Cookie Notice
Cookies and device storage used by PortfolioCloud
This notice explains the cookies and similar technologies used in the primary PortfolioCloud web app based on the current implementation.
Current position
The primary PortfolioCloud web app currently relies on essential cookies and similar technologies for authentication, platform state, and embedded integration behaviour. The codebase does not currently include advertising tags, and it does not deliberately deploy non-essential analytics cookies in the main app shell.
If non-essential analytics, advertising, or optional recording technologies are introduced in future, PortfolioCloud should update this notice and add consent controls before those technologies are activated for UK users.
Cookies and similar technologies in use
| Name | Type | Purpose | Essential |
|---|---|---|---|
| ASP.NET authentication cookie | Cookie | Keeps authenticated users signed in and tied to the current secure session. | Yes |
PrimarySid |
Cookie | Supports platform session context and user switching behaviour. | Yes |
canvascontext |
Cookie | Supports Salesforce canvas embedding and secure context refresh where that integration is used. | Yes |
ckCsrfToken or editor security tokens |
Cookie | Helps protect rich-text editing and form flows from cross-site request forgery. | Yes |
clientSessionKey |
Session storage | Used only when the session recording feature is enabled so recording chunks can be associated with the correct session. | Yes, when recording is enabled |
Session recording
PortfolioCloud includes an rrweb-based session recording feature that can be enabled by policy for manual or silent recording workflows. Inputs are masked in the client-side recorder, but the feature should still be treated as privacy-sensitive and only enabled where there is a clear operational justification.
Managing cookies
Because the current implementation relies on essential technologies, blocking them may prevent sign-in, secure embedded workflows, or platform navigation from working correctly. Browser controls can still be used to inspect or clear stored data.