Cookies
Cookie and measurement notice.
Algo Hosting is operated by Tosecom. Nothing optional runs until you choose. Version 2026-08-28.1, effective 28 August 2026.
Strictly necessary
Sign-in and session integrity, security and fraud prevention, checkout state, and the record of your own cookie choice. These are needed to provide the service and are not optional.
Analytics
Aggregate site and product analytics, and session replay limited to public marketing and plan pages. Off until you accept the analytics category.
Advertising
Measures which advertising led to an order, using an order reference rather than the contents of your order. Off until you accept the advertising category.
Functional
Reserved for optional convenience features. Nothing is currently loaded under this category.
Consent policy version 2026-08-28.1. If this notice changes materially, the version changes and you are asked again rather than carried over.
Delivery network and infrastructure
What the network in front of this site does, and what it no longer does.
- Cloudflare serves and protects this site: request routing, caching, TLS and protection against abusive traffic. That is infrastructure processing every hosting provider performs, it is not browser analytics, and a cookie choice does not switch it off.
- Cloudflare Web Analytics was previously inserted into pages by that network before the application was involved. It was cookieless and built no profile. It was switched off on 2026-08-28 and is no longer loaded; this notice records it rather than quietly dropping the line.
- No measurement now runs before you make a choice. Everything in the categories below waits for your decision.
Before you choose
Strict opt-in, applied globally rather than by region.
- Until you make a choice, the application loads only itself and the consent banner. Google Analytics, Google Ads, Meta, X and PostHog are not requested at all.
- Since 28 August 2026 that is the whole picture: the delivery network no longer adds any browser measurement of its own either.
- Google Consent Mode is used in its basic form, so no measurement is sent to Google before your choice, not even a cookieless signal about the choice itself.
- Advertising click identifiers that happen to be in the address bar are held in browser memory only while the banner is open. They are stored only if you then accept the advertising category, and are discarded otherwise.
- Accepting and rejecting are offered with equal prominence on the first layer of the banner, with no category pre-selected.
Changing or withdrawing consent
A choice can be changed at any time, and takes effect immediately.
- Use the Cookie settings control below or in the site footer. The change applies without needing to reload or navigate.
- Withdrawing a category stops further transmission from that category's providers and deletes the first-party cookies and browser storage Algo Hosting is able to delete.
- Data already transmitted to a provider before withdrawal cannot be recalled by this control. Requests about data already held by a provider can be made to Algo Hosting or to that provider directly.
- Withdrawing advertising consent also deletes the stored advertising attribution record described below.
Advertising attribution
A single first-party record, created only after advertising consent.
- Where you accept the advertising category, Algo Hosting may store the campaign parameters and advertising click identifiers that were present when you arrived, together with the landing page path.
- The browser holds only an opaque, signed, expiring token. The campaign values are stored on the Algo Hosting server, so the cookie itself is not a readable advertising profile.
- Only a fixed list of parameters is kept. Arbitrary query-string values are discarded, and stored paths are stripped of query strings.
- The record expires automatically after the configured retention period and is deleted when advertising consent is withdrawn.
Session replay safeguards
Replay exists to find usability problems on public pages, not to watch customers use their account.
- Replay runs only after analytics consent, and only on public marketing, plan and article pages.
- The dashboard, admin surfaces, support tickets, invoices and billing detail, authentication pages, checkout, and any page showing server or credential information are never recorded.
- All form inputs are masked in the browser before anything is transmitted, and masked content is never sent.
- Network request and response bodies and browser console output are not captured.
What is never collected for measurement
Operational service records and optional measurement are kept apart.
- RDP or Windows credentials, server login details, customer VPS IP addresses, broker credentials, trading account identifiers, strategy or expert advisor names, and support ticket contents are never sent to an analytics or advertising provider.
- Order values sent to advertising providers come from the platform's own verified order record and consist of an amount, a currency and the public order reference.
- Where an advertising provider supports improved matching, identifiers are irreversibly hashed on the Algo Hosting server before transmission and are never exposed to the browser.
- Running the service — accounts, orders, invoices, provisioning, support and security — does not depend on any of the optional categories, and continues normally if you reject them all.
Retention and transfers
Stated as what is known, without guarantees that cannot be evidenced.
- Algo Hosting keeps its own measurement records for as long as needed to report on and correct conversions, and deletes expired attribution records automatically.
- Each provider applies its own retention to the data it holds; the provider register below links to each provider's own notice.
- Several providers are able to process data outside the European Economic Area. Where that happens, it takes place under the transfer arrangements offered by that provider. Algo Hosting does not claim any additional guarantee beyond those arrangements.
- PostHog is used on its European Union cloud region. That is a configuration choice recorded here, not a certification.
Provider register
Every measurement provider this site is able to load, the consent category that controls it, and where that provider states it processes data. A provider not listed here cannot be loaded by the site. The last two entries are not loaded by the site at all: one was inserted by the delivery network in front of it and has since been withdrawn, and the other is that network itself.
- Google Tag Manager
- analytics — European Union, United States and other Google locations
- Google Analytics 4
- analytics — European Union, United States and other Google locations
- PostHog Cloud EU
- analytics — European Union (PostHog Cloud EU)
- Meta Pixel and Conversions API
- advertisement — European Union, United States and other Meta locations
- X Pixel and Conversion API
- advertisement — European Union, United States and other X locations
- Cloudflare Web Analytics
- withdrawn 2026-08-28 — no longer loaded
- Cloudflare (delivery network)
- infrastructure — routing, caching, TLS and abuse protection
Related resources