Cookie Notice
Last updated
6th March 2026
Who are we?
1. This website (“website”) is owned and operated by Xapo Holdings Limited (“xapo”). Any reference to “we” or “us” shall mean Xapo.
What does this notice do?
2. In common with many other websites, we use small files on this website called cookies to help provide you with the best possible online experience. The purpose of this cookie notice is to inform you about what cookies are, how we use them, and what you can do to control them. This cookie notice relates to this website only.
3. We may make changes to this cookie notice from time to time. We may notify you of such changes by any reasonable means, including by posting the revised version of this cookie notice on the website. You can determine when we last changed this cookie notice by referring to the ‘last updated’ statement above. Your use of the website following changes to this cookie notice will constitute your acceptance of those changes. Every time you wish to use the website, please check this cookie notice to ensure you understand the terms that apply at that time.
What are cookies?
4. A cookie is a small text file that is placed on your computer, tablet or smartphone by websites that you visit. They are generally used to make websites function, or function more efficiently. They can allow you to access information that, perhaps, is limited to you as a registered user, or to remember your preferences, or record what you have put in your shopping basket. They also provide information to those operating a website, for example counting the number of people looking at a website, where they come from, the type of browser/device they use.
5. We use cookies and similar technologies on this website to personalize content and to analyze our traffic.
Who sets these cookies?
6. Both first-party and third-party cookies are used on this website.
7. First-party cookies are cookies set by us and which enable the website to work as you might expect it to. They are also used to give us anonymised data about how our website is being used, the browser, the type of device accessing it and where, generally, the device is located.
8. Third-party cookies are set by others, but may also enable us to learn more about our visitors/customers, allowing us to provide a more personalised service, or in connection with advertising.
9. We will ask for your permission to place cookies or other similar on your device, except where it is essential for us to use them in order to provide you with a service that you have requested.
How do we use cookies?
10. We use cookies in a number of ways to improve your experience of using the website. Where applicable, these include:
10.1. Learning how you use the website;
10.2. Showing you content that is relevant to you;
11. The cookies that we use fall into six distinct groups: 11.1. Essential: these cookies are necessary for the operation of this website, or essential to the provision of the services you have requested.
11.2. Performance: these cookies measure how often you visit our sites and how you use them. They also allow us to calculate the number of visitors to this website, see what those visitors do on the website, how long they spend on the website, and which links they click. These cookies help us to improve how this website works, and enable us to make changes so that users stay longer or return more often. If you block these cookies, we will not be able to improve our services as easily.
11.3. Targeting: similar to performance cookies, these cookies tell us which pages you visit, and the links you follow, so that we can make the website more relevant to your interests. If you block these cookies, we will be unable to improve the experience our users get from our website.
11.4. Advertising: these collect information about your visit to this website, such as what you have looked at and the links you have followed, so that we can target our advertising at you, or exclude certain types of advertising that would not interest you. We can also gather information about your browser, device and your ip address. If you block these cookies, you may receive advertising that is not relevant to you.
11.5. Third party cookies: these are used where we use third-party applications on the website to customise the services that we provide, or to provide an increased functionality.
Session cookies are temporary cookies which are stored only until you leave the website, or you close your web browser.
11.6. Persistent cookies last for a fixed period of time, defined within the cookie, and allow the website to recognise the device again when the user returns to that website on that device.
For how long do our cookies last?
12. The cookies we use last for different lengths of time. This depends upon the purpose for which they are used. Please consult the table below for all details.
| Name | Purpose | Storage | Expiration |
|---|---|---|---|
| 1/i/adsct | |||
| Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant. | Pixel | session | |
| CookieConsent | |||
| Stores the user’s cookie consent state. | HTTP | 1 year | |
| Cookiebot2 | |||
| Consent management framework. | HTTP | 1 year | |
| LAST_RESULT_ENTRY_KEY | |||
| Used to track user’s interaction with embedded content. | HTTP | session | |
| LogsDatabaseV2 | |||
| Used to track user’s interaction with embedded content. | Local Storage / IndexedDB | Persistent | |
| ServiceWorkerLogsDatabase#SWHealthLog | |||
| This is used by YouTube to monitor the health and performance of the embedded video player service worker. It is necessary for the stable implementation and functionality of video content on the website. | Local Storage / IndexedDB | persistent | |
| TESTCOOKIESENABLED | |||
| Used to track user’s interaction with embedded content. | HTTP | 1 day | |
| VISITOR_INFO1_LIVE | |||
| Tries to estimate the users' bandwidth on pages with integrated YouTube videos. | HTTP | 180 days | |
| YSC | |||
| Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | HTTP | session | |
| YtIdbMeta#databases | |||
| Used to track user’s interaction with embedded content. | Local Storage / IndexedDB | Persistent | |
| __Secure-ROLLOUT_TOKEN | |||
| Used to track user’s interaction with embedded content. | HTTP | 180 days | |
| __Secure-YEC | |||
| Stores the user's video player preferences using embedded YouTube video | HTTP | session | |
| __Secure-YNID | |||
| This cookie is set by YouTube to track user interaction with embedded video content and to detect security issues or fraud. It may also be used to deliver targeted advertisements based on user behavior. | HTTP | 180 days | |
| __cf_bm | |||
| Distinguishes humans from bots. | HTTP | 1 day | |
| __tld__ | |||
| Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences. | HTTP | session | |
| _cfuvid | |||
| Load-balancing and security. | HTTP | session | |
| _fbp | |||
| Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | HTTP | 3 Months | |
| _ga | |||
| Visitor and device tracking. | HTTP | 2 years | |
| ajs_anonymous_id | |||
| Anonymous visitor identification. | Local Storage | persistent | |
| Anonymous visitor identification. | HTTP | 1 year | |
| ajs_user_id | |||
| This cookie is used to collect data on the visitor's behavior on the website - this information can be used to assign the visitor to a visitor segment, based on common preferences. | HTTP | session | |
| Collects data on visitors' preferences and behaviour on the website - This information is used make content and advertisement more relevant to the specific visitor. | Local Storage | persistent | |
| analytics_session_id | |||
| Session timing. | Local Storage | persistent | |
| Session timing. | HTTP | 1 year | |
| analytics_session_id.last_access | |||
| Session activity tracking. | Local Storage | persistent | |
| Session activity tracking. | HTTP | 1 year | |
| bcookie | |||
| Spam detection and security. | HTTP | 1 year | |
| captcha_v4_user | |||
| This cookie is used to recognize the user and differentiate them from bots. This is necessary for the security of the website and to prevent fraudulent form submissions. | HTTP | 1 year | |
| cid | |||
| Session-level analytics ID. | Local Storage | session | |
| com.kochava.tracker.DeviceId | |||
| This tracker is used by Kochava to generate a unique device ID for the visitor. It is used to track user interactions across multiple websites and mobile applications to attribute conversions to advertising campaigns. | Local Storage | persistent | |
| com.kochava.tracker.EventQueue | |||
| This tracker is used by Kochava to queue and store user interaction events (such as clicks or conversions) before they are transmitted to the platform for attribution and ad-spend measurement. | Local Storage | persistent | |
| com.kochava.tracker.FirstStartDate | |||
| This cookie is used by Kochava to track the date of the user's first visit. It helps in attributing user activity to specific marketing campaigns and measuring advertising ROI. | Local Storage | persistent | |
| com.kochava.tracker.IdLinkQueue | |||
| This tracker is used by Kochava to temporarily store identity linking requests. It allows the platform to associate a user's internal identity with their device for more accurate cross-platform marketing and attribution. | Local Storage | persistent | |
| com.kochava.tracker.IdentityLinks | |||
| This tracker stores the linked identity data for the user. It enables Kochava to connect different identifiers to a single profile for the purpose of cross-device tracking, personalized advertising, and precise attribution. | Local Storage | persistent | |
| com.kochava.tracker.InstallCount | |||
| This tracker is used by Kochava to count the number of times a user has installed the application. It is used to measure the success of advertising campaigns and to attribute new installs to specific marketing sources. | Local Storage | persistent | |
| com.kochava.tracker.InstallSentDate | |||
| This tracker is used by Kochava to record the date and time when an install event was successfully sent to the server. It is used to validate advertising attribution and ensure accurate reporting for marketing campaigns. | Local Storage | persistent | |
| com.kochava.tracker.KvinitSentDate | |||
| This tracker is used by Kochava to record the date and time when the initialization data was sent to the server. It ensures that user attribution and session data are accurately synchronized for advertising measurement. | Local Storage | persistent | |
| com.kochava.tracker.LastInstall | |||
| This tracker records the timestamp of the user's most recent installation. It is used by Kochava for advertising attribution and to distinguish between new and returning users for marketing campaign optimization. | Local Storage | persistent | |
| com.kochava.tracker.LastKvinit | |||
| This tracker is used by Kochava to record the timestamp of the most recent SDK initialization. It ensures that user sessions and attribution data are accurately synced between the website and the Kochava analytics platform. | Local Storage | persistent | |
| com.kochava.tracker.SessionCount | |||
| This tracker is used by Kochava to count the number of sessions a user has initiated. This data is used for audience segmentation, measuring user retention, and optimizing targeted advertising campaigns based on engagement levels. | Local Storage | persistent | |
| firebase-heartbeat-database#firebase-heartbeat-store | |||
| Used in order to detect spam and improve the website's security. | IndexedDB | persistent | |
| firebase:host:#.firebaseio.com | |||
| Firebase host configuration. | Local Storage | persistent | |
| ga* | |||
| Session-level analytics. | HTTP | 2 years | |
| guest_id | |||
| Collects data related to the user's visits to the website, such as the number of visits, average time spent on the website and which pages have been loaded, with the purpose of personalising and improving the Twitter service. | HTTP | 400 days | |
| guest_id_ads | |||
| Collects information on user behaviour on multiple websites. This information is used in order to optimize the relevance of advertisement on the website. | HTTP | 400 days | |
| guest_id_marketing | |||
| Collects information on user behaviour on multiple websites. This information is used in order to optimize the relevance of advertisement on the website. | HTTP | 400 days | |
| lastExternalReferrer | |||
| Detects how the user reached the website by registering their last URL-address. | Local Storage | persistent | |
| lastExternalReferrerTime | |||
| Detects how the user reached the website by registering their last URL-address. | Local Storage | persistent | |
| li_gc | |||
| Stores consent state for LinkedIn services. | HTTP | 180 days | |
| lidc | |||
| Server-cluster routing for load balancing. | HTTP | 1 day | |
| muc_ads | |||
| Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant. | HTTP | 400 days | |
| personalization_id | |||
| Enables Twitter sharing and interaction. | HTTP | 400 days | |
| remote_sid | |||
| Necessary for the implementation and functionality of YouTube video-content on the website. | HTTP | session | |
| rum_session | |||
| This cookie is used to collect data on the website's performance and speed. It helps the website owner understand how users interact with the site to improve the browsing experience. | Local Storage | session | |
| sid | |||
| Chat session continuity. | Local Storage | session | |
| twpid | |||
| This cookie is set by Twitter (X) to track visits across websites and deliver targeted advertisements, or to measure the effectiveness of ad campaigns. | Local Storage | persistent | |
| yt-icons-last-purged | |||
| Necessary for the implementation and functionality of YouTube video-content on the website. | Local Storage / IndexedDB | Persistent | |
| yt-remote-cast-available | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | session | |
| yt-remote-cast-installed | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | session | |
| yt-remote-connected-devices | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | persistent | |
| yt-remote-device-id | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | persistent | |
| yt-remote-fast-check-period | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | session | |
| yt-remote-session-app | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | session | |
| yt-remote-session-name | |||
| Stores the user's video player preferences using embedded YouTube video | Local Storage | session | |
Choices about cookies
13. You can choose at any time which of the following cookies we can set in our cookie control panel by clicking on the button(s):
Strictly necessary cookies ALWAYS ACTIVE
Analytical or performance cookies OFF
Functionality cookies OFF
Targeting cookies OFF
Advertising cookies OFF
Third party cookies OFF
You can also choose to "Reject All" cookies in the cookie banner.
However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
See the table above for further information as to when cookies expire.
Contact
14. If you have additional questions about how we use or store cookies, or about removing them, you can contact our Data Protection Officer at [email protected].