Cookies are small files a website stores in your browser. We keep them to a minimum. Cookies that are needed for the site to work and keep you secure are always on. Analytics cookies are only set if you choose Accept on our cookie banner.
1. Cookies we use
| Cookie | Purpose | Type | Lasts |
|---|---|---|---|
| plusone-data-session | Keeps you signed in and remembers your session. | Necessary | Until you sign out or the session ends |
| XSRF-TOKEN | Protects forms against cross-site request forgery. | Necessary (security) | Session |
| device_token | Recognises your browser for sign-in security alerts. | Necessary (security) | 30 days |
| po_login_trust | Remembers that this browser signed in successfully, so sign-in protection can tell it apart from unknown devices. | Necessary (security) | 180 days |
| saved_login_identifier | Remembers your email, phone or username (never your password) for "Continue as". | Preference | 30 days |
| po_cookie_consent | Remembers your cookie choice. | Necessary | 180 days |
| _ga, _ga_* | Google Analytics: counts visits and how pages are used, so we can improve the site. | Analytics (only after you accept) | Up to 2 years |
If you allow browser notifications, our notification provider (OneSignal) stores a subscription in your browser so we can send you transaction and account alerts. You can turn notifications off in your browser settings at any time.
2. Your choices
- Change your choice at any time: Cookie settings.
- You can also delete or block cookies in your browser settings. Blocking necessary cookies will stop sign-in from working.
3. The mobile app
The app does not use advertising or analytics trackers. It stores your session securely on your phone (encrypted by Android) and uses Firebase Cloud Messaging only to deliver notifications.
4. More information
See our Privacy Policy for how we handle personal data.