Cookie policy

Strictly necessary

Session. When you log in, our authentication provider sets an httpOnly cookie that holds your session token. It expires with the session and is shared between turtleterminal.com and the terminal at its subdomain so you log in once.

Your choices. Your cookie choice is kept in your browser's local storage (tt_consent_v1) so we don't ask again. Appearance settings are kept the same way.

Analytics (with your consent where required)

Google Analytics 4 sets _ga and _ga_* cookies (up to 2 years) to count visits, pages, time on page and where visitors came from.

PostHog keeps an identifier in a ph_* cookie and local storage (1 year) to show how pages are used: clicks, scrolling, and recordings of sessions with everything you type masked. Without analytics consent PostHog counts page views without storing anything on your device.

Advertising (with your consent where required)

• Google Ads (_gcl_*, 90 days): whether a Google ad led to a visit or an account.
• Meta (_fbp, 90 days): the same for Facebook and Instagram ads.
• Reddit (_rdt_uuid, 90 days): the same for Reddit ads.
• X (personalization_id and muc_ads, up to 2 years): the same for X ads.

These platforms may combine this with what they already know about you under their own policies.

Your choices

Where the law asks for consent first (the EU, the EEA, the UK and Switzerland), analytics and advertising cookies are set only after you accept them. Elsewhere they are set by default, and you can refuse them. Either way, Cookie settings at the foot of every page changes your choice at any time, including opting out of the sharing of data with advertising platforms. You can also clear or block cookies in your browser; blocking the session cookie prevents logging in.

Third parties

Stripe sets its own cookies on its checkout and billing pages, governed by Stripe's cookie policy. Your exchange's pages and SnapTrade's connection page are governed by their own policies.