The short version
We use the smallest possible set of cookies. No advertising cookies. No third- party analytics on the marketing site. The web banking dashboard uses a small number of strictly-necessary cookies that we cannot operate without (session, CSRF, locale).
You can clear cookies in your browser at any time. Where the law gives you the choice, you will see a banner on first visit and can change your preference any time at the bottom of any page.
Categories we use
Strictly necessary. Cookies that hold your authenticated session, your CSRF token, and your locale. These do not require consent under PECR.
Functional. Cookies that remember your sidebar-collapsed state and other UI preferences. These improve UX but are not required.
Performance. A privacy-preserving error reporter (Sentry) and a privacy-preserving analytics tool (Plausible). Both anonymise IP addresses and do not use cross-site identifiers.
Advertising. None. We do not place advertising cookies and do not load third-party advertising scripts on any Holdwell-controlled domain.
Controlling cookies
You can opt out of functional and performance cookies via the consent banner or by emailing privacy@holdwell.app. Strictly-necessary cookies can be deleted in your browser, but doing so will sign you out.