{
  "title": "Cookie Policy",
  "version": "uhnwi-data-cookies-2026-10-20",
  "effectiveDate": "2026-10-20",
  "modifiedDate": "2026-10-20",
  "language": "en",
  "scopeNotice": "This inventory covers storage on UHNWI Data. Optional analytics is separate from necessary sign-in, security and requested service drafts.",
  "sections": [
    {
      "heading": "1. Scope and Storage Types",
      "id": "section-1",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "This Cookie Policy covers UHNWI Data websites and products. UHNWI Data, 55 Broadway, New York, NY 10006, United States, is responsible for the Data storage described here. Contact privacy@uhnwidata.com. Read this with the Privacy Policy."
        },
        {
          "type": "paragraph",
          "text": "Cookies accompany relevant requests to this origin. Local storage persists until changed or removed; session storage normally lasts for a tab session, although browser restoration may preserve it. These are different from server-side projects, payment records, research, imported contacts and encrypted connector credentials. Clearing browser storage does not cancel an order, delete a Network or erase those server records."
        },
        {
          "type": "paragraph",
          "text": "Shared UHNWI identity, profile and contact-matching services may be hosted on UHNWI Direct. A connection, embedded tool or external provider can have its own origin and storage controls. Data’s cookie names below must not be confused with cookies on that other origin."
        }
      ]
    },
    {
      "heading": "2. Necessary Sign-In and Security Cookies",
      "id": "section-2",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "__Host-uhnwidata_account — first-party, Secure, HTTP-only customer session cookie, SameSite=Lax, Path=/. Normally lasts 8 hours; email sign-in with Remember me lasts up to 30 days. It authorises this Data account and is checked against the current shared identity. Signing out clears the relevant cookie and server session."
        },
        {
          "type": "paragraph",
          "text": "__Host-uhnwidata_admin — first-party, Secure, HTTP-only administrative session cookie, SameSite=Strict, Path=/. Pending verification lasts up to 10 minutes; a verified session lasts up to 8 hours. It is not a customer analytics identifier."
        },
        {
          "type": "paragraph",
          "text": "__Host-uhnwidata_google — first-party, Secure, HTTP-only security cookie for a Google sign-in you initiate, SameSite=Lax, Path=/. Lasts up to 10 minutes and is cleared when the return flow completes. It binds the browser to that sign-in attempt; it does not grant address-book access."
        },
        {
          "type": "paragraph",
          "text": "These support requested authentication and security and are not switched off by optional Cookie Preferences. You may sign out or block cookies, but authenticated functions may then fail. Separate cookies on shared identity or contact-provider origins follow the relevant notice and provider controls."
        }
      ]
    },
    {
      "heading": "3. Necessary Preferences and Requested Drafts",
      "id": "section-3",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "uhnwidata:analytics-consent:v1 — first-party local storage recording the Data analytics choice and timestamp; the current record format is version 2. A choice is valid for 180 days. An expired or missing choice keeps analytics off until a new affirmative choice. This preference contains no contact records."
        },
        {
          "type": "paragraph",
          "text": "__Host-ud_consent — Secure, HTTP-only, SameSite=Lax first-party cookie recording yes or no for analytics, lasting up to 180 days. It lets the server honour the choice; the consent record itself is distinct from optional measurement identifiers."
        },
        {
          "type": "paragraph",
          "text": "Keys beginning uhnwidata: followed by the signed-in email, role and conversation reference — first-party session storage for an unsent Messenger or support draft, subject/body, retry reference and attachment references. Sending or clearing the draft removes its entry; browser tab storage may persist through restoration. Do not assume sign-out clears every browser-restored draft. Avoid shared devices for confidential content."
        },
        {
          "type": "paragraph",
          "text": "Keys beginning uhnwi:network-draft: — first-party session storage holding pending Network draft identifiers and options, optimistic revision and retry metadata to recover an interrupted save. The entry is removed after the server acknowledges that pending version or you explicitly discard the pending recovery. The saved draft itself lives on the server. Browser session restoration may preserve the temporary entry."
        }
      ]
    },
    {
      "heading": "4. Optional Analytics Storage and Purpose",
      "id": "section-4",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "Analytics is disabled until you choose Allow analytics or enable Website analytics in Cookie Preferences. First-party attribution can relate a public visit and acquisition source to registration, an enquiry or an eligible order. With a valid consent-linked context and enabled production integration, Google Analytics can also receive de-identified order, payment and refund events. These use random analytics/transaction references, payment type, amount and currency; internal account/order/licence numbers, names, email, research briefs, contact rows, form contents and URL query parameters are excluded from Google events. Our own source-attribution records can retain internal service references as described in the Privacy Policy."
        },
        {
          "type": "paragraph",
          "text": "__Host-ud_touch — Secure, HTTP-only, SameSite=Lax first-party acquisition-source identifier, up to 30 days. Supports attribution and can be replaced when a new qualifying acquisition source is recorded."
        },
        {
          "type": "paragraph",
          "text": "__Host-ud_session — Secure, HTTP-only, SameSite=Lax first-party analytics visit identifier, 30 minutes; active visits renew this short session."
        },
        {
          "type": "paragraph",
          "text": "__Host-ud_ga — Secure, HTTP-only, SameSite=Lax first-party consent-linked analytics context, up to 180 days. Supports random Google analytics identifiers and consent-linked server events; the underlying context expires separately on the server."
        },
        {
          "type": "paragraph",
          "text": "_ga and _ga_* — first-party cookies used by Google Analytics where the production integration is enabled and consent is valid. Configured lifetime is up to 180 days without automatic expiry extension on each visit. Google receives relevant public page paths/titles, referring website origin, acquisition source, random identifiers and standard browser/device information. Advertising features and Google signals are disabled."
        },
        {
          "type": "paragraph",
          "text": "Account, administrator, API, checkout and legal pages do not load the website analytics tag. An eligible payment/refund may still produce a server event associated with an earlier valid choice; this is separate from loading analytics in the private workspace. Security logs and accounting are independent of optional analytics. Global Privacy Control and Do Not Track keep optional analytics off."
        }
      ]
    },
    {
      "heading": "5. Shared Tools and External Providers",
      "id": "section-5",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "This inventory covers preferences on the Data origin. Separately hosted services have their own storage inventory and optional controls; their preferences are not automatically enabled by a Data purchase."
        },
        {
          "type": "paragraph",
          "text": "Contact import and matching can use a shared UHNWI tool on another origin. Where that tool offers Remember import column mappings, its optional preference stores column configuration rather than imported rows, under its own origin and controls. Optional settings on another origin are not enabled or cleared by Data’s analytics switch. Server-saved uploads and encrypted connector credentials are not cookies; disconnecting, deleting an upload and clearing browser storage are different actions."
        },
        {
          "type": "paragraph",
          "text": "Stripe checkout and billing, Google or Microsoft sign-in, and supported external contact/CRM providers can use their own cookies under their notices and choices. Data cannot clear a provider’s storage on its domain. Email preferences and any newsletter engagement reporting are separate from browser analytics consent."
        }
      ]
    },
    {
      "heading": "6. Change or Withdraw Your Choice",
      "id": "section-6",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "Open Cookie Preferences from the Data footer. Choose Website analytics and Save preferences, or Reject optional analytics. Refusal does not block core browsing, purchasing or account functions. Choices apply to the current browser and origin, not every device or the separate shared-tool origins."
        },
        {
          "type": "paragraph",
          "text": "Withdrawal clears the analytics cookies listed in Section 4 on this origin, records refusal and stops collection; the page may reload to unload Google’s tag. A server withdrawal also disables the active analytics context and pending linked events when received. Previously delivered events are not automatically deleted from Google, and independent payment or service records remain subject to the Privacy Policy. Contact our privacy team for applicable access or deletion requests."
        },
        {
          "type": "paragraph",
          "text": "You may delete cookies and site data in browser settings. This can sign you out and remove temporary drafts or choices. Optional analytics stays off without a valid affirmative choice. If a preference cannot be saved, the interface reports a storage problem and keeps analytics off. Necessary storage serves the requested functions described above; materially different optional technology requires an updated description and the applicable choice before activation."
        }
      ]
    },
    {
      "heading": "7. Updates and Contact",
      "id": "section-7",
      "scope": "general",
      "blocks": [
        {
          "type": "paragraph",
          "text": "The version and dates identify this Data inventory. We update it as actual storage and functions change and obtain a new choice where required. A Data choice is not consent for a separate service’s optional technology."
        },
        {
          "type": "paragraph",
          "text": "Privacy and storage questions: privacy@uhnwidata.com. UHNWI Data, 55 Broadway, New York, NY 10006, United States. See the Privacy Policy for processing, providers, retention and individual rights."
        }
      ]
    }
  ],
  "slug": "cookie-policy",
  "url": "https://uhnwidata.com/cookies.html",
  "description": "Cookies and browser storage used by UHNWI Data, their purposes, lifetimes and analytics choices.",
  "audienceType": "Website visitors and account users"
}