§1What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to remember things like your login state, your tier, your theme preference, and what you were doing the last time you visited. They can be set by the site you're visiting (first-party) or by another domain referenced by that site (third-party).
We also use similar technologies — localStorage, sessionStorage, IndexedDB — for the same purposes. This policy covers all of them under "cookies."
§2Cookie categories we use
2.1Essential
Required for the Platform to function. Authentication tokens, session IDs, CSRF tokens, and your selected Tier. Cannot be disabled — disabling them breaks login.
2.2Preferences
Your theme, currency, language, dashboard layout, and accessibility settings. Optional but improve experience.
2.3Analytics
First-party usage analytics via PostHog (self-hosted). No third-party ad networks. No cross-site tracking.
2.4Functional
Stripe payment processing, iSoftpull credit pull session, Plaid bank connect — all loaded only when you take an action that requires them.
§3Specific cookies set
| Cookie | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
| pe_session | Prestige | Authenticated session token | 30 days | Essential |
| pe_csrf | Prestige | Cross-site request forgery token | Session | Essential |
| pe_tier | Prestige | Current member tier for UI gating | Session | Essential |
| pe_theme | Prestige | Theme + accessibility preferences | 1 year | Preferences |
| pe_ref | Prestige | Broker referral code attribution | 30 days | Functional |
| ph_* | PostHog | First-party product analytics | 1 year | Analytics |
| __stripe_mid, __stripe_sid | Stripe | Payment fraud prevention | 1 year / 30 min | Functional |
| plaid_* | Plaid | Bank connection session (only when linking) | Session | Functional |
§4Manage your preferences
The cookie consent panel — accessible from the "Cookie settings" link in every page footer — lets you toggle Preferences, Analytics, and Functional categories independently. Essential cookies cannot be disabled.
Your preferences are remembered for 12 months. We'll prompt you again at renewal or when we add new categories.
§5Browser-level controls
You can also block or delete cookies at the browser level. Instructions for the major browsers:
Blocking essential cookies will break login.
§6Do Not Track signals
We honor the Global Privacy Control (GPC) signal where required by state law. The older "Do Not Track" header is not consistently defined and we do not rely on it.
§7Changes to this policy
If we add new cookies or categories, we'll update this page and reprompt your consent. The "Last updated" date at the top reflects the most recent change.
Last reviewed by counsel: May 14, 2026
Contact for legal questions: legal@prestigeecosystem.com