Cookies
This application sets three cookies at most, and every one of them is functional — they keep you signed in and protect the forms you submit. There is no analytics, no advertising and no third-party script, so there is nothing to opt out of.
Last updated 13 September 2026
Every cookie that can be set
| Name | Purpose | Lasts | Type |
|---|---|---|---|
lkv_wealth_session |
Keeps you signed in as you move between pages. It holds a random identifier only — no personal data is stored in the cookie itself. | 120 minutes of inactivity, or until you sign out | Essential |
XSRF-TOKEN |
Protects against cross-site request forgery: it lets the server verify that a form submission came from a page it served, not from another site. | Same as the session cookie | Essential |
remember_web_* |
Set only if you tick "Keep me signed in". Lets you return without signing in again. | Up to 5 years, or until you sign out | Optional |
Why there is no consent banner
Consent banners exist because most sites set cookies that are not needed to deliver the thing you asked for — chiefly analytics and advertising. This application sets none of those. Under both the GDPR and the UK PECR, strictly necessary cookies do not require consent, and asking for permission we do not need would be theatre rather than privacy.
The one genuinely optional cookie is the “Keep me signed in” cookie, and it is only ever set if you tick that box yourself. That tick is the consent.
Your controls
- Do not use “Keep me signed in”. Leave the box unticked and no optional cookie is ever created.
- Sign out. This clears the session cookie and invalidates the remember-me cookie immediately.
- Block or clear them in your browser. Nothing here objects. Be aware that blocking the session and CSRF cookies makes signing in impossible — not as a punishment, but because those cookies are the mechanism that keeps you signed in.
Other local storage
The application does not use localStorage, sessionStorage or IndexedDB.
Your theme and reporting-currency preferences are stored against your account in the database,
not in your browser, which is why they follow you between devices.
Third parties
None. No content delivery network, no web font host, no embedded media, no error-reporting service. Every asset on every page is served by this installation, so no other party is in a position to set a cookie or record that you were here.