Effective date: July 24, 2026
This Cookie & Tracking Technologies Policy explains how Hapi Corp. and its affiliates (collectively, "Hapi," "we," "our," or "us") use cookies and similar technologies on our websites, mobile apps, and other online services (the "Services"). It supplements our Privacy Policy.
What are cookies and tracking technologies?
Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as pixels, embedded scripts, software development kits (SDKs), and browser local storage (together, "Tracking Technologies"). These technologies fall into four categories, described below.
Your consent controls the optional categories. When you first visit our Services, a consent banner lets you accept all, reject all, or manage preferences by category. Functional, Analytics, and Marketing technologies do not load, and no data is sent to the associated third parties, unless and until you accept them. You can change or withdraw your consent at any time through the "Cookie Preferences" link in the footer of our website.
The third-party providers that may place or access Cookies on our Services, subject to your consent choices, are: Google (Analytics and Ads), Meta, Microsoft (Clarity), Amplitude, AppsFlyer, Customer.io, Intercom, and Attributer. Amazon Web Services provides our hosting infrastructure.
1. Strictly Necessary
These are required for the Services to function — sign-in, account security, and remembering your cookie choices. They cannot be disabled.
Name | Provider | Purpose | Duration |
token / access_token / refresh_token | Hapi | Authentication session tokens | Session |
sessionKey | Hapi | Session identifier | Session |
isAuthenticated | Hapi | Login state flag | Session |
csrf_token | Hapi | Security (anti-CSRF protection) | Session |
_mmapiwsid | Hapi | Internal API/session cookie | Session |
AWSALB / AWSALBCORS | Amazon Web Services | Load-balancer session routing (infrastructure) | 7 days |
hapi_consent | Hapi | Stores your cookie consent choices | 6 months |
2. Functional
These enable enhanced features and personalization, such as the in-app support chat. Disabling them may limit certain features.
Name | Provider | Purpose | Duration |
intercomUserToken | Intercom | Links you to your support-chat identity | 1 year |
intercom-device-id-* | Intercom | Support-chat device identifier | 9 months |
intercom-session-* | Intercom | Support-chat session identifier | 7 days |
More about Intercom: https://www.intercom.com/legal/privacy
3. Analytics
With your consent, these help us understand how the Services are used — pages visited, navigation patterns, and product performance — so we can improve the experience.
Name | Provider | Purpose | Duration |
_clck | Microsoft Clarity | Recurring-visitor identifier and preferences | 1 year |
_clsk | Microsoft Clarity | Groups pageviews into a single session | 1 day |
CLID | Microsoft Clarity | First-visit identifier | 1 year |
ANONCHK / MR / SM | Microsoft Clarity | Session-support cookies | 10 min – session |
AMP_e3da72cae1 | Amplitude | Product usage and behavior events | 1 year |
ajs_anonymous_id | Anonymous visitor identifier; pageview events | 1 year |
Session replay. Where you have consented to Analytics, Microsoft Clarity may record how you interact with our pages (clicks, scrolling, mouse movement) to help us identify usability problems. These recordings are configured to mask sensitive input fields. More about Clarity: https://privacy.microsoft.com/en-us/privacystatement
4. Marketing
With your consent, these measure the performance of our advertising campaigns, attribute visits and app installs to their marketing source, and may be used with our advertising partners to show you relevant Hapi content and ads on other platforms.
As a self-directed brokerage business, we do not use these technologies to advertise specific securities or investment products.
Name | Provider | Purpose | Duration |
_fbp | Meta (Facebook/Instagram) | Ad conversion measurement and retargeting (Meta Pixel) | 90 days |
_gcl_au | Google Ads | Links ad clicks to conversions (Conversion Linker) | 90 days |
Google Ads account tag | Google Ads | Remarketing and attribution | 13 months |
MUID | Microsoft | Cross-service visitor identifier (Microsoft Advertising) | 1 year |
SRM_B | Microsoft | Visitor ID for Microsoft/Bing ad correlation | 1 year |
_iidt | AppsFlyer | Web-to-app install attribution | 1 year |
ss_incoming_params / ss_webReferrer (local storage) | AppsFlyer OneLink | Preserves campaign parameters (UTM, click IDs) across web-to-app transitions | 2 hours |
AMP_MKTG_e3da72cae1 | Amplitude | Ties product events to the marketing campaign that referred you | 1 year |
How to manage your choices
Consent banner / Cookie Preferences. Accept, reject, or customize optional categories at any time via the "Cookie Preferences" link in our website footer. Rejecting optional categories does not affect your ability to use the Services.
Browser settings. Most browsers let you block or delete cookies. Blocking strictly necessary cookies may break sign-in and core features.
Interest-based advertising opt-outs. Network Advertising Initiative (http://www.networkadvertising.org/choices), Digital Advertising Alliance (http://www.aboutads.info/choices), and device settings ("Limit Ad Tracking" on iOS; "opt out of interest-based ads" on Android).
Google Analytics opt-out. https://tools.google.com/dlpage/gaoptout/
Changes to this Policy
We may update this Policy as the technologies we use change. When we do, we will revise the Effective Date above. Material changes to the categories or providers listed here are reflected in the consent banner.
Contact
Questions? Contact us at [email protected]