Last updated: 30 September 2026
In short
- Essential cookies keep you logged in and keep the Site secure. They are always on.
- Analytics and advertising cookies are optional. In the EEA and UK nothing optional is set until you accept; elsewhere they run until you switch them off.
- Change your mind any time: Cookie settings.
1. What cookies are
A cookie is a small text file a website stores in your browser. Some cookies come from us (first-party); some are set by services we use, such as Google or Meta (third-party). We also use browser storage (session storage and local storage), which works like a cookie but is not sent with every request. This policy explains which of these Slowio uses and why. It is part of our Privacy Policy.
2. How consent works on Slowio
When you first visit, a small banner asks about optional cookies. Which banner you see depends on where you are, which we read from the country code our content-delivery network attaches to your request:
- EEA and United Kingdom: optional cookies are off until you click "Accept all" or choose categories. Closing the banner with "Reject" keeps them off.
- Everywhere else (including Switzerland): optional cookies are on by default, as Swiss law allows, and the banner tells you how to switch them off. If your browser sends the Global Privacy Control signal, we treat that as a refusal and keep them off.
Your choice is stored in the slowio_consent cookie for 12 months and recorded on our server (an anonymous id, your choice, the region and the time) so that we can prove consent was given. If we change this policy in a way that needs new consent, the banner will ask again. To change your choice, open Cookie settings (also on your account page and in the footer of every legal page). Withdrawing consent stops new data collection at once; cookies already set by a third party can be removed in your browser settings.
We use Google Consent Mode: Google's tags are told your choice and behave accordingly. No analytics or advertising script is loaded at all until the relevant category is allowed.
In the Slowio apps for iPhone, iPad, Mac, Android and Windows only the essential cookies below are used: the apps never load the analytics or advertising tools and therefore show no cookie banner.
3. Essential cookies and storage (always on)
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| session | Slowio | Keeps you logged in and holds the security token that protects forms against forgery. Also read by the iOS home-screen widget to show your own portfolio summary. For a visitor without an account it holds the free-page counter of the tool pages (which pages were opened this month). | 90 days |
| slowio_consent | Slowio | Remembers your cookie choice so the banner does not reappear. | 12 months |
| __cf_bm | Cloudflare | Distinguishes real browsers from bots as part of our protection against attacks. | 30 minutes |
| cf_clearance | Cloudflare | Remembers that you passed a security challenge, if one was shown. | Up to 1 year |
| session / local storage | Slowio | Working data of the app in your browser: the page state, chart settings, selected tickers and similar. Never used for tracking. | Session, or until you clear it |
4. Analytics cookies (optional)
Google Analytics 4 tells us how many people visit, which pages they read and roughly where they come from, in aggregate. Loaded through Google Tag Manager.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors with a random id. | 13 months |
| _ga_* | Google Analytics | Keeps the state of the current visit for one Google Analytics property. | 13 months |
5. Advertising cookies (optional)
We buy a small amount of advertising on Google, Meta (Instagram/Facebook) and AppLovin. These cookies tell those networks whether someone who clicked an ad later created an account, so we know which ads work. They are set only if you allow the "Marketing" category.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| _gcl_au, _gcl_aw, _gcl_ls | Google Ads | Links a sign-up back to the Google ad click that led to it. | 3 months |
| IDE, test_cookie | Google (doubleclick.net) | Google's advertising identifier and a check whether the browser accepts cookies. | 13 months / 15 minutes |
| _fbp | Meta | Meta pixel identifier used to measure our Instagram and Facebook ads. | 3 months |
| lastExternalReferrer, lastExternalReferrerTime | Meta (local storage) | Remembers the last external page that led you here, for ad measurement. | Until cleared |
| ax_visitor, _axwrt, _axwrt_ts, axcrt | AppLovin (Axon) | Visitor identifiers used to measure our AppLovin ad campaigns. | 12 months |
| _axsid | AppLovin (Axon) | Session identifier for the same purpose. | Session |
| _applovin_pixel_version | AppLovin (local storage) | Version of the measurement script. | Until cleared |
Third parties may change the cookies they set; the lists above reflect what we observed when this policy was last updated. Their own policies: Google, Meta, AppLovin, Cloudflare.
6. Other ways to control cookies
Every browser lets you view, block and delete cookies (see the help pages of Chrome, Safari, Firefox, Edge). If you block the essential cookies, you will not be able to log in. Google offers an opt-out browser add-on at tools.google.com/dlpage/gaoptout, and you can manage advertising preferences at adssettings.google.com and in your Meta account settings.
7. Changes and contact
We update this policy when the cookies we use change; the date at the top shows the latest version. Questions: [email protected].