Plain English first, clauses second
Cookie notice
The full text in plain English, with today's figures. The short summary of every policy is on our Legal page.
Cookies are small files a website stores in your browser. This notice lists every cookie GDI Credit uses, why, and for how long. Until you choose Accept in the cookie banner, we set only the cookies the website needs to work.
On this page
1. Cookies the website needs
These keep the website working and your account safe, so they are always on.
- wordpress_logged_in and wordpress_sec: keep you signed in. They end when you sign out, or after 30 days if you asked us to remember you.
- xoft_auth_csrf: protects the sign-in form against forged requests. It ends when you close the browser.
- xoft_device: recognises your device, so a trusted device does not need a new SMS code each time. It lasts 1 year; a device stays trusted for 90 days.
- xoft_google_state: keeps a Google sign-in safe. It lasts a few minutes.
- xoft_social_state: keeps an Apple or Facebook sign-in safe. It lasts a few minutes.
- xoft_ref: remembers the invite code of a friend's link, so the right person gets the reward. It lasts 30 days.
- xoft_consent: remembers your cookie choice. It lasts 6 months.
- xoft_vid: a random number for this browser, so our security log can tell one device's visits apart. It lasts 1 year and holds no name, number or other personal detail.
- xo_hide_money: remembers that you chose to hide balances on this device. It lasts 1 year and holds no personal data.
2. Cookies that count visits (only if you accept)
If you choose Accept, and only if we have switched the tool on, we count visits to improve the website:
- Google Analytics (_ga and _ga_ followed by a code): counts visits and pages. They last up to 2 years.
- Microsoft Clarity (_clck and _clsk): shows which parts of a page people use. They last up to 1 year and 1 day.
We do not use advertising cookies, and we never sell what these cookies collect.
3. Storage used by the app
When you add the app to your home screen, your browser keeps a copy of public files such as the logo and the offline page, so the app opens fast. It never stores your balances, messages or other private data.
4. Changing your choice
Use "Cookie choices" at the bottom of any page to change your choice at any time. You can also delete cookies in your browser's settings; you will then need to sign in again.
Questions? Write to the email address on our Contact page.
Questions about your agreement?
Support can walk you through any clause, before or after you sign.
Talk to support