Cookies
Every cookie this site uses, what it is for, and how long it lasts.
Last updated August 4, 2026
The short version
Browsing this site sets no cookies at all — not the home page, not the markets pages, not the legal pages. Nothing is stored until you sign in or use a form.
There are no analytics cookies, no advertising cookies, and nothing that follows you to other websites. We do not sell or share browsing data, because we do not collect any.
Why there is no “manage preferences” panel
Because there would be nothing in it. Every cookie below is strictly necessary — it exists to keep you signed in, to complete a two-factor check, or to keep bots off a form. Switching any of them off would simply mean the service could not work.
A banner offering “essential / analytics / marketing” toggles where two of the three do nothing is worse than no banner: it invents a choice, and it teaches people to dismiss the one notice that might one day matter. If we ever add anything optional, you will get a real choice, switched off until you make it.
Every cookie, in full
| Cookie | Set by | What it does | When | How long |
|---|---|---|---|---|
| wallet_session | NorthVault | Keeps you signed in. Only a hash of it is stored on our side, so the session table is useless to anyone who obtains it. | Only after you sign in | 7 days, or until you sign out or revoke the session |
| wallet_totp | NorthVault | Holds a short-lived two-factor challenge between entering your password and entering your code. | Only during two-factor sign-in | A few minutes; deleted the moment the code is accepted |
| nv_lang | NorthVault | Remembers the language you chose, or the one we guessed for you on a first visit. It holds two letters and nothing else — no identifier, nothing that says who you are. | When you pick a language, or on a first visit we could place | A year, or until you choose a different language |
| cf_* (Cloudflare Turnstile) | Cloudflare | Part of the anti-spam check that decides whether you are a person. It does not identify you or follow you between sites. | Sign-up, sign-in and contact pages only | Set and expired by Cloudflare, typically within 30 minutes |
Other things stored in your browser
Not cookies, but worth listing since they are also stored on your device:
- Your theme preference, if you are signed in, is saved to your account rather than your browser.
- The dismissal of the cookie notice is kept in local storage — deliberately not a cookie, so acknowledging a notice about cookies does not itself set one.
Turning them off
Every browser lets you block or delete cookies. Blocking wallet_session means you cannot stay signed in, and blocking Cloudflare's means you cannot sign up, sign in or use the contact form — the check will not complete. Nothing else on the site is affected.
Your rights
What we collect, how long we keep it, and how to access, correct or delete it is set out in the privacy policy. If anything here does not match what you observe in your browser, please tell us — that would be a bug, and we would want to fix it.