Cookie Policy

1. Strictly necessary storage

These are required for the Service to work and are used without consent, as permitted by law. Disabling them will break sign-in.

• Authentication session — holds your signed-in session and tokens. Session-scoped; cleared when you sign out or close the browser.
• Security — protects against cross-site request forgery and session fixation.
• Consent record — remembers your cookie choice so we stop asking. Persistent, up to 12 months.

2. Functional storage

These remember your preferences so the app behaves consistently. They hold no identifiers used for tracking.

• Language preference and selected locale.
• Light/dark theme choice.
• Interface state such as selected period filters and table layout.

3. Analytics and diagnostics

We collect operational error diagnostics to keep the Service reliable. Where such tooling is enabled and is not strictly necessary, it is used only with your consent, and it is configured to minimise personal data. We do not use cross-site advertising or behavioural-profiling trackers.

4. Managing your choices

You can accept or limit non-essential storage in the consent banner shown on your first visit, and change your choice at any time. You can also clear or block storage in your browser settings — note that blocking strictly necessary storage will prevent you from signing in.

5. Third-party storage

Our identity provider sets storage required for authentication. Our payment processor may set storage on its own checkout pages to prevent fraud. These are described on the Sub-processors page.

Contact

Questions about these documents or your data? Contact privacy@bankstmt.com. For security matters, contact security@bankstmt.com.