Cookie Notice
Last updated October 18, 2026
This notice explains what this site (b2b.borderfolio.app) and the adviser workspace store on your device and why. It should be read with the Privacy Policy.
1. Your choice
Analytics on this site is opt-in. Nothing is written for analytics and nothing is sent to PostHog until you choose "Accept" in the consent bar. You can change your choice at any time with the "Cookie settings" link in the footer. Strictly necessary items below do not require consent.
2. On this site
| Name | Type | Purpose | Retention |
|---|---|---|---|
| bf_consent | Cookie — strictly necessary | Records whether you accepted or declined analytics. Scoped to .borderfolio.app so one answer covers the investor site, this site and the workspaces. | 6 months, after which we ask again |
| bf_ph | Cookie — analytics (optional) | Set by PostHog once you accept. A random identifier so repeat visits count as one journey. Hosted on PostHog's EU Cloud. | 12 months |
| bf_attribution | sessionStorage — strictly necessary | Holds the campaign parameters you arrived with, so a request for access can be attributed to a channel. Erased if you decline. | Until the browser tab is closed |
3. In the adviser workspace
| Name | Type | Purpose | Retention |
|---|---|---|---|
| access_token, refresh_token | localStorage — strictly necessary | Keep you signed in. The access token is short-lived; the refresh token is revocable and rotated on use. | Until sign-out or expiry (30 days) |
| bf_adv_org | localStorage — strictly necessary | Remembers which organisation you last worked in. | Until sign-out |
| Per-device conveniences | localStorage — strictly necessary | Recently viewed clients, an unsent draft of adviser notes, the selected tab. Never sent to us. | Until cleared |
The workspace does not load analytics or advertising scripts.
4. What analytics records
With consent, PostHog records page views on this site and the referring page or campaign. It does not record what you type into the access-request form, and nothing from inside the workspace — client names, holdings, figures — is ever sent to analytics.
5. Managing cookies in your browser
You can delete or block cookies in your browser settings. Blocking the strictly necessary items will prevent sign-in to the workspace.