Cookie Policy

Mast Finance Sàrl — Effective date: 24 February 2026 — Version 1.0

This Cookie Policy explains what cookies and similar technologies are, which ones Mast Finance uses on the Service, why we use them, and how you can manage your preferences. It should be read alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website or use an online service. They allow the service to recognise your device across sessions and store certain preferences. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (retained for a defined period).

This policy also covers local storage, a similar browser technology used to store small amounts of data on your device.

2. Cookies and Local Storage We Use

2.1 Essential (Strictly Necessary)

These are strictly necessary for the Service to function. They cannot be disabled without impairing core functionality. They are placed without requiring your consent.

Essential storage is used for:

• Authentication and session management — keeping you logged in securely.
• Security — protecting against cross-site request forgery and other threats.
• Consent preference — remembering your cookie choice.

2.2 Analytics (Consent Required)

These are placed only with your consent. They allow us to understand how users navigate and use the Service to improve performance and usability. Analytics data does not identify you personally.

Analytics storage is used for:

• measuring page views, session durations, and feature usage;
• identifying errors or areas of poor performance;
• informing product development decisions.

Privacy safeguards:

• Self-hosted analytics — Our analytics platform is self-hosted on our own infrastructure in the AWS Switzerland (Zurich) region. No analytics data is shared with or processed by any third party.
• IP anonymisation — IP addresses are not stored or processed by our analytics platform.
• Session recording masking — All form inputs and on-screen text are automatically masked to prevent capture of personal or sensitive information.
• No data collection before consent — The analytics library is loaded in an inactive state. No data is collected or transmitted until you provide consent.

3. Storage Details

Note: Analytics entries (ph_*) are only created after you provide consent. Before consent, analytics operates in memory only.

4. Managing Your Cookie Preferences

You can manage your preferences in the following ways:

• Cookie banner — On your first visit, you can accept or decline analytics cookies.
• Cookie settings link — Update your preference at any time via the "Cookie Settings" link in the footer.
• Browser settings — Most browsers allow you to block or delete cookies and local storage. Blocking essential storage will impair your ability to use the Service.

Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

5. Third-Party Cookies

We do not use third-party advertising or tracking cookies. Our analytics platform is self-hosted on our own infrastructure. No analytics data is shared with or processed by any third party.

6. Data Retention for Analytics

• Event data (page views, feature usage): 90 days.
• Session recordings: 30 days.

After these periods, data is automatically and permanently deleted.

7. Changes to This Policy

We may update this Cookie Policy at any time. The current version is always available at /cookies.

8. Contact

For questions about cookies or this policy, please contact us at contact@mastfinance.io.

Mast Finance Sàrl — Rue Centrale 15, 1003 Lausanne, Switzerland — contact@mastfinance.io