Cookies

What we set

One cookie. It is named bank_session, contains a random identifier with no personal data in it, and exists so that the site knows you are signed in as you move between pages.

It is httpOnly, so scripts running in the page cannot read it, and marked Secure in production so it is only ever sent over HTTPS. It expires after seven days, or immediately when you sign out.

Why there is no cookie banner

A consent banner is required for cookies that are not strictly necessary — analytics, advertising, tracking across sites. This site sets none of those. A session cookie that exists solely to keep you signed in is exempt, and adding a banner for it would train people to dismiss banners without reading them.

Turning it off

You can block or delete it in your browser settings. The consequence is that you will not be able to sign in, because there would be no way for the site to recognise you between one page and the next.