Cookie Policy

Effective Date: October 2, 2026  |  Version 1.1

OverCap UK Limited (trading as Secondaries.io)

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, provide information to site owners, and improve user experience. Some cookies are essential for the site to function; others help us understand how the site is used.

2. How We Use Cookies

Secondaries.io uses a minimal set of cookies, focused exclusively on platform functionality and security. We do not use advertising cookies, tracking pixels, or any third-party advertising technology.

3. Essential Cookies (Strictly Necessary)

These cookies are required for the Platform to function and cannot be disabled. They do not require your consent under UK data protection law.

CookiePurposeDuration
access_tokenEncrypted session token (JWE) for authentication. Maintains your login state.Session / 24 hours
refresh_tokenUsed to renew your session without requiring re-login.7 days
csrf_tokenCross-site request forgery protection. Prevents unauthorized actions.Session
localeStores your language preference.12 months

We also remember your cookie choice under the name cookie_consent. This is stored in your browser’s local storage— it is not a cookie and has no expiry. It records your analytics preference and remains until you change it (via Cookie settings, see section 6) or clear your browser’s site data. Because it exists only to remember your consent choice, it is strictly necessary and does not itself require consent.

4. Analytics Cookies (Optional)

We do not currently use any analytics cookies. No analytics cookie or usage identifier is set, and no analytics request is made — whether or not you accept optional cookies.

The cookie banner still lets you record a preference for optional analytics. If we introduce analytics in the future, they will only be enabled where you have given consent, this policy will be updated to list each cookie (name, purpose and lifetime) before it is used, and you can withdraw your consent at any time via Cookie settings (see section 6). Declining has no effect on Platform functionality.

5. Third-Party Cookies

We do not allow third-party advertising cookies on the Platform. The only third-party cookies that may be set are:

ProviderPurposeWhen Set
StripePayment processing fraud prevention. Set only during payment flows.When making a payment
LinkedInOAuth authentication. Set only during LinkedIn login flow.When using LinkedIn sign-in

6. Managing Your Cookie Preferences

You can manage your cookie preferences at any time:

  • Cookie banner: When you first visit the Platform, a banner allows you to accept or decline optional analytics cookies.
  • Cookie settings: You can change your choice at any time — including withdrawing consent you previously gave — using the “Cookie settings” link in the footer of every page. Withdrawing analytics consent takes effect immediately, with no need to clear your browser or revisit the site.
  • Browser settings: Most browsers also allow you to block or delete cookies through their settings. Note that blocking essential cookies will prevent the Platform from functioning correctly.

For instructions on managing cookies in your browser:

  • Chrome: Settings > Privacy and security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and site permissions

7. Updates to This Policy

We may update this Cookie Policy to reflect changes in our practices or applicable law. Material changes will be communicated through the cookie banner and in-platform notification. The effective date at the top indicates the most recent revision.

8. Contact

For questions about our use of cookies, contact us at privacy@secondaries.io.

For full details on how we process personal data, see our Privacy Policy.