Only what a secure session requires

01

Principle

Investor & Co uses the minimum browser storage required to operate a secure professional workspace. No advertising cookies, cross-site tracking pixels or data-broker tags are used, and browsing behaviour is not sold or shared for marketing purposes.

02

Strictly necessary storage

• Session and authentication tokens, which keep you signed in and protect your workspace between page loads.
• Security tokens used to prevent request forgery and to detect abnormal session activity.
• Interface preferences, such as the last workspace view or panel state, stored locally on your device.

03

Measurement

Aggregate and anonymised measurement may be used to understand which modules are used and where errors occur. Such measurement is limited to service quality and never identifies an individual project or counterparty to third parties.

04

Duration

Session storage is deleted when the session ends or when you sign out. Persistent preferences remain until you clear your browser storage. Authentication tokens expire automatically and are refreshed only while a session remains valid.

05

Managing storage

Browser settings allow cookies and local storage to be blocked or cleared at any time. Blocking strictly necessary storage prevents sign-in and makes the workspace unusable, since the session cannot be maintained. Signing out clears the session record on your device.

06

Third parties

Infrastructure and database providers acting on our instruction may set technical storage strictly to deliver the service, for example to route requests or maintain a secure session. They are bound by contract and are not permitted to use that storage for their own purposes.