Legal
Cookie Policy
Every cookie and browser store this site and the application use, named individually.
Version 2026-09-26 · not in force
Draft: not yet in force
This text is complete but is not yet in effect: the registered name of the operating company and its registered address for notices has not been recorded in it. An effective date will be published once that is done.
This Cookie Policy is issued by KuantTrade (the "Company") and forms part of the Privacy Policy. It identifies, individually, every cookie and equivalent browser storage employed by the Company's website and application, the purpose of each and the period for which each persists.
The complete list appears in Sections 2 and 3. The Company operates no analytics, no advertising technology and no third-party scripts upon its website, and accordingly displays no consent banner; Section 2.3 explains why none is required.
1. Cookies and the things that behave like them
A cookie is a small file a site asks your browser to keep and send back on later visits. Local storage does a similar job without being sent anywhere: it stays in your browser and is read by the page. Both are covered here, because from your point of view the question is the same one: what is being kept on my device, and why.
This policy covers https://kuanttrade.com and the KuantTrade application at https://app.kuanttrade.com. It forms part of the Privacy Policy.
2. On this website
2.1 Complete list.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| NEXT_LOCALE | Cookie: strictly necessary | Records which language the site is serving you. On a first visit it is set from the language your browser asks for; after that it records the language you last selected, so the site does not send you back to the other one. It holds one of two values and nothing else. | One year |
| theme | Local storage | Remembers whether you chose the light or dark appearance, or asked to follow your system setting. Never sent to us. | Until you clear your browser storage |
2.2 What is not present.
That is the complete list. This site loads no analytics, no advertising or marketing technology, no tracking pixels, no session recording, no social media embeds, no chat widget, and no third-party scripts of any kind. Nothing here follows you to another site, and nothing here builds a profile of you.
2.3 Why no consent banner is displayed.
The one cookie this site sets carries a language and nothing more, is read only by this site and is what makes the site answer in the language you are reading. Because this website currently uses only storage technologies that are strictly necessary to deliver the page you asked for, we do not ask for consent to them, and no consent banner is displayed. If we introduce any non-essential technology, it will remain disabled until the consent required in your jurisdiction has been obtained, and this page will list it before it ships.
3. In the application
3.1 Complete list.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| session_id | Cookie: strictly necessary | Keeps you signed in. It holds only an opaque identifier; the session itself lives on our servers. Page scripts cannot read it, and it is only ever sent over an encrypted connection. | 24 hours, or until you sign out |
| strategies_view_mode | Local storage | Remembers whether you last viewed your strategies as a list or as cards. | Removed when you sign out; otherwise when you clear your browser storage |
| optionsQuoteBroker | Local storage | Remembers which broker’s quotes the options panel was last showing. | Removed when you sign out; otherwise when you clear your browser storage |
| oauth_state | Cookie: strictly necessary | Set only while you are signing in with an external sign-in provider. It holds a random value that we compare when the provider sends you back, which is how we can tell your sign-in from one somebody else started in your browser. Page scripts cannot read it, and it is sent only to the sign-in endpoints. | Ten minutes, and deleted as soon as the sign-in completes |
| pkce_verifier | Cookie: strictly necessary | Set only while you are signing in with an external sign-in provider. It holds a one-time secret that proves the code the provider returns was issued to this browser and not intercepted. Page scripts cannot read it, and it is sent only to the sign-in endpoints. | Ten minutes, and deleted as soon as the sign-in completes |
| redirect_uri | Cookie: strictly necessary | Set only while you are signing in with an external sign-in provider. It records where in the application to return you after sign-in, so you arrive back where you started. Page scripts cannot read it. | Ten minutes, and deleted as soon as the sign-in completes |
| pending_oauth_registration | Cookie: strictly necessary | Set only the first time you sign in with an external sign-in provider, before an account exists. It carries, in signed form, what that provider told us about you (your email address, name, your account identifier at that provider and your profile picture link) across the step where you review and accept our terms, so no account is created until you have agreed. Page scripts cannot read it, and it is sent only to the sign-in endpoints. | Fifteen minutes, and deleted as soon as registration completes |
| gw_access_<your account id> | Cookie: strictly necessary | Set only if you connect a broker whose account access runs through a gateway we operate for you. It authorises your browser to reach the broker gateway we run on your behalf, and carries no information about you beyond that authorisation. The key carries your account identifier so that a shared browser cannot use one person’s authorisation for another. Page scripts cannot read it. | One hour, then re-issued while you are using the gateway |
| smartapp_broker_account_types_<your account id> | Local storage | Holds the account type reported by each broker you have connected, so a table can label a position as paper or live without waiting for a request to finish. The key carries your account identifier so that signing in as somebody else upon a shared browser does not show that person your labels. | Removed when you sign out, when the application next detects that your session has ended, and when another account signs in on the same browser; otherwise when you clear your browser storage |
| pendingStrategyFromSignal_<your account id> | Local storage | Carries a strategy you began building from a signal across a single navigation, so the form is still filled in when the next page opens. It is written when you begin and read once upon arrival. | Removed when you sign out, when the application next detects that your session has ended, and when another account signs in on the same browser; otherwise when you clear your browser storage |
The session cookie is what makes signing in work. If you block it, you cannot use the application.
4. Third-party cookies
We set none, and no third party sets any through us.
Two things are worth distinguishing from that. First, when you sign in through an identity provider, or when you connect a broker, you are sent to that company’s own site to sign in there; that site sets its own cookies under its own policy, and comes back to us with a result. Second, if you install the mobile app and enable notifications, your device registers with the push notification service your operating system provides; that is a device registration rather than a cookie, and it is described in the Privacy Policy.
5. Controlling them yourself
Every browser lets you see the cookies and storage a site is using, delete them, and block them. The controls are usually under Privacy or Site settings, and most browsers let you do it for one site without affecting the rest.
Blocking what is listed here has a predictable effect and no other: the website will forget your language and your light/dark choice, and the application will not be able to keep you signed in. Nothing else about this site depends on any of it.
6. Changes
If we add anything that stores data on your device, this page will list it before it ships, and anything that is not strictly necessary will ask your consent first. The list above is checked against the code rather than written from a template, and KuantTrade treats a wrong entry here as a defect.
Questions: privacy@kuanttrade.com.
Published at https://kuanttrade.com. Version 2026-09-26.