session. Google Analytics preferences (vectorfi.analytics-consent.v1) and cookieless measurement preferences (vectorfi.traffic-optout.v1) are stored in browser local storage for up to 180 days. vectorfi.traffic-notice.v1 remembers that you have seen the new measurement notice. These are not tracking identifiers. Dismissing the previous informational notice does not grant analytics consent.

3. Google Analytics

If you allow analytics, _ga and _ga_* cookies measure visitors and sessions; their lifetime is configured to a maximum of 180 days. Pageviews, sign-up/login and AI feature-usage events are sent to Google. Limited attributes such as language, sign-in state and usage ranges may be included. Names, email addresses, account IDs, investment amounts, stock symbols and AI conversation content are excluded from analytics events. Advertising personalization and Google Signals are disabled. Google may process data outside Türkiye. Google privacy information: https://policies.google.com/technologies/partner-sites

4. Changing Your Choice

Manage both measurements separately under Privacy preferences. Reject optional cookies stops Google Analytics and clears accessible Google Analytics cookies. Cookieless visit statistics are a separate choice; Disable all measurement stops both. Previously sent events are not affected. Google Analytics events from before consent are not replayed.

5. Other Google Cookies

Google sign-in is an authentication service separate from analytics consent. Google may use cookies within its own services under its privacy policy.

6. Cookieless Visit Statistics

When enabled, we use Umami on our own infrastructure for basic visit statistics: sanitized page addresses, referring domains, browser/operating system, device type, language and approximate location. No cookies or persistent browser identifiers are written. The server processes the IP address and browser information to derive a site-specific daily visitor identifier; raw IP addresses are not stored in the analytics database. This identifier is not linked to your account. Being cookieless does not by itself mean that all data is legally anonymous. Portfolio data, account IDs, email addresses and AI conversations are excluded; session replay and heatmaps are not used. Records are deleted by hourly cleanup after 90 days. You can turn off cookieless measurement or choose Disable all measurement. This measurement is disabled for Do Not Track and Global Privacy Control signals.