Cookies and browser storage support sign-in and optional workspace preferences.
Interface language
The interface language you select is saved in northstar-language so it follows you between pages and visits on this browser. Changing the language does not change your account data.
Essential sign-in cookie
northstar_session is an HttpOnly, SameSite=Lax session credential scoped to this site. The server currently sets a maximum browser lifetime of 400 days; logging out clears the cookie. Secure is added for HTTPS connections. Browser expiry is not a promise that server-side session records are deleted at the same time.
Essential browser storage
Session storage holds a platform API cache, assisted-view state, and shown-notification identifiers for the current tab. Local storage also supports pending registration review and your cookie preference choice. These support requested access, continuity, and storing your privacy selection. Signing out and closing tabs affect different records differently.
Optional preferences
With your permission, local storage remembers theme, collapsed navigation and trading panels, chart layouts and drawings, multi-chart settings, and the Admin overview tab. The keys use northstar-theme, northstar-sidebar-collapsed, northstar-market-panel-collapsed-v1, northstar-order-ticket-collapsed-v1, northstar-chart-workspace-v1:, northstar-multi-chart-workspace-v1, and northstar.admin.overview.tab.v1. They have no automatic browser expiry and remain until cleared or permission is withdrawn.
Choices and withdrawal
Optional preference storage is off until you enable it. Cookie settings lets you enable or refuse it at any time. Refusing removes the listed stored preferences while keeping authentication records. Your choice is saved for up to six months in platform-privacy-choice-v1. A setting already applied on screen may remain until the next page load. Clearing site data can reset your choice and sign you out.
Third-party resources
The current source includes Google Fonts and externally hosted libraries, including assets delivered through cdnjs and jsDelivr. Requests to these providers disclose connection information. No advertising or analytics integration was identified in the current source review. This control does not block those resource downloads; integrations and provider behaviour need reassessment when they change.