Privacy

Cookie Policy

Last updated: July 2026

We keep this simple: InvesTTable uses the cookies needed to keep your session secure and your preferences intact, plus optional marketing cookies that we set only after you opt in. No advertising networks, no data brokers.

Strictly necessary cookies

These cookies are essential for the platform to function. They maintain your authenticated session via Supabase and remember whether you chose to stay logged in. If you choose "Stay signed in" at login, your session remains active for up to 30 days and is extended automatically while you keep using the platform. They cannot be disabled.

Always active

Secure sign-in session

Keeps you securely signed in through Supabase. If you choose "Stay signed in", it lasts up to 30 days and renews automatically while you keep using the platform.

Stored as sb-[ref]-auth-token

"Stay signed in" choice

Remembers whether you asked to stay logged in. Expires after 1 year or when you sign out.

Stored as inv_remember

One active session per account

Limits investor accounts to a single active login at a time. Expires after 30 days of inactivity or when a newer login replaces it.

Stored as x-inv-sid

Local storage & preferences

These browser local storage entries (not cookies) remember your UI preferences. They are stored client-side only, never transmitted to our servers, and are cleared when you clear your browser data.

Optional

Dark or light mode

Remembers your appearance preference. Stored only in your browser.

Stored as investtable-theme

Feedback survey (last sent)

Remembers when you last submitted feedback, so we do not ask you again too soon.

Stored as nps_last_submitted

Feedback survey (last dismissed)

Remembers when you last dismissed the feedback survey.

Stored as nps_last_dismissed

Marketing & CRM cookies

When you opt in, we load HubSpot (EU region), which sets cookies to recognise you across visits and link your page views to your contact record in our CRM. We use this for lead follow-up and product communication, never for third-party advertising. Nothing loads until you enable it in cookie settings, and turning it off again clears these cookies.

Optional, off by default

Recognise returning visitors

HubSpot uses these to recognise you across visits and link your page views to your CRM contact. Expires after about 6 months.

Stored as __hstc / hubspotutk

Current visit

HubSpot tracks your current session. Expires after 30 minutes.

Stored as __hssc

New session detection

HubSpot uses this to detect the start of a new session. Cleared when you close your browser.

Stored as __hssrc

Analytics cookies

We do not use general-purpose analytics cookies such as Google Analytics, Meta Pixel, or Hotjar. Server-side request logging via Vercel is aggregate only and sets no cookies. The only third-party tracking we use is HubSpot, covered under "Marketing & CRM" above and loaded only with your consent.

Not used

Your rights under GDPR

As an EU resident, you have the right to access, correct, and delete your personal data at any time. You can withdraw cookie consent by clearing your browser cookies or through your browser settings. For data-related requests (right of access, erasure, or portability), contact us at privacy@invest-table.com.

Third-party services

InvesTTable uses Supabase (authentication and database, EU region), Stripe (payment processing), Vercel (hosting and edge delivery), HubSpot (CRM and marketing, EU region, loaded only after you opt in via cookie settings), and YouTube / Google (pitch video embeds). YouTube videos use a click-to-play facade: no connection to Google servers is established until you actively click the video. Playback uses YouTube's privacy-enhanced mode (youtube-nocookie.com). Please refer to the respective privacy policies of these services for details.