The Invisible Infrastructure: A Cookie Policy for Minveo AG
In the architecture of algorithmic finance, trust is the load-bearing wall. Cookies are the silent scaffolding that allows Minveo AG to deliver the precision you demand—from remembering your session state to securing your preference data across the platform. This policy isn't legal boilerplate; it's a technical blueprint of how we maintain continuity and security for our German and US clients.
Executive Summary
- Essential Only: We use strictly necessary cookies for session management and security.
- Zero Tracking: No third-party advertising cookies or data resale.
- Regional Compliance: Aligned with GDPR (DE) and CCPA (US) standards.
The Technical Definition: Why Cookies Exist
A cookie is a small text file that a web server places on your device. For a platform like Minveo AG, which processes complex financial data and automated portfolio adjustments, cookies are not optional—they are foundational. They allow our system to recognize your device securely when you log in, ensuring that your session remains encrypted and that your specific risk profile and portfolio settings are recalled instantly without re-entry. Without them, the "robo-advisory" experience would fracture into a series of disconnected, insecure requests.
We categorize these cookies into two buckets: Strictly Necessary and Functional. The former protects your account (think CSRF tokens and session identifiers). The latter remembers your interface preferences, such as your preferred chart view or dashboard layout. Both are ephemeral or first-party only; none of this data is shared with external networks.
Session Lifecycle
Encrypted Session Active
Operational Matrix: Cookie Types
We do not use cookies for marketing or external analytics. The following table outlines the specific operational use cases within the mx minveo infrastructure.
| Category | Purpose | Data Retention |
|---|---|---|
| Authentication | Maintains secure login state; verifies user identity via encrypted tokens. | Duration of session + 24h grace period. |
| Preference | Remembers UI layout, chart defaults, and notification settings for mxmerchant dashboards. | Persistent (6 months) unless manually cleared. |
| Security | CSRF protection and cross-site request forgery prevention. | Transient (expires immediately after request). |
Note: We do not use "Super Cookies" or "Zombie Cookies". All storage is standard HTTP cookies.
Governance and User Control
As a dual-jurisdiction entity serving Germany and the United States, Minveo AG adheres to the strictest interpretation of applicable law. Under the GDPR (General Data Protection Regulation), you possess the right to access, rectify, or erase your personal data. Under the CCPA (California Consumer Privacy Act), you have the right to know what data is collected and to opt-out of the sale of personal information—though we want to be clear: we do not sell data.
Users can manage cookie preferences directly through their browser settings at any time. We honor "Do Not Track" signals where technically feasible. However, disabling "Strictly Necessary" cookies will fundamentally break the platform's ability to secure your account and execute trades. It is the digital equivalent of removing the locks from a vault door.
Your Rights
- • Right to Access
- • Right to Rectification
- • Right to Erasure
- • Right to Data Portability
The Trust Audit
Questions institutional investors should ask any AI-driven asset manager.
Q: Do you use cookies for behavioral advertising?
A: No. We are an execution-only platform. Your financial behavior is not monetized via ad networks.
Q: Are cookies used to store PII?
A: Never. Cookies store tokens, not names, addresses, or SSNs. PII is encrypted in our database.
Q: What happens on logout?
A: Session cookies are invalidated immediately. Preference cookies remain until expiration.
Q: Is cross-border data transfer compliant?
A: Yes. We utilize Standard Contractual Clauses (SCCs) for EU-US data flows.
Q: Can I opt-out of essential cookies?
A: You may disable them in your browser, but this will render the Minveo platform unusable for security reasons. We cannot bypass our own security model.
Ready to discuss your compliance requirements?
Our team provides detailed compliance documentation for auditors and institutional governance boards.