Cookie Policy

This Cookie Policy explains how WhitePip FX Ltd. (“WhitePips”, “we”, “us”) uses cookies and similar technologies on whitepips.com and in the WhitePips dashboard (together, the “Website”). It forms part of our Privacy Policy and should be read together with it. Capitalised terms not defined here have the meanings given in the Terms of Service.

A cookie is a small text file that a website stores in your browser. Local storage and session storage are similar browser features that let a website remember information on your device. Some of these items are needed for a website to work; others are optional.

First and third party. First-party items are set by whitepips.com. Third-party items are set by another company’s domain. The Website itself sets first-party items only, apart from the optional analytics cookies you can accept or reject; the third parties involved are listed in section 5 (Third parties).

Essential storage is needed to provide the Website and the services you ask for, such as signing in and keeping your account secure. It does not need your consent and cannot be switched off in our settings, although you can block it in your browser, which will stop parts of the Website from working.

Referral links. If you arrive through a trader’s referral link, which ends in ?ref= followed by their code, we store that code so their referral is credited if you go on to buy an account. The first link you arrive through is the one that counts, for 30 days. What is stored is the referral code and the date it was stored, and nothing else: no visitor identifier, no profile, and no record of the other pages you visit. It is functional storage rather than analytics, so it is not covered by the cookie banner; you can remove it at any time by clearing cookies and site data for whitepips.com in your browser.

With your consent, the Website sends a small measurement event when a page is viewed or when an important button is used, such as “Start challenge”, or a form is submitted. We use this to understand which pages help visitors and which do not.

What is collected. Each event contains the page address without personal query parameters, the name of the website that referred you (for example, google.com), campaign tags in the link you followed, a rough screen-size group (small, medium or large), and the country your connection comes from, as reported by our hosting provider. Once per visit we also record where that visit came from, as set out in section 4.11.

What is not collected. Our own measurement stores no IP address, no browser fingerprint and no device advertising identifier, and does not record your screen or keystrokes. Page views and button events are not linked to your account or to each other. The only cookie it sets is wp_src, described in section 4.11.

Where it goes. Events are sent to whitepips.com and stored by WhitePips on our hosting provider’s infrastructure. They are not sold or shared for advertising. We keep them for up to 13 months and then delete them.

Microsoft Clarity. With the same consent, the Website loads Microsoft Clarity, a product analytics tool provided by Microsoft Corporation. We use it to see which parts of a page people click, how far they scroll, where they hesitate and where something is broken, such as a button that does nothing. It records layout, cursor movement, clicks, taps and scrolling, plus your browser, operating system, approximate screen size, country and any JavaScript errors the page produced. Nothing is loaded and no Clarity cookie is set until you accept.

Masking. Clarity replays on this Website are masked. Every form field is masked outright, so what you type into a newsletter or contact form is never sent to Clarity. In the trader dashboard the whole document is masked, so balances, account numbers, payout amounts and your email address never appear in a replay. The dashboard is served from a different address, app.whitepips.com, where the cookie banner does not appear, so unless you have accepted analytics on this website Clarity runs there without setting any cookie at all. It is never loaded in the staff admin panel.

Clarity cookies and where the data goes. Clarity sets _clck on whitepips.com, which keeps one Clarity identifier for this browser for 1 year, and _clsk, which joins the pages you view into a single session and lasts 1 day. Microsoft may also set its own cookies, such as CLID, ANONCHK, MR, MUID and SM, on clarity.ms and c.bing.com when Clarity connects. Data collected by Clarity is sent to and stored by Microsoft, which acts as a processor for us and may process it outside your country, and Microsoft deletes Clarity project data after 13 months. We do not use Clarity data for advertising, we do not link it to advertising profiles, and we do not sell or share it. Microsoft's privacy statement is at privacy.microsoft.com. The website and the trader dashboard are recorded into two separate Clarity projects, so dashboard sessions are never mixed with website traffic.

Google Analytics. With the same consent, the Website and the WhitePips dashboard load Google Analytics 4 (measurement ID G-D169X0CG7P), provided by Google. We use it to see how many people visit, which pages they open and in what order. It collects the page address without personal query parameters, the page title, the website or campaign that referred you, your approximate location from your IP address at country and city level, and your device, browser and screen size. In the dashboard the web address is rebuilt from the page name and section alone, so a one-time link such as a password reset is never sent to Google. Nothing is loaded and no Google Analytics cookie is set until you accept.

Google Analytics cookies and where the data goes. Google Analytics sets _ga on whitepips.com, which keeps one identifier for this browser so repeat visits are counted as one person rather than many, and _ga_D169X0CG7P, which keeps the state of the current visit. Both last up to 2 years and you can delete them in your browser at any time. Data collected by Google Analytics is sent to and stored by Google, which acts as a processor for us under the Google Ads Data Processing Terms and may process it outside your country. Google Signals, advertising features, advertising cookies and ad personalisation are switched off in the tag itself, on every page, so your data is not used to build an advertising profile of you. Google's privacy policy is at policies.google.com/privacy. The website and the dashboard report into one Google Analytics property, so a visit here and the dashboard session that follows it can be counted as one journey; the dashboard is served from app.whitepips.com, where the cookie banner does not appear, so unless you have accepted analytics here it runs there without setting any cookie at all, and if you rejected analytics here it is not loaded there either. It is never loaded in the staff admin panel.

Where a visit came from. With the same consent, once per visit the Website records where that visit came from: the referring website, the campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content and utm_term), the click reference an advertising platform adds to its own links if the link carries one (such as gclid from Google or fbclid from Facebook and Instagram), the page you landed on and when. Our server keeps a random visit identifier with the first and the latest of these sources in wp_src, a first-party cookie on whitepips.com that page scripts cannot read, for 90 days. If you then open a WhitePips account or buy, that first and latest source is recorded against the account and the order, so we can tell which campaigns and websites bring customers and what they cost us. It is not sold, and it is not shared with advertising platforms. Rejecting analytics, or withdrawing your consent later, deletes wp_src; visits recorded before that are kept like our other analytics events, for up to 13 months.

Purchases reported by our server. When a payment is confirmed, our server can also report the purchase to Google Analytics (the order number, the amount and the currency) so that a sale is counted once even if the page was closed before it loaded. It carries no name, email address, IP address or account identifier; it uses your browser’s Google Analytics identifier if you accepted analytics, and otherwise an identifier made for that one report. Nothing is reported if you rejected analytics or your browser sends a privacy signal. Nothing about your visits or purchases is sent to an advertising platform such as Meta unless you have accepted Advertising (section 4.13).

Advertising: the Meta Pixel. The cookie banner asks separately whether we may measure our advertising. Only if you accept Advertising do the Website and the dashboard load the Meta Pixel, provided by Meta Platforms Ireland Limited (Meta Platforms, Inc. outside the European Economic Area). It tells Meta when you view a page, when an account is opened, when a checkout is started (with its amount in US dollars) and when a purchase is completed (with the order number and amount), so we can measure which of our ads on Facebook and Instagram lead to sign-ups and sales, and so Meta can show them to people more likely to be interested. From your browser it sends no name, email address or phone number, and it does not read the forms or buttons on our pages. When a payment or a sign-up is confirmed, and only if you accepted Advertising, our server may also report it to Meta through its Conversions API, with your email address and account identifier hashed (SHA-256) and the IP address and browser of your session, so that an event is counted once even if the page was closed. Rejecting Advertising, or a Global Privacy Control or Do Not Track signal, means nothing of the pixel loads and nothing is sent to Meta.

Meta Pixel cookies and where the data goes. The pixel sets the _fbp cookie on whitepips.com (up to 90 days) and, if you arrived from an ad on Facebook or Instagram, the _fbc cookie (up to 90 days), and Meta may set its own cookies on facebook.com. Meta receives the data as a joint controller with us for collecting it and decides itself how it uses it afterwards, including linking it to your Meta account if you have one; it may process it outside your country. Meta’s privacy policy is at facebook.com/privacy/policy, and you can control ads based on activity off Meta in your Meta account settings. Withdrawing your consent stops the pixel from that moment.

Hosting and security. The Website is served by Cloudflare, Inc. To protect the Website against abuse, Cloudflare may set a strictly necessary security cookie, such as __cf_bm, when it needs to tell people and automated traffic apart. It lasts up to 30 minutes.

Fonts. The Website loads the Inter Tight typeface from Google Fonts. Your browser requests the font files from fonts.googleapis.com and fonts.gstatic.com, which means Google receives your IP address as part of that request. Google Fonts does not set cookies. See Google’s privacy policy at policies.google.com/privacy.

Checkout. When you pay, checkout is provided by a payment provider on its own pages. That provider may use its own cookies, under its own cookie and privacy policies, to process the payment and prevent fraud.

Links to other sites. Links to Discord, X, Facebook, Instagram, TikTok and Threads open those services. We do not embed their content or load their tracking on the Website; once you follow a link, their own policies apply.

Product analytics and advertising. With your consent the Website and the dashboard load Google Analytics 4, provided by Google, which counts page views and sets the cookies named in section 4, and the Website loads Microsoft Clarity, provided by Microsoft Corporation, for heatmaps and masked session replays; it is described in full in section 4, including the cookies it sets and what masking means, and it is off until you accept. Apart from the Meta Pixel, which loads only if you accept Advertising (section 4.13), we do not use advertising cookies, retargeting pixels or cross-site tracking, and we do not use Google Analytics or Clarity to build an advertising profile of you. Where your visit came from (section 4.11) stays with WhitePips.

Cookie banner. When you first visit, a banner lets you accept or reject analytics and advertising; Cookie settings lets you choose each of them separately. Accepting and rejecting are equally easy, and rejecting has no effect on how the Website works. If you accepted analytics before we added the advertising choice, the banner asks you once more.

Changing your mind. You can change your choice at any time with Cookie settings in the footer of every page. Withdrawing consent stops our own measurement and stops Clarity recording from that moment, and tells Clarity to drop its cookies; withdrawing Advertising tells the Meta Pixel to stop sending anything. It does not affect measurement that took place before you withdrew it.

We will update this policy when we change what the Website stores or which third parties are involved. The date at the top shows when it was last updated. Where a change needs your consent, we will ask again.

If you have a question about this policy or about how we use your data, email [email protected]. Our registered details are set out in the Privacy Policy.