Website cookies distinguish visitors and help improve the site
Last updated Dec 22, 2025, the notice says its website uses cookies to distinguish a visitor from other users, to provide a good browsing experience and to improve the site. The passage does not state a legal basis for cookies or say which cookies load before a visitor makes a choice.
Details not recorded for this card
Supporting quotations
Cookie Notice
Last Updated: Dec 22, 2025
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
Not stated here
The notice does not name the operator in this passage, state a legal basis for cookie use, or say which cookie categories load before a visitor chooses.
Data Access & Collection · Context
A cookie is a small file downloaded on a site visit
The notice defines a cookie as a small file of letters and numbers downloaded to a visitor's computer when visiting a website. It says cookies can remember preferences, record shopping-basket contents and count how many people view a site.
Details not recorded for this card
Supporting quotations
A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. Cookies are used by many websites and can do a number of things, e.g. remembering your preferences, recording what you have put in your shopping basket, and counting the number of people looking at a website.
Data Access & Collection · Company practice
Strictly necessary cookies are required and always enabled
The notice says strictly necessary cookies are required to operate the website and are always enabled because the site will not work properly without them. It gives logging into secure areas, using a shopping cart and using e-billing services as examples.
Details not recorded for this card
Supporting quotations
Strictly necessary cookies. These are cookies that are required for the operation of our website. These essential cookies are always enabled because our website won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Qualifications & exceptions
The 'always enabled' statement is specific to the strictly necessary category.
Not stated here
The notice does not say whether any cookie in this category can be refused individually.
Cross-references
narrowed by (model-proposed): Cookie preferences can be changed in the Privacy Preference Center — The notice says preferences can be changed at any time, but separately says strictly necessary cookies are always enabled; the general preference control therefore does not extend to that category.
Data Access & Collection · Company practice
Performance cookies count visitors and show how they move
Performance cookies let the site recognise and count visitors and see how visitors move around it. The notice says this helps improve how the site works, including helping users find content, tracking errors and improving performance insights.
Details not recorded for this card
Supporting quotations
Performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily, track errors and improve insights into how the website is performing.
Not stated here
The notice does not name the analytics providers here or say whether performance cookies are optional.
Cross-references
contrast (model-proposed): Segment analytics cookies sit under Functionality — The performance category is defined as recognising and counting visitors and seeing how they move around the site, while the functional table lists Segment analytics cookies described as counting visits and tracking traffic metrics; the notice does not explain the different placement.
contrast (model-proposed): Fraud and security cookies are listed as performance cookies — The performance category is defined around visitor counting and movement, while the performance table lists fraud-detection and security cookies; the notice does not explain how they fit the category.
Data Access & Collection · Company practice
Functionality cookies remember visitors and personalise content
Functionality cookies recognise a visitor who returns to the site. The notice says they personalise content, greet the visitor by name, remember preferences such as language or region, and deliver content and features tailored to the visitor.
Details not recorded for this card
Supporting quotations
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region) and deliver content and features tailored to you.
Not stated here
The notice does not say whether functionality cookies are optional or which preferences they store.
Sharing & Disclosure · Company practice
Targeting cookies record browsing and share it for third-party ads
Targeting cookies record a visit to the site, the pages viewed and the links followed. The notice says it uses this information to make the website and its advertising more relevant to the visitor's interests, and shares the information with third parties so they can serve relevant advertising on their own websites.
Details not recorded for this card
Supporting quotations
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We will also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.
Qualifications & exceptions
The stated sharing purpose is relevant advertising served on third parties' websites.
Not stated here
The notice does not identify the third parties or the data shared, and does not say whether visitors can limit this sharing other than through cookie settings.
Cross-references
qualifies (model-proposed): LinkedIn cookies are set regardless of a profile or agreement to its terms — The targeting category says information is shared with third parties for advertising; the LinkedIn row adds that its cookies are set regardless of whether the visitor has a LinkedIn profile or agreed to LinkedIn terms.
Cookie preferences can be changed in the Privacy Preference Center
The notice says visitors can change cookie preferences at any time by managing privacy settings in the Privacy Preference Center. It also links to aboutcookies.org and allaboutcookies.org for information on cookies and how to see which ones are set.
Details not recorded for this card
Supporting quotations
Change your cookie preferences at any time by managing your privacy settings in the Privacy Preference Center. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
Not stated here
The extracted text does not link to the Privacy Preference Center or say which categories it controls; strictly necessary cookies are separately described as always enabled.
Cross-references
narrows (model-proposed): Strictly necessary cookies are required and always enabled — The notice says preferences can be changed at any time, but separately says strictly necessary cookies are always enabled; the general preference control therefore does not extend to that category.
qualifies (model-proposed): Consent and opt-out choices are stored in strictly necessary cookies — The Privacy Preference Center statement is qualified by the table description of OneTrust consent records, which store the cookie categories and whether visitors gave or withdrew consent.
Data Access & Collection · Procedure
Browser help links and a Google Analytics opt-out are offered
The notice links to cookie-management instructions for Chrome, Edge, Firefox, Internet Explorer, Opera and Safari, and says information on other browsers is available from browser developers. It also links to Google's Analytics opt-out add-on for tracking across all websites.
Details not recorded for this card
Supporting quotations
Find out how to manage cookies on popular browsers:
The browser and analytics help pages are linked but their text is not part of this source, so the card does not describe their instructions.
Data Access & Collection · Context
Cookie list is presented as category tables with names, descriptions and terms
After the category descriptions, the notice sets out a Cookie List. The first table is captioned Strictly Necessary Cookies and the second Functional Cookies, each with columns for Cookie, Description and Term. This card describes the list's structure; the following cards describe the listed practices.
Details not recorded for this card
Supporting quotations
Cookie List
Strictly Necessary Cookies
Cookie
Description
Term
Functional Cookies
Cookie
Description
Term
Not stated here
The notice does not say whether the list is exhaustive or whether every cookie the site sets appears in it.
Data Access & Collection · Company practice
Consent and opt-out choices are stored in strictly necessary cookies
Four cookies in the strictly necessary table record consent or opt-out choices: CookieConsentPolicy and LSKey-c$CookieConsentPolicy apply end-user consent preferences, OptanonConsent stores the cookie categories and whether consent was given or withdrawn, and opt_out tracks a decision not to have data used for tracking and personalisation. The OptanonConsent description says its normal lifespan is one year, while its Term entry says Session.
Details not recorded for this card
Supporting quotations
CookieConsentPolicy
Used to apply end-user cookie consent preferences set by our client-side utility.
364 days
LSKey-c$CookieConsentPolicy
Used to apply end-user cookie consent preferences set by our client-side utility.
1 Years
OptanonConsent
This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered.
Session
opt_out
This cookie is used to track the user's decision to opt out of cookies on the website, indicating they have chosen not to have their data used for tracking and personalisation purposes.
1 Years
Qualifications & exceptions
All four cookies are placed in the strictly necessary category, which the notice says is always enabled.
Not stated here
The notice does not say which consent record governs which cookie category, or how a choice made in the Privacy Preference Center maps to these cookies.
Cross-references
qualified by (model-proposed): Cookie preferences can be changed in the Privacy Preference Center — The Privacy Preference Center statement is qualified by the table description of OneTrust consent records, which store the cookie categories and whether visitors gave or withdrew consent.
Security & Safeguards · Company practice
Security and fraud cookies are listed as strictly necessary
The strictly necessary table includes Cloudflare Bot Management, a CSRF-prevention token, a device-recognition and fraud-prevention token, and two cookies described as fraud detection and checkout continuity. The fraud-detection descriptions say the data is necessary to improve the checkout experience and understand customer friction. The listed terms are a few seconds for the bot-management cookie, Session for the CSRF token, and one year for the device-recognition, fraud and checkout cookies.
Details not recorded for this card
Supporting quotations
__cf_bm
This CloudFoundry cookie is necessary to support Cloudflare Bot Management. As part of our bot management service, this cookie helps manage incoming traffic that matches criteria associated with bots.
A few seconds
affirm-csrf-token
A secure random token (e.g., synchronizer token or challenge token) that is used to prevent CSRF attacks. A CSRF secure application assigns a unique CSRF token for every user session.
Session
fp_token_xxxx-xxxxx-xxxx-xxxxxx
Assists with device recognition and fraud prevention.
1 Years
t_v2_s
This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.
1 Years
checkout_continuity_service
This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.
1 Years
Qualifications & exceptions
The notice states that strictly necessary cookies are always enabled.
Not stated here
The notice does not explain why fraud detection and checkout continuity are treated as strictly necessary rather than functional or performance cookies.
Data Access & Collection · Company practice
Page-view, Cloudflare and Salesforce cookies support site operation
Three strictly necessary cookies count page views by unauthenticated users against licence usage, identify trusted Cloudflare traffic, and route Salesforce requests for sticky sessions. Their listed terms are 364 days, Session and a few seconds respectively.
Details not recorded for this card
Supporting quotations
pctrk
Used to count page views by unauthenticated users against license usage.
364 days
__cfruid
Cookie associated with sites using CloudFlare, used to identify trusted web traffic.
Session
sfdc-stream
Used to properly route server requests within Salesforce infrastructure for sticky sessions.
A few seconds
Not stated here
The pctrk description refers to 'license usage' without saying whose licence or what it meters.
Data Access & Collection · Company practice
Anonymous-session and load-balancer cookies are strictly necessary
JSESSIONID maintains an anonymous server session, renderCtx stores site parameters in a client's session, and GAESA keeps session affinity with a Google Cloud Platform load balancer. Their listed terms are Session, Session and one month.
Details not recorded for this card
Supporting quotations
JSESSIONID
Used to maintain an anonymous user session by the server.
Session
renderCtx
Used to store site parameters in the session for reuse across requests by a single client for functionality and performance reasons.
Session
GAESA
Session affinity cookie set with Google Cloud Platform Load balancer.
1 Months
Data Access & Collection · Company practice
Mobile routing, cookie testing, localisation and analytics are strictly necessary
The remaining strictly necessary cookies route mobile visitors to a mobile version, test whether the browser blocks or allows cookies, maintain an anonymised server session, propagate localisation for logged-in users, and record an anonymous session for public visitor analytics. sb.anonymousId2 is described as analytics but sits in the always-enabled strictly necessary category.
Details not recorded for this card
Supporting quotations
DrupalVisitorMobile
Determines whether the visitor is originating from a mobile device and routes the user to a mobile version, if applicable.
Session
cookietest
Checks to see if the browser is set to block or allow cookies.
Session
session
This cookie is typically used to maintain an anonymized user session by the server.
A few seconds
Affirm-Locale
Strictly necessary cookie for logged in - used to propagate localization
1 Years
sb.anonymousId2
Anonymous session for public visitor analytics for data user is interacting with
1 Years
Not stated here
The notice does not explain why an anonymous-analytics session identifier is treated as strictly necessary.
Data Access & Collection · Company practice
Functional table begins with help-centre and bot-verification cookies
The functional table begins with a Zendesk help-centre session cookie and a Cloudflare clearance cookie used to verify that a visitor or system has solved a bot challenge. Their listed terms are Session and one year.
Details not recorded for this card
Supporting quotations
_help_center_session
This cookie aids in session for the Zendesk guide.
Session
cf_clearance
Used to verify user is not a bot; user/system has solved a challenge successfully
1 Years
Not stated here
The notice does not explain how bot verification counts as a functionality cookie rather than a strictly necessary one.
Data Access & Collection · Company practice
Segment analytics cookies sit under Functionality
Four Segment cookies appear under Functional: ajs_anonymous_id counts visits for analytics, __tld__ finds a visitor's top-level domain, ajs%3Atest counts visits and traffic metrics, and ajs%3Acookies supports site performance and functionality. The notice separately defines performance cookies as those that recognise and count visitors and show how they move around the site.
Details not recorded for this card
Supporting quotations
ajs_anonymous_id
These cookies are generally used for Analytics and help count how many people visit a certain site by tracking if you have visited before. This cookie has a lifespan of 1 year.
1 Years
__tld__
From Segment Analytics.js library; this cookie helps to figure out a top-level domain for a user.__tld__
Session
ajs%3Atest
This performance cookie counts visits and tracks other website traffic-related metrics. Cookies in this domain have a lifespan of 1 year.
1 Years
ajs%3Acookies
This cookie supports use, service performance, and functionality of websites. Cookies in this domain have a lifespan of 1 year.
1 Years
Performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily, track errors and improve insights into how the website is performing.
Qualifications & exceptions
The table places these analytics cookies in the functional category.
The descriptions give their terms as one year, Session, one year and one year.
Not stated here
The notice does not explain why these analytics cookies are grouped as functional rather than performance cookies.
Cross-references
contrast (model-proposed): Performance cookies count visitors and show how they move — The performance category is defined as recognising and counting visitors and seeing how they move around the site, while the functional table lists Segment analytics cookies described as counting visits and tracking traffic metrics; the notice does not explain the different placement.
Use & Processing · Company practice
A TVsquared ad-conversion cookie is listed as functional
The _tq_id cookie set by TVsquared is listed in the functional table. Its description says the main use is to trace conversions from ads back to the initial visit, and its listed term is 729 days.
Details not recorded for this card
Supporting quotations
_tq_id.TV-7281456336-1.3158
This cookie is set by TVsquared. The main use of the cookies is to trace conversions from ads back to the initial visit.
729 days
Not stated here
The notice does not explain why an ad-conversion cookie is grouped with functionality cookies.
Data Access & Collection · Company practice
Functional table lists marketing and testing cookies
The functional table includes _ssc, associated with TailTarget, a data management platform that provides customer data for targeted advertising; _pinterest_ct_ua, set for Pinterest Marketing; and chameleon-profile-id, used for testing. The listed terms are one day, one year and Session.
Details not recorded for this card
Supporting quotations
_ssc
This domain is associated with TailTarget, a Brazilian data management platform (DMP) that provides customer data to help in targeted advertising.
1 Days
_pinterest_ct_ua
This cookie is being set in relation to Pinterest Marketing
1 Years
chameleon-profile-id
This cookie is used for testing.
Session
Qualifications & exceptions
These rows sit under the Functional Cookies caption, not the Targeting Cookies caption.
Not stated here
The notice does not explain why marketing and testing cookies are grouped as functional.
Data Access & Collection · Company practice
Fingerprint and visitor-identification cookies appear under Functionality
The functional table includes two Fingerprint cookies that assist with device recognition and fraud prevention, with listed terms of 364 days, and visitorId, which identifies a unique visitor to personalise features and content from the visitor's preferences and browsing history, with a one-year term.
Details not recorded for this card
Supporting quotations
fpjs_group_id
Used by Fingerprint: assists with device recognition and fraud prevention.
364 days
fpjs_user_id
Used by Fingerprint: assists with device recognition and fraud prevention.
364 days
visitorId
This cookie is used to identify a unique visitor to enhance the user experience by enabling personalized features and content based on the visitor's preferences and browsing history.
1 Years
Qualifications & exceptions
These rows sit under the Functional Cookies caption.
Not stated here
The notice does not explain why device-recognition and fraud-prevention cookies are grouped as functional.
Data Access & Collection · Company practice
Internal analytics and rate-limiting cookies appear under Functionality
BrowserId_sec logs secure browser sessions and visits for internal-only product analytics, and _cfuvid lets Cloudflare distinguish users who share an IP address so it can enforce rate limits. Both rows are listed under Functional, with terms of one year and Session.
Details not recorded for this card
Supporting quotations
BrowserId_sec
Used to log secure browser sessions/visits for internal-only product analytics.
1 Years
_cfuvid
The _cfuvid cookie is used by Cloudflare to distinguish individual users who share the same IP address for the purpose of enforcing rate limiting rules.
Session
Not stated here
The notice does not say what 'internal-only product analytics' measures or who can see it.
Data Access & Collection · Company practice
Performance table starts with Mixpanel, Google Analytics and Datadog cookies
The performance table lists analytics and measurement cookies, including Mixpanel, Google Analytics' _gid and _gat, and Datadog's _dd_s. Their descriptions say they identify users and measure site performance and usage, distinguish visitors with a client identifier, throttle request rates, and group events from a user session. The listed terms are one year, a few seconds, 10 minutes and four hours.
Details not recorded for this card
Supporting quotations
Performance Cookies
Cookie
Description
Term
mp_xxxxxxx_mixpanel
Used to identify individual users. This tool is used to measure site performance and usage patterns
1 Years
_gid
This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gid
A few seconds
_gat
This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.
10 minutes
_dd_s
Datadog Cookie used to group all events generated from a unique user session across multiple pages. It contains the current session ID, whether the session is excluded due to sampling, and the expiration date of the session. The cookie is extended for an extra 15 minutes every time the user interacts with the website, up to the maximum user session duration (4 hours).
4 hours
Data Access & Collection · Company practice
Adobe and Piwik cookies measure visits and performance
The performance table also lists Adobe Site Catalyst's s_cc, which checks whether the browser enables cookies, and Piwik's _pk_ses* and _pk_id* pattern cookies, described as tracking visitor behaviour and measuring site performance. Their terms are Session, 30 minutes and one year.
Details not recorded for this card
Supporting quotations
s_cc
This cookie is associated with the Adobe Site Catalyst. It determines whether cookies are enabled in the web browser.
Session
_pk_ses*
This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
30 minutes
_pk_id*
This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_id is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
1 Years
Data Access & Collection · Company practice
Google Analytics and Hotjar cookies sit in the performance table
Google Analytics' _ga distinguishes unique users by assigning a randomly generated client identifier. Hotjar's _hjSessionUser and _hjSession cookies persist a user ID and session data, and _hjTLDTest checks which cookie path to use across subdomains. The listed terms are Session, Session, a few seconds and Session.
Details not recorded for this card
Supporting quotations
_ga
This cookie name is associated with Google Universal Analytics. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the site's analytics reports.
Session
_hjSessionUser_xxxxxx
Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
Session
_hjSession_xxxxxx
A cookie that holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session.
A few seconds
_hjTLDTest
When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.
Session
Security & Safeguards · Company practice
Fraud and security cookies are listed as performance cookies
tracker_device helps detect fraud and provides continuity between checkout attempts, and BrowserId is used for security protection. Both rows are in the performance table, with terms of four years and one year.
Details not recorded for this card
Supporting quotations
tracker_device
This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.
4 Years
BrowserId
Used for security protection.
1 Years
Not stated here
The notice does not explain why fraud detection and security protection are classified as performance cookies.
Cross-references
contrast (model-proposed): Performance cookies count visitors and show how they move — The performance category is defined around visitor counting and movement, while the performance table lists fraud-detection and security cookies; the notice does not explain how they fit the category.
Data Access & Collection · Company practice
A second Mixpanel cookie measures site performance and usage
The performance table lists mp_5cb8cc91-e409-41c2-af0d-b337e1d966a7_perfalytics, described as identifying individual users to measure site performance and usage patterns, with a listed term of one year.
Used to identify individual users. This tool is used to measure site performance and usage patterns
1 Years
Data Access & Collection · Company practice
Shopify, session-tracking and Affirm analytics cookies end the performance table
The performance table ends with a Shopify analytics cookie whose term is 364 days, fs_lua and fs_uid for user session tracking and error debugging (one hour and one year), axp-override for Affirm analytics (Session), and Google Analytics' _ga_ cookie for identifying and tracking an individual session (one year).
Details not recorded for this card
Supporting quotations
This cookie is associated with Shopify's analytics suite.
364 days
fs_lua
Used for user session tracking and error debugging
1 hour
axp-override
Used for Affirm analytics purposes.
Session
_ga_xxxxxxxxxx
Used by Google Analytics to identify and track an individual session with your device.
1 Years
fs_uid
Used for user session tracking and error debugging
1 Years
Sharing & Disclosure · Context
Targeting table lists cookies for third-party advertising and tracking
The Targeting Cookies table is the longest of the four and has Cookie, Description and Term columns. The notice's targeting definition says these cookies record visits, pages viewed and links followed, and are shared with third parties so they can serve relevant advertising on their own websites.
Details not recorded for this card
Supporting quotations
Targeting Cookies
Cookie
Description
Term
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We will also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.
Not stated here
The notice does not say whether the targeting table is complete or how the listed cookies are selected.
Google ad delivery and signed-out ad cookies appear in the targeting table
The targeting table includes Google cookies for ad delivery and retargeting (DV, one day), detecting spam and fraud in ads (AEC, six months), and showing ads in Google services to signed-out users (NID, six months).
Details not recorded for this card
Supporting quotations
DV
This cookie is used by Google Ads Optimization to provide ad delivery or retargeting and store user preferences.
1 day
AEC
This is used by Google Ads to detect spam, fraud, and abuse to help ensure advertisers are not incorrectly charged for fraudulent or otherwise invalid impressions or interactions with ads, and that YouTube creators in the YouTube Partner Program are remunerated fairly
6 months
NID
This is used to show Google ads in Google services for signed-out users
6 months
Qualifications & exceptions
AEC's stated purpose is ad fraud and spam detection rather than ad targeting.
Sharing & Disclosure · Company practice
Google Analytics throttling and AdSense experiment cookies are listed as targeting
The targeting table includes two Google Analytics request-throttling cookies, _gat_gtag and _gat_UA (both Session), and _gcl_au, which is used by Google AdSense to experiment with advertisement efficiency across sites (Session).
Details not recorded for this card
Supporting quotations
_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx
This cookie is part of Google Analytics and is used to limit requests (throttle request rate).
Session
_gat_UA-XXXXXX-X
This cookie is part of Google Analytics and is used to limit requests.
Session
_gcl_au
Used by Google AdSense for experimenting with advertisement efficiency across websites using their services
Session
Sharing & Disclosure · Company practice
Microsoft Bing advertising cookies track visits and ad relevance
The targeting table includes Microsoft Bing Ads cookies _uetvid and _uetsid. Their descriptions say _uetvid is a tracking cookie used to engage users who previously visited the site, and _uetsid is used by Bing to determine which ads may be relevant to the user. The terms are one year and a few seconds.
Details not recorded for this card
Supporting quotations
_uetvid
This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website.
1 Years
_uetsid
This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site.
A few seconds
Sharing & Disclosure · Company practice
Meta, Pinterest, Twitter and Doubleclick cookies serve ad products
The targeting table includes _fbp, used by Facebook to deliver advertisement products such as real-time bidding; _pin_unauth, which tracks Pinterest service usage; pid, which lets visitors use Twitter-related features; and IDE, set by Doubleclick to record website use and advertising seen before the visit. Their terms are two months, one year, one year and one year.
Details not recorded for this card
Supporting quotations
_fbp
Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers
2 Months
_pin_unauth
This cookie is associated with pinterest. It is used to track the usage of services.
1 Years
pid
This cookie lets website visitors use Twitter-related features from within the web page they are visiting.
1 Years
IDE
This cookie is set by Doubleclick and carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
1 Years
Sharing & Disclosure · Company practice
LiveRamp and Adobe marketing-cloud cookies synchronise identifiers
The targeting table includes LiveRamp's pxrc, which holds information about cookie syncs and a sync priority queue (59 days), rlas3, generally provided by rlcdn.com for advertising (364 days), and Adobe Marketing Cloud's AMCVS_ and AMCV_ visitor identifiers, the latter described as letting a company track users across its domains and services (Session and one year).
Details not recorded for this card
Supporting quotations
pxrc
Contains information about LiveRamp cookie syncs triggered off the back of this browser. Used to facilitate cookie sync priority queue.
59 days
rlas3
This cookie is generally provided by rlcdn.com and is used for advertising purposes.
364 days
AMCVS_
This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier.
Session
AMCV_
This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier to allow a company to track users across their domains and services.
1 Years
Sharing & Disclosure · Company practice
Unruly, Adobe Audience Manager and Adswizz cookies track advertising
The targeting table includes Unruly Media's _rxuuid, which records website use and advertising seen (one year), Adobe Audience Manager's dpm, used to record identifier synchronisation (five months), and Adswizz's OAID for audio advertising (one month).
Details not recorded for this card
Supporting quotations
_rxuuid
This domain is owned by Unruly Media, part of News Corp. This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
1 Years
dpm
Adobe Audience Manager - data management platform uses this cookie to record information around synchronisation of IDs.
5 Months
OAID
Adswizz is an online advertising business specialising in audio advertising.
1 Months
Sharing & Disclosure · Company practice
Visitor-tracking and marketing-automation cookies have long or conflicting terms
The targeting table includes contently_insights_user, which identifies internal users so they are excluded from reporting (729 days); visitor_id##### and visitor_id, pattern cookies that append a unique visitor identifier for tracking, whose descriptions state a 10-year lifespan although visitor_id#####'s Term entry says Session and visitor_id's says 10 years; ajs_user_id, which tracks usage, events and target marketing (one year); and pardot, linked to Pardot marketing automation (a few seconds).
Details not recorded for this card
Supporting quotations
contently_insights_user
Identifies internal users so they are excluded from reporting.
729 days
visitor_id#####
This is a cookie pattern that appends a unique identifier for a website visitor, used for tracking purposes. The cookies in this domain have a lifespan of 10 years.
Session
ajs_user_id
This cookie helps track visitor usage, events, target marketing, and can also measure application performance and stability.
1 year
visitor_id
This is a cookie pattern that appends a unique identifier for a website visitor, used for tracking purposes.
10 years
pardot
Cookie name associated with services from marketing automation and lead generation platform Pardot.
A few seconds
Not stated here
The notice does not reconcile visitor_id#####'s stated 10-year lifespan with its Session Term entry.
Sharing & Disclosure · Company practice
A browser cookie-support test is listed as targeting
testcookie checks whether a user's browser supports cookies, yet it is listed in the targeting table with a one-year term.
Details not recorded for this card
Supporting quotations
testcookie
This cookie checks whether a user's browser supports cookies.
1 Years
Not stated here
The notice does not explain why a browser-support test is classified as a targeting cookie.
Sharing & Disclosure · Company practice
LinkedIn cookies are set regardless of a profile or agreement to its terms
The targeting table includes a LinkedIn cookie set where site owners place LinkedIn content-sharing buttons. The description says cookies are set regardless of whether the visitor has an active LinkedIn profile or agreed to LinkedIn's terms and conditions, and classifies the domain as primarily tracking/targeting. The listed term is five months.
Details not recorded for this card
Supporting quotations
This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain.
5 Months
Qualifications & exceptions
The description says the LinkedIn buttons add functionality to the site, but cookies are set regardless.
Not stated here
The description does not say what data LinkedIn collects or whether Affirm receives any of it.
Cross-references
qualified by (model-proposed): Targeting cookies record browsing and share it for third-party ads — The targeting category says information is shared with third parties for advertising; the LinkedIn row adds that its cookies are set regardless of whether the visitor has a LinkedIn profile or agreed to LinkedIn terms.
Sharing & Disclosure · Company practice
Data-management cookies from Aggregate Knowledge and Mediavine appear in targeting
u is associated with Aggregate Knowledge, acquired by Neustar, a data management platform that enables real-time targeting and consumer profiling (364 days). am_tokens_eu-v1 is associated with Mediavine, which provides website monetization and advertising optimization for publishers (13 days).
Details not recorded for this card
Supporting quotations
u
This domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.
364 days
am_tokens_eu-v1
This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.
13 Days
Sharing & Disclosure · Company practice
Twitter, AppNexus and reCAPTCHA cookies are listed as targeting
muc_ads is a Twitter URL-shortening service that lets Twitter collect data on how links are shared (one year). anj is associated with AppNexus, an online advertising technology company (two months). _GRECAPTCHA is used by Google reCAPTCHA for risk analysis (five months) and is a security-purpose cookie listed in the targeting table.
Details not recorded for this card
Supporting quotations
muc_ads
This domain is owned by Twitter. It is used as a URL shortening service, which allows Twitter to collect data on how links are shared.
1 Years
anj
This domain is owned by AppNexus Inc. The company provides a range of online advertising technology and services.
2 Months
_GRECAPTCHA
Used by Google reCaptcha for risk analysis
5 Months
Qualifications & exceptions
_GRECAPTCHA's stated purpose is risk analysis, not advertising.
Not stated here
The notice does not explain why reCAPTCHA's risk-analysis cookie is classified as targeting.
Sharing & Disclosure · Company practice
Tracking, video and audience-data cookies fill the targeting table
ssi tracks a user's movements across the site to optimize experience and serve targeted ads (one year). YSC is set by YouTube for embedded videos and aggregates data with Google profiles to display targeted advertising (Session). MUID is associated with Microsoft Bing (one year). __181_cid is associated with Bombora, which provides B2B intent data (one year). SERVERID is owned by Eyeota, which uses audience data to target advertising based on visitor profiling (Session).
Details not recorded for this card
Supporting quotations
ssi
This cookie is typically used for tracking the user's movements across the website to optimize the user experience and serve targeted ads.
1 Years
YSC
YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.
Session
MUID
This domain is owned by Microsoft - it is the site for the search engine Bing.
1 Years
__181_cid
This domain is associated with Bombora, a company that provides B2B intent data for marketing and sales.
1 Years
SERVERID
This domain is owned by Eyeota, a global company specialising in audience data to enable targeting of advertising based on visitor profiling.
Session
Sharing & Disclosure · Company practice
Video, exchange and cross-site tracking cookies appear in targeting
uid-bp is owned by StickyAdsTV for online video advertising (one month). tuuid contains a unique visitor ID that lets Bidswitch track a visitor across multiple websites (one year). CMPS is owned by Casale Media for advertising (two months). personalization_id is owned by Twitter and collects data through plug-ins primarily for tracking and targeting (one year). _rlsnc is associated with Retargetly for targeted advertising (Session).
Details not recorded for this card
Supporting quotations
uid-bp-xxxxx
This domain is owned by StickyAdsTV, a French company providing online video advertising services.
1 Months
tuuid
Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times.
1 Years
CMPS
This domain is owned by Casale Media. The main business activity is: Advertising
2 Months
personalization_id
This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations that is primarily used for tracking and targeting.
1 Years
_rlsnc
This domain is associated with Retargetly, a data platform that provides targeted advertising services.
Session
Sharing & Disclosure · Company practice
Tremor Video, Federated Media and Smart Ad Server cookies target ads
tv_UIDM and tv_UICT are owned by Tremor Video, which provides a marketplace for online video cross-device advertising (two years each). _ljtrtb_16 is owned by Federated Media Publishing for advertising (one year). csync is owned by Smart Ad Server for advertising (one year).
Details not recorded for this card
Supporting quotations
tv_UIDM
This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.
2 Years
_ljtrtb_16
This domain is owned by Federated Media Publishing. The main business activity is: Advertising
1 Years
tv_UICT
This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.
2 Years
csync
This domain is owned by Smart Ad Server. The main business activity is: Advertising
1 Years
Sharing & Disclosure · Company practice
Bidswitch, Pulsepoint and Casale Media cookies track ad relevance
tuuid_lu repeats Bidswitch's unique visitor ID and cross-site tracking description (one year). pb_rtb_ev_part is owned by Pulsepoint, a real-time ad-bidding exchange and audience-profiling business (one year). CMPRO is owned by Casale Media for advertising (two months).
Details not recorded for this card
Supporting quotations
tuuid_lu
Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times.
1 Years
pb_rtb_ev_part
This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling
1 Years
CMPRO
This domain is owned by Casale Media. The main business activity is: Advertising
2 Months
Sharing & Disclosure · Company practice
LinkedIn and Doubleclick test cookies close the targeting table section
bscookie is used by LinkedIn to track use of embedded services (one year). AnalyticsSyncHistory stores when a sync with the lms_analytics cookie occurred for users in the Designated Countries (one month). test_cookie is owned by Doubleclick and checks whether the browser supports cookies (a few seconds).
Details not recorded for this card
Supporting quotations
bscookie
Used by the social networking service, LinkedIn, for tracking the use of embedded services.
1 Years
AnalyticsSyncHistory
Used by LinkedIn to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries
1 Months
test_cookie
This domain is owned by Doubleclick (Google). Used to check if the user's browser supports cookies.
A few seconds
Qualifications & exceptions
test_cookie's stated purpose is a browser-support check, not advertising.
Not stated here
The notice does not identify the 'Designated Countries' or explain why a browser-support test is classified as targeting.
Sharing & Disclosure · Company practice
Pulsepoint, TapAd and Undertone cookies target ads
Pulsepoint's INGRESSCOOKIE is described as part of a real-time ad-bidding exchange and audience-profiling business (Session). TapAd_TS records how the end user uses the website and any advertising seen before visiting (one month). UID_EXT_xx is owned by Undertone for digital advertising services (one year).
Details not recorded for this card
Supporting quotations
This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling
Session
TapAd_TS
This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
1 Months
UID_EXT_xx
This domain is owned by Undertone. The main business activity is: Digital advertising services
1 Years
Sharing & Disclosure · Company practice
Microsoft engagement and social-sharing cookies sit in targeting
MSPTC tracks user engagement and interaction to enhance customer experience and website functionality, with a listed term of 389 days. bcookie is a Microsoft MSN first-party cookie for sharing website content via social media (one year). lidc is a Microsoft MSN first-party cookie described as ensuring the proper functioning of the website (a few seconds).
Details not recorded for this card
Supporting quotations
MSPTC
This domain is owned by Microsoft. This cookie is used to track user engagement and interaction with the website to enhance customer experience and website functionality. It may collect information about how users navigate and use the site, helping to identify preferences and improve service delivery.
389 days
bcookie
This is a Microsoft MSN 1st party cookie for sharing the content of the website via social media.
1 Years
lidc
This is a Microsoft MSN 1st party cookie that ensures the proper functioning of this website.
A few seconds
Qualifications & exceptions
lidc's stated purpose is site functioning, not advertising.
Not stated here
The notice does not explain why a cookie described as ensuring the site functions is classified as targeting.
Sharing & Disclosure · Company practice
TripleLift and Casale Media native-advertising cookies
tluidp and tluid are owned by TripleLift, a provider of programmatic native advertising services, with terms of two months each. CMID is owned by Casale Media, whose main business is advertising, with a term of one year.
Details not recorded for this card
Supporting quotations
tluidp
This domain is owned by TripleLift, a USA based business providing programmatic native advertising services.
2 Months
CMID
This domain is owned by Casale Media. The main business activity is: Advertising
1 Years
tluid
This domain is owned by TripleLift, a USA based business providing programmatic native advertising services.
2 Months
Sharing & Disclosure · Company practice
YouTube test and privacy-metadata cookies appear in targeting
TESTCOOKIESENABLED carries YouTube's data description about collecting user data through embedded videos and displaying targeted advertising, with a one-day term. VISITOR_PRIVACY_METADATA stores the user's privacy and consent settings for embedded YouTube videos so those choices are respected, with a term of five months.
Details not recorded for this card
Supporting quotations
TESTCOOKIESENABLED
YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.
1 day
VISITOR_PRIVACY_METADATA
Used by YouTube to store the user’s privacy and consent settings for embedded videos. It helps ensure that user privacy choices (like consent for personalized ads or tracking) are respected when watching embedded YouTube content.
5 Months
Not stated here
The TESTCOOKIESENABLED description does not say why a test-cookie name carries YouTube's advertising description.
Sharing & Disclosure · Company practice
Mediavine monetization tokens are listed as targeting
mv_tokens, am_tokens, centro and mv_tokens_eu-v1 are all associated with Mediavine, which provides website monetization services including advertising optimization for publishers. Each has a listed term of 13 days.
Details not recorded for this card
Supporting quotations
mv_tokens
This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.
13 Days
am_tokens
This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.
13 Days
centro
This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.
13 Days
mv_tokens_eu-v1
This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.
13 Days
Sharing & Disclosure · Company practice
TapAd, Pardot and Sitescout cookies track advertising and leads
TapAd_3WAY_SYNCS is set by TapAd for data synchronisation with advertising networks (one month). lpv778433 is owned by Pardot, a marketing automation and lead-generation platform (30 minutes). _ssuma is owned by Sitescout, a real-time advertising platform (29 days).
Details not recorded for this card
Supporting quotations
TapAd_3WAY_SYNCS
TapAd sets this cookie for data synchronization with advertising networks.
1 Months
lpv778433
This domain is owned by Pardot, a marketing automation platform which provides lead generation services to businesses.
30 minutes
_ssuma
This domain is owned by Sitescout. The main business activity is: Real time advertising platform
29 days
Sharing & Disclosure · Company practice
Adobe Audience Manager and Datonics cookies profile visitors
demdex helps Adobe Audience Manager perform visitor identification, ID synchronisation, segmentation, modeling and reporting (five months). anProfile is owned by Datonics and stores preferences and personalisation settings to deliver content tailored to the user's profile (179 days).
Details not recorded for this card
Supporting quotations
demdex
This cookie helps Adobe Audience Manager perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc.
5 Months
anProfile
This domain is owned by Datonics. This cookie is used to store user preferences and personalization settings to enhance the browsing experience by delivering content and features tailored to the user's profile.
179 days
Sharing & Disclosure · Company practice
Lijit, AppNexus and Aggregate Knowledge cookies collect reader data
ljt_reader collects data on reader interests, context, demographics and other information for the Lijit platform (one year). uuid2 allows targeted advertising through AppNexus and collects anonymous data on ad views, IP address and page views (two months). ab is associated with Aggregate Knowledge, a Neustar data management platform for real-time targeting and consumer profiling (one year).
Details not recorded for this card
Supporting quotations
ljt_reader
Collects data related to reader interests, context, demographics and other information on behalf of the Lijit platform.
1 Years
uuid2
This cookie allows targeted advertising through the AppNexus platform - collects anonymous data on ad views IP address, page views, and more.
2 Months
ab
This domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.
1 Years
Sharing & Disclosure · Company practice
StickyAds, Tremor and LinkedIn cookies complete the targeting rows
UID is owned by StickyAdsTV for online video advertising (one month). tvid is owned by Tremor Video, which provides a marketplace for online video cross-device advertising (one year). UserMatchHistory contains a LinkedIn identifier used to determine that two hits belong to the same user across browsing sessions (one month).
Details not recorded for this card
Supporting quotations
UID
This domain is owned by StickyAdsTV, a French company providing online video advertising services.
1 Months
tvid
This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.
1 Years
UserMatchHistory
Contains a unique identifier used by LinkedIn to determine that two distinct hits belong to the same user across browsing sessions.
1 Months
Sharing & Disclosure · Company practice
YouTube preference and TapAd device-tracking cookies end the table
A YouTube cookie keeps track of user preferences for embedded videos and can determine whether the visitor uses the new or old YouTube interface (five months). TapAd_DID is owned by Tapad, which provides technology to track users across devices to enhance targeting (one month).
Details not recorded for this card
Supporting quotations
This cookie is set by Youtube to keep track of user preferences for Youtube videos embedded in sites; it can also determine whether the website visitor is using the new or old version of the Youtube interface.
5 Months
TapAd_DID
This domain is owned by Tapad Inc. a US based company that provides technology to track users across devices to enhance targeting capabilities.
1 Months
Sharing & Disclosure · Company practice
Pulsepoint, Pinterest and OpenX cookies close the targeting table
VP is Pulsepoint's cookie for a real-time ad-bidding exchange and audience profiling (one year). ar_debug is owned by Pinterest and used for troubleshooting and analytical purposes to track errors and improve services (one year). i is owned by OpenX for advertising (one year).
Details not recorded for this card
Supporting quotations
VP
This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling
1 Years
ar_debug
This domain is owned by Pinterest. This cookie is used for troubleshooting and analytical purposes, intended to track errors and improve services by providing insights into how the website is functioning.
1 Years
i
This domain is owned by OpenX. The main business activity is: Advertising
1 Years
Qualifications & exceptions
ar_debug's stated purpose is troubleshooting and analytics, not advertising.
Not stated here
The notice does not explain why Pinterest's troubleshooting cookie is classified as targeting.
Sharing & Disclosure · Company practice
Smart Ad Server and LinkedIn cookies close the targeting rows
TestIfCookieP is owned by Smart Ad Server, whose main business is advertising (one year). li_sugr is used by LinkedIn to make a probabilistic match of a user's identity outside the Designated Countries (two months).
Details not recorded for this card
Supporting quotations
TestIfCookieP
This domain is owned by Smart Ad Server. The main business activity is: Advertising
1 Years
li_sugr
Used by LinkedIn to make a probabilistic match of a user's identity outside the Designated Countries
2 Months
Not stated here
The notice does not identify the Designated Countries or explain what identity data LinkedIn matches.
Sharing & Disclosure · Company practice
A unique-visitor cookie assigns a client identifier for targeted ads
uids identifies unique visitors by assigning a randomly generated number as a client identifier, enabling tracking of interactions with the website primarily for targeted advertising. Its listed term is two months.
Details not recorded for this card
Supporting quotations
uids
This cookie is used to identify unique visitors by assigning a randomly generated number as a client identifier, enabling the tracking of user interactions with the website primarily for targeted advertising purposes.
2 Months
Legal Rights & Agreement Rules · Context
Page footer carries lending and card disclosures unrelated to cookies
After the cookie tables, the page footer contains Affirm's product disclosures: payment options are provided by lending partners with a 0–36% APR range and an eligibility check; payment options vary by purchase amount and merchant and a down payment may be required; the Affirm Money Account is held with Cross River Bank; the Affirm Card is issued by Evolve Bank & Trust or Stride Bank; and the one-time-use virtual card is issued by CRB, Sutton Bank or Celtic Bank. None of these paragraphs describes cookie practices.
Details not recorded for this card
Supporting quotations
Payment options through Affirm are provided by these lending partners: affirm.com/lenders. Your rate will be 0–36% APR based on credit, and is subject to an eligibility check. Affirm Pay in 4 payment option is 0% APR.
Options depend on your purchase amount and may vary by merchant. A down payment may be required. For example, at a purchase price of $400 you could pay a down payment of $80, followed by 12 monthly payments of $28.88 at 15% APR or 4 interest-free payments of $100 every 2 weeks. Affirm availability and eligibility may vary. Restrictions apply. See affirm.com/terms#use.
The Affirm Money™ Account is held with Cross River Bank (CRB), Member FDIC. Affirm is not a bank. FDIC insurance covers accounts held with CRB in the event CRB fails. California residents: Affirm Loan Services, LLC is licensed by the Department of Financial Protection and Innovation. Loans are made or arranged pursuant to California Financing Law license 60DBO-111681.
The Affirm Card is a Visa® debit card issued by Evolve Bank & Trust (Evolve) or Stride Bank, N.A. (Stride), Members FDIC, pursuant to licenses from Visa U.S.A. Inc. Affirm is not a bank. FDIC insurance will only cover the failure of Evolve and/or Stride. Learn more. The Affirm Card is not available to residents of U.S. territories.
For licenses and disclosures, see
Not stated here
The notice does not explain why these product disclosures appear on the cookie page, and the linked lender, FDIC and licence pages are not part of this source.