Cookie Policy — Investment Bastion

1. What are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the site work correctly, keep you logged in, remember your preferences, and improve performance and security.

Cookies may be:

• Session cookies – deleted when you close your browser
• Persistent cookies – stored until they expire or are deleted
• First-party cookies – set by Investment Bastion
• Third-party cookies – set by trusted external providers

2. Why We Use Cookies

We use cookies for the following purposes:

2.1. Strictly Necessary Cookies (no consent required)

These cookies are essential for the Service to function.

They include:

• Authentication cookies (Supabase Auth, session tokens)
• Security cookies (protecting accounts, preventing fraud)
• Load balancing and routing cookies
• User preference cookies (theme, language)

Without these, Investment Bastion cannot operate.

2.2. Analytics Cookies (consent required)

(You can enable them later when you add analytics.)

Used to understand how users interact with the platform.

Examples: Plausible, Google Analytics, PostHog, Vercel Analytics.

2.3. Functional Cookies (optional)

Used to remember UI preferences, save table configurations, store filters, etc.

2.4. Marketing Cookies (optional)

Used for advertising or retargeting.

(Currently not used by Investment Bastion.)

3. What Cookies We Use Today

As of now, Investment Bastion uses only strictly necessary cookies, including:

3.1. Supabase Auth cookies

• Maintains logged-in sessions
• Securely identifies user
• Required to access your dashboard

3.2. Next.js session cookies

Required for routing and server-side logic

3.3. Security cookies

• Protect against CSRF
• Detect unusual activity

These do not require consent under UK PECR/GDPR.

4. Third-Party Cookies

We may use the following third-party services:

4.1. Stripe

Used for billing and subscription management.

Cookies may be set for security, fraud prevention, and payment flow.

4.2. Supabase

Used for authentication and secure session management.

Cookies are required to maintain your login state.

4.3. Future analytics providers

(If you enable later)

• Plausible
• Google Analytics
• PostHog
• Vercel Analytics

These will require explicit user consent.

5. Managing Cookie Preferences

5.1. Strictly necessary cookies

Cannot be disabled, as they are essential for the Service.

5.2. Optional cookies (analytics, marketing)

When introduced, users will be able to:

• Accept all cookies
• Reject all optional cookies
• Manage cookie preferences in the Cookie Settings panel

5.3. Browser settings

Users can block or delete cookies via their browser at any time.

6. Changes to this Cookie Policy

We may update this Cookie Policy from time to time.

The "Last updated" date shows when it was updated.

7. Contact us

If you have questions about cookies or privacy, contact us:

INBASTION LTD

trading as Investment Bastion

Email: [email protected]