Version 0.1 · 16 July 2026. This document is provisional and is under review by counsel.
Actum sets strictly necessary cookies only. They exist to sign you in and to keep those sign-ins safe. There are no advertising cookies, no third-party analytics cookies, and no tracking of you across other sites.
| Name | Purpose | Lifetime |
|---|---|---|
| authjs.session-token | Keeps you signed in. Set when you sign in; carries your session. | 30 days |
| authjs.csrf-token | Protects sign-in and sign-out forms against request forgery. | Until the browser closes |
| authjs.callback-url | Returns you to the page you came from after signing in. | Until the browser closes |
On secure connections the session and callback cookies carry a __Secure- prefix and the CSRF cookie a __Host- prefix — same cookies, hardened names.
The app also keeps working state in your browser’s local storage, under the key actum:store:v1 — favorites, saved searches, and recently viewed listings. This never leaves your device by itself and stays until you clear your browser data.
Because every cookie we set is strictly necessary to provide the service, no consent banner is required. If that ever changes — if we add any cookie that is not strictly necessary — we will update this policy and ask for your consent first.
Questions: privacy@actum.capital. See also our terms of service and privacy policy.