Cookie policy of Lightyear

Introduction

Version 2.0
This applies from 25.03.2024.
We are Lightyear, an investment platform that is operated by two companies:
  • Lightyear Financial Ltd, a company registered in England and Wales with company number 12925823, Information Commissioner’s Office number ZA839140 and registered address at 256-260 Old Street, London EC1V 9DD;
  • Lightyear Europe AS, a company registered in Estonia with company number 16235024 and registered address at Volta 1, Tallinn 10412, Estonia.
We use technologies that allow us to access and store information or use resources on your device as they interact with this Website. For simplicity, all such technologies are defined as "Cookies" within this document.
Some of the purposes for which Cookies are used may also require your consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Cookies managed directly by us (so-called “first-party” Cookies) and Cookies that enable services provided by a third-party (so-called “third-party” Cookies). Unless otherwise specified within this document, third-party providers may access the Cookies managed by them.
The validity and expiration periods of Cookies may vary depending on the lifetime set by us or the relevant provider. Some of them expire upon termination of your browsing session.

Definitions

Cookie
Cookie indicates any technology - e.g cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of you, for example by accessing or storing information on your device.
Personal Data (or Data)
means any information relating to an identified or identifiable physical person - an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.
Data Controller (or Lightyear)
means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Website
The means by which your Personal Data is collected and processed.

Cookies that we use

Below, we’ve explained how and why we use Cookies, and what each of them do:
  • Essential cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site.
  • Measurement cookies — Measurement cookies help collect data that allows us to understand how you interact with our particular service. These insights allow us to both improve content and build better features that enhance your experience.
  • Marketing cookies — Marketing cookies track visitor web activity to provide targeted advertisement. These cookies are used to support online marketing by collecting information about the users to promote products through partners and other platforms.
The Cookies that we use are presented in detail in Annex 1. Additionally, you may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Cookies — in the linked privacy policies of the respective third-party providers or by contacting us.
We use Google Tag Manager to manage the tags or scripts needed on this Website in a centralised fashion. This results in your Data flowing through these services, potentially resulting in the retention of this Data. Google Tag Manager is a tag management service provided by Google Ireland Limited (view the Google Privacy Policy).
There are various ways to manage Cookie related preferences and to provide and withdraw consent, where relevant. You can manage preferences related to Cookies from directly within their own device settings, for example, by preventing the use or storage of Cookies.
Additionally, whenever the use of Cookies is based on consent, You can provide or withdraw such consent by setting your preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences privacy widget available
here
.
It is also possible, via relevant browser or device features, to delete previously stored Cookies including those used to remember your initial consent preferences.
Other Cookies in the browser’s local memory may be cleared by deleting the browsing history.
With regard to any third-party Cookies, you can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

Consequences of denying the use of Cookies

You are free to decide whether or not to allow the use of Cookies. However, please note that Cookies help this Website to provide a better experience and advanced functionalities to you (in line with the purposes outlined in this document). Therefore, if you choose to block the use of Cookies, we may be unable to provide related features. Please also note that certain essential cookies will be activated without your consent (as permitted by law). Such cookies are essential for us to provide basic functions on the Website or to access particular features of it.

Data Controller

Lightyear Financial Ltd, 256-260 Old Street, London EC1V 9DD, United Kingdom
Our contact email: dpo@lightyear.com
Since the use of third-party Cookies through this Website cannot be fully controlled by us, any specific references to third-party Cookies are to be considered indicative. In order to obtain complete information, you are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, you are encouraged to contact us should you wish to receive any further information on the use of such technologies by this Website.

Annex 1 - the Cookies we use

Cookie nameLifespanProviderDescription/PurposePrivacy information
Essential cookies
currentAccountsessionLightyearCurrent account ID for the logged in user.Privacy Policy
authToken15 minutesToken to communicate with Lightyear API as a logged in user.
refreshToken30 daysToken to refresh the authToken.
rememberMeToken30 daysToken to remember the user.
guestId 30 daysUnique identifier set for the guest user.
ly-cookie-consent1 yearCookie used to remember the Cookie consent response from the user.
selectedThemesessionSets the theme selected by the user.
branch_urlsessionURL for mobile signups that is based on which page a user landed on.
app_locale1 yearLanguage for the user in authenticated web application.
site_locale1 yearUser picked language on public web pages.
AWSALB
AWSALBCORS
1 weekAmazon Web Services, Inc.Set to provide load balancing functionality.Privacy Policy
Measurement
referrer_id1 dayLightyearReferrer ID used when a user lands on a referred page and used when user signs up to link the referral.Privacy Policy
_ga2 yearsGoogle Analytics (Google Ireland Limited)Used to calculate visitor, session, campaign data and keep track of site usage for the site’s analytics report. It stores information anonymously and assigns a randomly-generated number to identify unique visitors.Privacy Policy
_gac*3 monthsUsed to store and track audience reach.
_gat1 minuteInstalled to throttle the request rate to limit the collection of data on high traffic sites.
_gid24 hoursTracks anonymously the visit of the user. 
FPID2 yearsUsed by Google Analytics to recognize visitors.
_dc_gtm_
property-id
1 minuteUsed to throttle request rate. 
_gaexpmax 93 daysUsed to determine a user's inclusion in Google Optimize experiment.
_gaexp_rc10 secondsUsed to determine a user's inclusion in an experiment and the expiry of experiments that a user has been included in.
_opt_awcid24 hoursUsed for campaigns mapped to Google Ads Customer IDs.
_opt_awmidUsed for campaigns mapped to Google Ads Campaign IDs.
_opt_awgiUsed for campaigns mapped to Google Ads Ad Group IDs.
_opt_awkidUsed for campaigns mapped to Google Ads Criterion IDs.
AMP_TOKEN1 hourContains a token that can be used to retrieve a unique user ID.
test_cookie15 minutesUsed to determine if the user's browser supports cookies.
YSCsessionUsed by YouTube to remember user input and associate a user's actions
GA_OPT_OUT10 Nov 2030 (all cookies)Ensures that marketing preferences are stored and data is deleted accordingly.
_hjCachedUserAttributesduration of the sessionHotjar Heat Maps & Recordings (Hotjar Ltd.)Stores User Attributes which are sent through the Hotjar Identify API, whenever the user is not in the sample. These attributes will only be saved if the user interacts with a Hotjar Feedback tool.Privacy Policy
_hjClosedSurveyInvites1 yearThis cookie is set once a visitor interacts with a survey invitation modal popup. We use it to ensure that the same invite does not reappear if it has already been shown.
_hjDonePolls1 yearThis cookie is set once a visitor completes a poll using the Feedback Poll widget. We use it to ensure that the same poll does not reappear if it has already been filled in.
_hjFirstSeenduration of the sessionUsed to identify a new user’s first session.
_hjIncludedInSessionSample30 minutesSet to let Hotjar know whether that visitor is included in the sample, which lets us generate funnels.
_hjLocalStorageTestduration of the sessionChecks if the Hotjar Tracking Code can use Local Storage.
_hjMinimizedPolls1 yearSet when a user minimises an on-site Survey. This cookie ensures that the Survey stays minimised when the user navigates through our site.
_hjSession*30 minutesUsed to hold current session data only.
_hjSessionRejectedduration of the sessionIf present, this cookie will be set to '1' for the duration of a user's session, if Hotjar rejected the session from connect- ing to our WebSocket due to server overload. This cookie is only applied in extremely rare situations to prevent severe performance issues.
_hjSessionResumedduration of the sessionUsed to store and combine pageviews by a user into a single session recording.
_hjSessionTooLarge1 hourCauses Hotjar to stop collecting data if a session becomes too large.
_hjSessionUser*1 yearSet when a user first lands on a page and is used to store a unique user ID.
_hjSessionUser_*2 yearsSet when a user first lands on a page and is used to store a unique user ID.
_hjShownFeedbackMessage1 yearSet when a visitor minimizes or completes Incoming Feedback. We do this so that the form will be minimised immediately if they navigate to another page where it is set to show.
_hjTLDTestduration of the sessionUsed when the Hotjar script executes and we try to determine the most generic cookie path we should use, instead of the page hostname. We do this so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.
_hjUserAttributesHashduration of the sessionUsed as user attributes are sent through the Hotjar Identify API are cached for the duration of the session in order to know when an attribute has changed and needs to be updated.
_hjViewportIdduration of the sessionStores user viewport details such as size and dimensions.
_hjid1 yearUsed to see the user’s behaviour for our own statistical and monitoring purposes. 
>This cookie lets us identify which users have been randomly selected to take part in a sample to monitor those users’ behaviour on our site. 
>Hotjar also provides us with a heatmap of the site which allows us to monitor, for example, how far you’ve scrolled down a page and where you may have hovered. 
>With session and screen recording, we’re able to get more context for complicated problems — by observing users going through our flows in an uninterrupted manner, in their real life setting. This helps us identify subconscious thought patterns users have, which helps us pin-point where customers might struggle in our product. 
_hjAbsoluteSessionInProgress30 minutesThe cookie is set so Hotjar can track the beginning of the user's journey for a total session count. It does not contain any identifiable information.
ajs_anonymous_id1 yearTwilio Inc.An anonymous ID generated by Analytics.js, used for Segment calls.Privacy Policy
ajs_group_id1 yearA group ID that can be specified by making a group() call with Analytics.js.
ajs_user_id1 yearA group ID that can be specified by making a group() call with Analytics.js.
Marketing
fbp
fbc
3 monthsMeta Platforms Ireland LimitedUsed by Facebook to deliver advertising. The cookie contains an encrypted Facebook user ID and browser ID. It will receive information from this website to better target and optimise advertising. 
>Information collected includes IP addresses, information about the web browser, page location, document, referrer and device, button clicks, pages visited and page metadata.
Privacy Policy
__eoi6 monthsGoogle Analytics (Google Ireland Limited)UnclassifiedPrivacy Policy
__gpi
__gpi_optout
13 monthsDisplay of personalized advertisements in the Google advertising network based on your pseudonymized surfing behavior collected via Google. Measuring and optimizing the success of our Google Ads advertising campaigns.
NID 6 monthsContains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wish to have Google’s SafeSearch filter turned on.
DSID2 weeksUsed to identify a logged in user on non-Google sites and to store user preferences regarding ad personalization.
id13 monthsDoubleClick used to store the user's actions on the website after viewing or clicking on one of the ads.
__gads13 monthsTracks the number of times users see an advert, measures the success of the campaign and calculates its revenue.
GED_PLAYLIST_ACTIVITYSessionUsed for YouTube integration and/or analytics.
ACLK_DATA5 minutesUsed for YouTube integration and/or analytics.
pm_sess30 minutesEnsures that requests within a browser session are made by the user and not by other websites.
pm_sess_NNN30 minutesEnsures that requests within a browsing session are made by the user and not by other websites.
aboutads_sessNNN30 minutesUsed to associate multiple requests made by a user on a page with that user's session.
FPAU90 daysCollects information about the users and their activity on the website through embedded elements with the purpose of analytics and reporting.
ANID13 monthsUsed to link activities on other devices the user has previously logged into with a Google account. 
AID
IDE
TAID14 daysUsed to link activities on other devices the user has previously logged into with a Google account.  
_gcl_au90 daysUsed to store and track conversions.
RUL12 monthsUsed by Google DoubleClick to determine whether a website advertisement has been properly displayed.
FPGCLAW
FPGCLGB
_gcl_gb
_gac_gb_<wpid>
_gac_<wpid>
90 daysUsed to track campaign related information on the user.
_gcl_aw90 daysSet when a user arrives at the website via a click on a Google ad.
1P_JAR30 daysUsed to collect information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
VISITOR_INFO1_LIVE
VISITOR_INFO1_LIVE__k
VISITOR_INFO1_LIVE__default
180 daysSet by YouTube to understand how Youtube videos are viewed on our site.