Cookie Notice — Wealthcast

What are cookies?

We use first-party cookies and limited similar technologies to operate our website and app, remember your choices, support secure sign-in, and understand performance and, if we make it available and you enable it, optional product usage. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as “essential” or “strictly necessary” cookies.

Wealthcast does not currently use advertising or marketing cookies, cross-site tracking, or third-party advertising cookies.

Details of the specific cookies and similar technologies we use are described in more detail below.

Certain cookies expire after different periods and triggers. Generally, cookies are either:

Session cookies: These are temporary cookies that expire when you close your browser. They help maintain your session during your visit.
Persistent cookies: These cookies remain on your device for a specified period. They remember your preferences across visits.

When you first visit our website, a consent banner will appear offering you the choice to “Accept all”, “Reject optional”, or “Choose settings”. Selecting “Choose settings” opens a panel inside the banner where you can set each optional category. The banner also links to this Cookie Notice, where you can learn more about the specific cookies we use, their purposes, and their durations.

Why do we use cookies?

We use first-party cookies and limited similar technologies for several reasons. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as “essential” or “strictly necessary” cookies.

Some of these cookies also remember settings you ask us to keep, such as your theme, and similar technologies help us understand how our website performs.

Wealthcast does not currently use advertising or marketing cookies, cross-site tracking, or third-party advertising cookies. This is described in more detail below.

Your choice

Before using any cookies (except strictly necessary ones), we obtain your consent. When you first visit our website, a consent banner will appear giving you the option to “Accept all” cookies, “Reject optional” (non-essential) cookies, or “Choose settings” to customise your preferences by category. You can also manage your cookie preferences at any time by clicking “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application.

The consent banner allows you to select which categories of cookies you accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide you with services.

You can revisit your consent choices at any time by clicking “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application. A link to this Cookie Notice is also available within our Privacy Notice. If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.

The consent categories we offer are as follows:

Strictly necessary cookies: These cookies are always on and cannot be rejected. They are essential for the website to function and do not require your consent under applicable law.

Preferences cookies: No preferences cookies are in use. A Preferences switch appears in the banner’s settings panel, but no cookies depend on it at this time. If we start to use this category in a future update, the switch will control those cookies and we will update this Cookie Notice.

Product analytics: If we make optional product analytics available and you enable it, this category governs optional granular first-party product analytics. It does not use cookies; it uses the session storage items described below. The Product analytics switch in the banner’s settings panel is off unless you switch it on.

Performance analytics: This category controls Cloudflare Web Analytics real user measurement (RUM) and does not use cookies. The Performance analytics switch is pre-selected when you first see the banner, but the Cloudflare script does not load until you save a banner choice that leaves Performance analytics on. Cloudflare Web Analytics does not use client-side state or track individual visitors. This processing relies on the statistical-purposes exception under the Privacy and Electronic Communications Regulations (PECR). You may opt out of performance analytics at any time, free of charge, by selecting “Reject optional”, or by switching Performance analytics off and saving your choice, using “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application. Your opt-out is recorded on your device and stops the script on later pages; if the script has already loaded, the change takes effect after you reload the page.

Marketing cookies: Wealthcast does not currently use marketing or advertising cookies. Accordingly, no marketing cookie controls are offered at this stage. If this changes in the future, this Cookie Notice will be updated and appropriate consent controls will be made available.

The specific types of first-party cookies served through our website and the purposes they perform are described below. You can review or change your cookie choices at any time by clicking “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application:

Cookie	Provider	Duration	Type	Description
`wc_session`	Wealthcast (first-party)	Up to 14 days; ends after 7 days without activity	Strictly necessary	Keeps the user signed in and protects the session against tampering.
`wc_consent`	Wealthcast (first-party)	6 months	Strictly necessary	Records the visitor’s cookie consent choices so the consent banner is not shown on every visit.
`wc_rum_optout`	Wealthcast (first-party)	6 months	Strictly necessary	Records that Performance analytics is switched off.
`wc_demo`	Wealthcast (first-party)	Up to 30 minutes	Strictly necessary	Keeps a visitor inside the selected read-only demo persona without creating an account or writing plan data.
`theme`	Wealthcast (first-party)	1 year	Strictly necessary	Remembers the light, dark or system theme selected by the user. A copy is also kept in browser storage.
`wc_oauth_state`	Wealthcast (first-party)	10 minutes	Strictly necessary	Short-lived value used to complete Google or Apple sign-in safely. The matching nonce is held on our server.
`wc_oauth_redirect`	Wealthcast (first-party)	10 minutes	Strictly necessary	Returns the user to the page they asked for after Google or Apple sign-in.
`wc_webauthn_ceremony`	Wealthcast (first-party)	Up to 5 minutes	Strictly necessary	Binds a passkey challenge to the browser that requested it.
`wc_mode`	Wealthcast (first-party)	30 days	Strictly necessary	Records whether the user keeps their plan in the cloud or on this device, so the right storage mode loads.
`wc_storage_mode_hint`	Wealthcast (first-party)	5 minutes	Strictly necessary	Keeps a newly saved storage choice in effect while the change is saved.
`wc_d1_bookmark_app_v4, wc_d1_bookmark_island_v4, wc_d1_bookmark_api_v4`	Wealthcast (first-party)	24 hours	Strictly necessary	Makes sure the pages that follow a save show the latest saved data.
`wc_upgrade_intent`	Wealthcast (first-party)	7 days	Strictly necessary	Resumes an upgrade the user started before signing in.
`wc_terms_accepted_hint`	Wealthcast (first-party)	5 minutes	Strictly necessary	Stops a user from being asked to accept the Terms of Service again while a new acceptance is saved.
`wc_account_delete_nonce, wc_onboarding_reset_nonce`	Wealthcast (first-party)	10 minutes	Strictly necessary	Confirms that a request to delete an account, or to reset a plan and start again, is genuine.
`wc_native_return`	Wealthcast (first-party)	Up to 14 days	Strictly necessary	Mobile app only. Links a sign-in in the mobile app to the app’s secure session storage.
`wc_native`	Wealthcast (first-party)	1 year	Strictly necessary	Mobile app only. Shows the app layout when our website runs inside the Wealthcast mobile app.
`wc_native_bundle`	Wealthcast (first-party)	24 hours	Strictly necessary	Mobile app only. Returns a demo visitor to the installed app.

Different types of cookies

Necessary cookies

These cookies are strictly necessary to provide you with services available through our website and to use some of its features, such as access to secure areas. These cookies are essential for the website to function properly. They enable basic features such as page navigation.

Product analytics (optional)

Wealthcast does not use analytics cookies. If we make optional granular first-party product analytics available and you opt in via “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application, Wealthcast uses four first-party session storage items (which are not cookies) to support that feature: (i) wc:analytics-session:v1 - a random tab-session ID used to group page views and named interactions within that tab; (ii) wc:analytics-onboarding:v1 - a random onboarding journey ID used to measure onboarding progression and completion; (iii) wc:analytics-sequence-owner:v1 - binds the event-ordering counter to the current analytics session; and (iv) wc:analytics-sequence:v1 - an integer counter preserving event order within the current session. All four items last only for the duration of the tab session and are automatically cleared if analytics consent is withdrawn, missing, expired or out of date. A fresh page-view ID is generated in memory for each page view and is not stored on your device.

Performance analytics (Cloudflare)

We use Cloudflare Web Analytics Real User Monitoring (RUM) to measure the performance of our website and web application. Cloudflare RUM works by reading temporary performance information held in your browser’s memory. It does not use cookies, localStorage, sessionStorage or IndexedDB. It does not use a persistent visitor identifier, fingerprinting or cross-site tracking.

Because Cloudflare RUM accesses information stored on your device solely for statistical purposes, we rely on the statistical-purposes exception under the Privacy and Electronic Communications Regulations (PECR) for this browser access.

We offer a simple, free Performance analytics opt-out. Once you object, the RUM beacon will not run on subsequent page loads. If the beacon has already loaded on the page you are viewing, the change takes effect after you reload the page. You can opt out at any time by clicking “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application.

How can I control cookies?

You can manage your cookie preferences at any time by clicking “Cookie settings” in the footer of our public pages, or “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application. From there you can change your mind on cookies or obtain further detail about the cookies we use.

Links to other websites

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

How often will you update this Cookie Notice?

We may update this Cookie Notice from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore revisit this Cookie Notice regularly to stay informed about our use of cookies and related technologies.

Where can I get further information?

If you have any questions about our use of cookies or other technologies, please contact us at: hello@wealthcast.app. For further information about how we process your personal data more generally, please see our Privacy Notice at https://wealthcast.app/privacy. This Cookie Notice is also available at https://wealthcast.app/cookies.