Cookie Policy

Summary

Vest uses only strictly necessary cookies and browser storage — the items required to sign you in, keep your session secure, and remember your in-app preferences. We do not use advertising, analytics, or cross-site tracking cookies. Because every item below is strictly necessary, no cookie consent banner is required under the ePrivacy Regulations (S.I. No. 336 of 2011) and the guidance of the Irish Data Protection Commission. If this ever changes — for example if we introduce analytics — we will ask for your consent first.

1. Strictly necessary cookies

These first-party cookies are set by the Vest app (at in.vest.ie) and are essential for authentication and security. They are HttpOnly, Secure, and SameSite-restricted.

• refresh_token — keeps you signed in by securely renewing your session. Expires after 7 days.
• totp_ticket — a short-lived token used during two-factor sign-in. Expires after 5 minutes.
• oauth_pkce — secures the Google sign-in exchange against interception. Expires after 10 minutes.

2. Local storage (preferences)

The app stores a few non-tracking preference values in your browser’s local storage so the interface behaves the way you expect. These never leave your device and are not used to identify you:

• Preferred currency — remembers the currency you chose to view values in.
• Dismissed prompts — remembers in-app notices you have dismissed.
• Chart visibility — remembers whether you collapsed certain charts.

3. Third-party services

• Cloudflare Turnstile — on the sign-in page only, Cloudflare’s Turnstile challenge protects the magic-link form from spam and automated abuse. Any cookies or storage it uses are strictly for that security validation, not for tracking.
• Stripe — if you start a paid subscription, you are taken to Stripe’s secure checkout. Stripe may set cookies (for example __stripe_mid and __stripe_sid) for payment security and fraud prevention. These are governed by Stripe’s privacy policy.

4. Managing cookies

Because all of the above are strictly necessary, blocking them in your browser will prevent you from signing in or completing payment. You can clear cookies and local storage at any time through your browser settings; doing so will sign you out and reset your preferences.

5. Contact

Questions about this policy? Email us at hello@vest.ie. See also our Privacy Policy.