Cookie and Tracking Technologies Notice
1. What these technologies are
Cookies are small text files placed on your device by a website. We also use similar technologies: local storage and session storage, software development kits in our mobile and desktop applications, pixels and tags, and server-side logging. This Notice refers to all of them as "cookies".
2. Our approach
2.1 We use strictly necessary cookies and local storage to run the Service. These rules apply to every Bankable Group website (bankablegroup.ca, bankable.properties and the bankable[app].ca app sites), the Bankable portal and Bankable ID. On a public website that shows our cookie banner (today, bankable.properties) we also offer optional measurement and advertising cookies, which are set only if you click "Accept" on our cookie banner.
2.2 "Accept" and "Reject" are equally easy, and nothing optional is set until you choose. You can change your choice at any time with the Change my cookie choice link on this page.
2.3 Optional cookies are not used in the Bankable web apps (including app.bankable.properties), the Bankable portal, Bankable ID (id.bankablegroup.ca) or our mobile and desktop applications. Bankable ID sets one strictly necessary sign-in cookie on id.bankablegroup.ca so one sign-in works across Bankable websites; it expires after 30 days or when you sign out, and we do not use session-recording tools.
2.4 We do not use cookie walls.
2.5 Two cookieless services load on every page of our website and web app, before any choice, because they store nothing on your device: Cloudflare Web Analytics (aggregate page statistics) and Fontshare (our web font). Both are listed in section 3. Neither is used for advertising.
3. What we use
| Cookie / technology | Purpose | Set by | Duration |
|---|---|---|---|
Local storage bankable_app_v1 (and _account, _ent, _cards) |
Keeps your deals, settings, membership status and sign-in session on your device so your work is not lost | Bankable (first party) | Until you sign out or clear site data; the sign-in session expires after 30 days |
Local storage bankable.portal |
Remembers that you are signed in to the subscriber portal | Bankable (first party) | Until you sign out |
| Offline app cache (service worker) | Lets the web app open without a connection | Bankable (first party) | Until the app updates or you clear site data |
bk_oa |
Protects single sign-on with Apple, Google or Microsoft against forgery; set only while you sign in that way | Bankable (first party) | 10 minutes |
CF_Authorization |
Sign-in to staff and private-preview areas protected by Cloudflare Access | Cloudflare, for Bankable | For the length of that sign-in session |
__cf_bm |
Distinguishes people from bots to protect the Service | Cloudflare | 30 minutes |
| Cloudflare Web Analytics (no cookie) | Counts page views and measures page speed on our website and web app, in aggregate. It sets no cookie, stores nothing on your device and does not follow you across sites. To load it, your browser sends Cloudflare the page address, the referring page, browser and device type, and your IP address | Cloudflare, for Bankable | Nothing stored on your device |
| Fontshare web fonts (no cookie) | Loads the Satoshi typeface used on our website and web app. Your browser requests the font files from Fontshare (Indian Type Foundry), which receives your IP address and browser details with that request | Fontshare (Indian Type Foundry) | Nothing stored on your device, other than your browser's normal cache |
| Stripe checkout and billing pages | When you pay or manage billing you are on Stripe's pages (checkout.stripe.com, billing.stripe.com), and the web app loads Stripe.js (js.stripe.com) to start checkout; Stripe sets its own strictly necessary cookies there for payment and fraud prevention, under Stripe's cookie policy | Stripe | Set by Stripe |
Local storage bk_consent |
Remembers your cookie choice | Bankable (first party) | 12 months |
Google Analytics 4 (_ga, _ga_*) — optional |
Measures visits to our public website and which campaigns brought you; set only after you accept | Up to 13 months | |
Google Ads (_gcl_*) — optional |
Measures whether a Google ad led to a sign-up (a trial start or a plan purchase); set only after you accept | Up to 90 days | |
Meta Pixel (_fbp, _fbc) — optional |
Measures Instagram and Facebook ads and lets us show our ads to people who visited; set only after you accept | Meta | Up to 90 days |
LinkedIn Insight Tag (li_*, lidc, bcookie) — optional |
Measures LinkedIn ads and lets us reach visitors on LinkedIn; set only after you accept | Up to 6 months |
4. Do Not Track and Global Privacy Control
We treat a Global Privacy Control signal as a refusal of consent: if your browser sends it, no optional cookie is set and no banner is shown.
5. Managing cookies in your browser
You can block or delete cookies and site data in your browser settings — see the help pages for Chrome, Safari, Firefox and Edge. Blocking strictly necessary cookies or clearing local storage will sign you out, and deals that are not synced to your account will be removed from that device.
6. Applications
Our mobile and desktop applications do not use browser cookies. They store your work and sign-in on the device, and they contain no advertising identifiers or third-party analytics software.
7. Emails
Transactional emails — sign-in codes, receipts and account notices — contain no tracking pixel. Marketing emails, which we send only with your consent through HubSpot, may contain a pixel and tracked links that tell us whether a message was opened and which links were clicked. You can prevent this by disabling image loading in your email client, and you can unsubscribe from any marketing email.
8. Changes and contact
We will update this Notice when our use changes, and will ask for consent first where a change requires it. Questions: privacy@bankable.properties.