Cookie Policy
Last updated: 26 September 2026
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help us provide essential functionality and understand how you use our platform.
Cookies and Trackers We Use
This is the complete list of cookies, pixels and similar technologies that KlirInvest pages can load. Optional ones load only after you choose that category in the cookie banner or Cookie Settings.
Essential
- Sign-in session — KlirInvest (Supabase authentication). Keeps you signed in. sb-*-auth-token (browser storage). Loads: Always, once you sign in. Retention: Cleared when you sign out. The app signs you out after 30 minutes of inactivity.
- Cookie preference — KlirInvest. Remembers your cookie choice. klirinvest_cookie_consent (browser storage). Loads: Always. Retention: Until you clear it or change your choice.
- Hosting deployment cookie — Lovable (website hosting). Set by our hosting provider to serve the correct version of the site. __dpl. Loads: Always (set by the host, not by KlirInvest code). Retention: Short-lived, set by the host. Provider privacy policy
- Stripe checkout — Stripe, Inc.. Payment security and fraud prevention when you subscribe or manage billing. __stripe_mid, __stripe_sid. Loads: Only when you open checkout or billing. Retention: Set by Stripe (up to 1 year for __stripe_mid, 30 minutes for __stripe_sid). Provider privacy policy
Security
- Cloudflare Turnstile — Cloudflare, Inc.. Checks that a form (sign-up, launch list, free-tool email, demo request) is sent by a person. Turnstile challenge data. Loads: Only on pages with such a form. Retention: Set by Cloudflare. Provider privacy policy
Set by our hosting provider
- Hosting page-view analytics — Lovable (website hosting). Aggregate page-view counts collected by our hosting provider. The script is added by the host, loads before a cookie choice is made, and is not controlled by the consent banner. /~flock.js script, /~api/analytics requests. Loads: Currently on every page (host-controlled). Retention: Set by the hosting provider. Provider privacy policy
Analytics (optional)
- KlirInvest product analytics — KlirInvest. First-party page and button events and the campaign (UTM) that brought you here, stored by KlirInvest to measure which pages and tools are used. Linked to your account only after you sign up. analytics_session_id, klirinvest_visitor_id (browser storage). Loads: Only if you accept Analytics. Retention: Up to 13 months.
- Google Analytics 4 — Google LLC. Page views and events, if a measurement ID is configured. _ga, _ga_*. Loads: Only if you accept Analytics. Retention: Up to 13 months. Provider privacy policy
- PostHog — PostHog, Inc.. Product analytics and masked session recording, if configured. ph_* (cookie / browser storage). Loads: Only if you accept Analytics. Retention: Up to 1 year. Provider privacy policy
Marketing and conversion pixels (optional)
- Meta Pixel — Meta Platforms Ireland Ltd (Facebook). Measures visits and sign-ups from Meta (Facebook/Instagram) advertising. No portfolio or financial data is sent. _fbp, fr. Loads: Only if you accept Marketing. Retention: Up to 90 days (_fbp). Provider privacy policy
- LinkedIn Insight Tag — LinkedIn Ireland Unlimited Company. Measures visits and conversions from LinkedIn advertising. li_*, bcookie, lidc. Loads: Only if you accept Marketing. Retention: Up to 6 months. Provider privacy policy
- X (Twitter) Pixel — X Corp.. Measures visits and conversions from X advertising. muc_ads, personalization_id. Loads: Only if you accept Marketing. Retention: Up to 2 years. Provider privacy policy
Telemetry (optional)
- Sentry — Functional Software, Inc. (Sentry). Error reports and performance traces so we can fix problems. Error and performance reports (no cookies). Loads: Only if you accept Telemetry. Retention: Up to 90 days. Provider privacy policy
Local Storage
We also use browser localStorage for app preferences such as theme selection, onboarding state, and dismissed notifications. These are not transmitted to our servers and remain on your device.
Managing Your Preferences
You can change your cookie preferences at any time using Cookie Settings or by clearing the klirinvest_cookie_consent entry from your browser's localStorage.
If your browser sends a Global Privacy Control signal, KlirInvest treats it as an opt-out from optional analytics, telemetry, and advertising pixels.
For signed-in users, KlirInvest stores an append-only server-side record of the consent level, category choices, policy version, source, and timestamp so consent can be demonstrated and withdrawal can be evidenced.
Advertising and Pixel Technologies
We do not load optional analytics, advertising pixels, or conversion tags unless you choose the relevant optional category in the consent banner. If you accept Analytics, KlirInvest may load its own first-party analytics, Google Analytics and PostHog; if you accept Marketing, the Meta (Facebook) Pixel, LinkedIn Insight Tag and X Pixel; if you accept Telemetry, Sentry. These tools may set cookies or similar identifiers according to their own privacy policies. Our hosting provider (Lovable) adds its own page-view analytics script, which is not controlled by the consent banner.
We do not use fingerprinting scripts designed to identify you across unrelated websites.
Managing Cookies
Most browsers allow you to block or delete cookies via settings. Note that blocking essential cookies will prevent you from using KlirInvest. You can also clear all site data at any time in your browser's privacy settings.
Contact
For questions about our cookie practices, see our Privacy Policy or contact us at hello@klirinvest.com.