Cookie Policy
VERSION 2.10 · EFFECTIVE NOVEMBER 3, 2026 · QUANTGPT LLC, A FLORIDA LIMITED LIABILITY COMPANY
This policy explains the cookies and similar technologies used on quantgpt.co, its subdomains, and the QuantGPT terminal. It is part of our Privacy Policy.
// THE ONE-LINE VERSION
The terminal sets only the cookies needed to keep you logged in and to keep it safe. The marketing site, quantgpt.co, adds one advertising partner pixel and Google Analytics for visitors in the United States whose browser sends neither Global Privacy Control nor Do Not Track. Both are on by default for them, and they can opt out of both at any time.
// WHAT A COOKIE IS
A cookie is a small text file a website stores in your browser. Strictly necessary cookies make a site work, for example by remembering that you are logged in. Other kinds can track browsing across sites for advertising. The terminal uses only the first kind; the exceptions on the marketing site are described under Advertising Measurement and Analytics below.
// THE COOKIES WE SET
| Cookie | Set by | Purpose | Lifetime | Type |
|---|---|---|---|---|
session | QuantGPT terminal | Keeps you signed in to the terminal and ties your requests to your account. Signed so it cannot be forged. Marked Secure and HttpOnly. | Browser session, or up to 30 days if you stay signed in | Strictly necessary |
qg_theme | QuantGPT terminal, for quantgpt.co and its subdomains | Your Appearance choice on the account page, day or system, so pages open in it before they draw. Not set while you keep the default, Night. Holds no identifier. | 1 year, or until you choose Night | Preference |
qg_attr | QuantGPT terminal | Attribution: the partner code and campaign tags on the link that brought you to the terminal or, with neither, the name of the site that sent you as one word (for example google), so a signup on a later visit records where it came from. From a terminal link on quantgpt.co it also keeps our advertising partner's click id and the value of its _rdt_uuid cookie, from the first link that carried them, so a signup on a later visit can be reported to that partner (see Advertising Measurement). Never the page address. The site name, the click id and the cookie value are not kept if your browser sends Global Privacy Control or Do Not Track, or you opted out; opting out removes the click id and the cookie value from it. Marked Secure and HttpOnly. | 30 days | Attribution (first party) |
qg_ads_optout | QuantGPT terminal | Remembers that you chose "Do Not Sell or Share My Personal Information" on quantgpt.co, so the terminal stops reporting your visits, signup and payments to our advertising partner and keeps no click id or referring site for you. Holds only the value 1, no identifier. Removed if you choose to allow it again. Marked Secure and HttpOnly. | 2 years, or until you change the choice | Preference (your privacy choice) |
qg_gate | quantgpt.co | Remembers that you unlocked a password-protected area of the site. Contains a hash, not the password. | Up to 30 days | Strictly necessary |
__cf_bm and related | Cloudflare | Distinguishes real visitors from automated traffic in front of the terminal, so scrapers and brute-force attempts are challenged. | Up to 30 minutes | Strictly necessary (security) |
_rdt_uuid | Our advertising partner, on quantgpt.co only | Advertising measurement: lets our advertising partner tell that a visit or a waitlist signup followed one of our ads, so we can see which ads work. Set by the partner's script only for visitors in the United States who have not turned on Global Privacy Control or Do Not Track and have not opted out; never on the terminal. The partner's script may set related _rdt_ cookies under the same conditions. Its value is included in the copy of each page visit our server sends the partner, and is added to the terminal sign-in link and stored with an account you create there, for the reports described under Advertising Measurement below. Opting out deletes them from quantgpt.co. | 90 days | Advertising (on by default in the United States; you can opt out) |
_ga, _ga_<id> | Google Analytics, on quantgpt.co only | Site analytics: a random id that lets Google Analytics count visits and returning visitors and see which pages people read. Set only under the same conditions as _rdt_uuid (United States visitors without Global Privacy Control or Do Not Track who have not opted out); never on the terminal. Advertising features are off. Opting out deletes them from quantgpt.co. | Up to 2 years | Analytics (on by default in the United States; you can opt out) |
__stripe_mid, __stripe_sid | Stripe, on checkout and billing pages | Fraud detection and session continuity for payment. Governed by Stripe's policy. | Session to 1 year | Strictly necessary (payment) |
One advertising partner pixel and Google Analytics run on the marketing site and nowhere else, described under Advertising Measurement and Analytics below. No other advertising or analytics cookies, social media pixels, or cross-site tracking identifiers are set on our pages, and we do not allow other third parties to set them.
// LOCAL STORAGE
Some pages use your browser's local storage (kept until you clear it) or session storage (kept until the tab closes) to remember interface preferences, for example a saved workspace layout or a dismissed notice. Neither is a cookie. That data stays on your device and can be cleared from your browser settings; it reaches us only as part of something a page does for you, such as a workspace you save to your account, and the rows below say where that happens. Every key is listed here by name. The marketing site, quantgpt.co, keeps these keys:
| Key | Where | Purpose | Lifetime |
|---|---|---|---|
qg_src | Session storage, quantgpt.co | Attribution: the short partner or campaign code from a /go/ link or a campaign link, added to the links to the terminal so a signup records where it came from. An advertising campaign code (starting rd-) is kept only under the advertising conditions below, and is also kept for 28 days in qg_rdt_first. | Until the tab closes |
qg_utm | Session storage, quantgpt.co | Attribution: the campaign tags (utm_source, utm_campaign and the like) on the link you arrived by, added to the links to the terminal so a signup records where it came from. | Until the tab closes |
qg_ref | Session storage, quantgpt.co | Attribution: if you arrive with no partner code and no campaign tags, the name of the site that sent you, as one word (for example google), never the page address, added to the links to the terminal so a signup records where it came from. First visit only. Not kept if your browser sends Global Privacy Control or Do Not Track, or you opted out. | Until the tab closes |
qg_rdt_cid | Local storage, quantgpt.co | Advertising measurement: the click id (rdt_cid) our advertising partner adds to an ad's link, added to the terminal sign-in link so that a checkout, sign-up, trial start, or purchase can be reported to that partner, and included in the copy of each page visit our server sends it (see below). Your first visit from an ad wins: a later ad click does not replace it. Kept only for United States visitors without Global Privacy Control or Do Not Track who have not opted out; otherwise discarded and cleared. | 28 days from the visit that brought it, or until you clear it or opt out |
qg_rdt_first | Local storage, quantgpt.co | Advertising measurement: the date of your first visit from one of our advertising partner's ads, with its advertising campaign code (starting rd-) and the value of the partner's _rdt_uuid cookie, so they keep riding the terminal sign-in link on later visits; deleted with qg_rdt_cid 28 days after that visit. Kept only under the same conditions as qg_rdt_cid; otherwise discarded and cleared. | 28 days, or until you clear it or opt out |
qg_rdt_em | Local storage, quantgpt.co | Advertising measurement: if you give us your email address on one of our forms on quantgpt.co (such as the waitlist), a SHA-256 hash of it (a one-way code, not the address), which our advertising partner's script receives on your later page visits so it can match them to its own users. Kept only under the same conditions as qg_rdt_cid; deleted when you opt out. | Until you clear it, or you opt out |
qg_twclid | Local storage, quantgpt.co | Advertising measurement: the click id (twclid) a second advertising partner adds to its ads' links, added to the terminal sign-in link so that it can be stored with an account created from that visit. We do not send it to that partner. Kept only under the same conditions as qg_rdt_cid; otherwise discarded and cleared. | Until you clear it, or you opt out |
qg_gclid, qg_gbraid, qg_wbraid, qg_fbclid | Local storage, quantgpt.co | Advertising measurement: Google's click id (gclid, or on some Apple devices gbraid or wbraid) from one of Google's ads, or Meta's click id (fbclid) from a link on Facebook or Instagram, added to the terminal sign-in link so that it can be stored with an account created from that visit and used to tell Google or Meta that one of its ads led to a sign-up or a purchase (Privacy Policy, Section 8). Kept only under the same conditions as qg_rdt_cid; otherwise discarded and cleared. | Until you clear it, or you opt out |
qg_cc | Session storage, quantgpt.co | The two-letter country our server looked up for this visit, so the region check for the advertising pixel runs once per tab. No IP address is kept. | Until the tab closes |
qg_ads_consent | Local storage, quantgpt.co | Your advertising choice from the buttons under Advertising Measurement: no after you opt out, so the pixel stays off on every page, or yes after you opt back in. Not set until you choose. Clearing it turns the pixel back on if you are in the United States and your browser sends neither Global Privacy Control nor Do Not Track. | Until you clear it |
qg_ads_notice | Local storage, quantgpt.co | That this browser has been shown the short notice about advertising cookies, so it shows once. Holds no identifier. | Until you clear it |
The terminal, terminal.quantgpt.co, keeps these keys, grouped by what they do:
| Keys | Where | Purpose | Lifetime |
|---|---|---|---|
qg_theme_sync | Session storage, terminal.quantgpt.co | Marks that this tab already checked your account for the Appearance you chose on another device, so it checks once. | Until the tab closes |
qg_nice_run_hide | Local storage, terminal.quantgpt.co | When you press Not now on the card after a validated backtest: the time until which it stays hidden (7 days). | Until you clear it |
qg_nice_run_seen | Session storage, terminal.quantgpt.co | Marks that this tab already showed the card after a validated backtest, so it shows once a session. | Until the tab closes |
qg_side | Local storage, terminal.quantgpt.co | Whether the sidebar shows in full or as icons only. | Until you clear it |
qg_navgroups | Local storage, terminal.quantgpt.co | Which sidebar sections you folded or opened, so they stay that way. | Until you clear it |
qg_tray | Local storage, terminal.quantgpt.co | Whether the actions under a backtest result show in the new layout or the classic one, when you chose one. | Until you clear it |
qg_account_mode, qg_connect_mode, qg_events_mode | Local storage, terminal.quantgpt.co | Whether the account page, the connect page and World events open in the simple view or show everything. | Until you clear it |
qg_events_chokes, qg_events_color, qg_events_days, qg_events_domain, qg_events_hint, qg_events_tension, qg_events_view | Local storage, terminal.quantgpt.co | Your choices on the World events map: chokepoints shown or hidden, what colors the map, the window in days, the topic you filtered to, the tension layer on or off, the map's view, and that you closed the first-visit hint. | Until you clear it |
qg_events_proj, qg_events_snap | Local storage, terminal.quantgpt.co | Only where the globe view of World events is switched on: the view you chose (Map, Globe or Continent), and a copy of the last World events data the page loaded, with its time, so the page can still show it, marked as of that time, when you are offline. | Until you clear it; the copy is replaced each time the page loads new data |
qg_ft_book | Local storage, terminal.quantgpt.co | Only where the futuretest page is switched on: the line of tickers and weights you typed there, so it is there next time. The page sends it to us when it reads your book. | Until you clear it |
qg_tour_<page> | Local storage, terminal.quantgpt.co | That you have seen a page's first-visit tour, so it does not play again: one key for each page that has a tour (terminal, journal, monitor, model, connect, events, forum, account, review, pm, chat, leaderboard, technicals). | Until you clear it |
qg_l1_done, qg_l2_done, qg_l3_done, qg_l4_done, qg_l5_done, qg_l6_done, qg_l7_done, qg_g3_done, qg_g4_done, qg_g5_done, qg_s4_done | Local storage, terminal.quantgpt.co | That you finished a lesson or a University chapter. The University page copies the marks of the six older lessons to your account, so your progress follows you to another device. | Until you clear it |
qg_ran | Local storage, terminal.quantgpt.co | That this browser has seen a backtest finish, so the what's-new note waits until after your first run. | Until you clear it |
qg_wn_quiet | Local storage, terminal.quantgpt.co | The latest what's-new note you chose not to see again. | Until you clear it |
qg_journal_autograde | Local storage, terminal.quantgpt.co | When the journal last graded your entries by itself, so it does so at most once an hour. | Until you clear it |
qg_board_period | Local storage, terminal.quantgpt.co | The period you picked on the board. | Until you clear it |
qg_board_pick | Local storage, terminal.quantgpt.co | Which leaderboard you picked (Total work, CAGR or Sharpe). | Until you clear it |
qg_persist_lb, qg_persist_fw | Local storage, terminal.quantgpt.co | The look-back and forward windows you picked on the persistence study. | Until you clear it |
qg_review_holdings | Local storage, terminal.quantgpt.co | The holdings you typed in the Checkup tab of the portfolio page (a pasted list), so they are there next time. They reach us only when you run a checkup. | Until you clear it |
qg_mon_tune, qg_chart_rail, qg_ws_local, qg_ws_current, qg_draw::<symbol> | Local storage, terminal.quantgpt.co | The monitor: your chart settings, whether the drawing tools are open, your layout as you left it, the name of the workspace you have open, and the lines you drew on each symbol's chart. The layout you have open is also copied to your account a few seconds after each change, so the desk your AI reads is the one on your screen; the drawings stay in this browser. | Until you clear it |
qg_tech_prefs | Local storage, terminal.quantgpt.co | The Technicals page: the range you picked and the lines and panels you turned on, so the chart looks the same next time. | Until you clear it |
qg_mon2_wl, qg_mon2_symbol, qg_mon2_range, qg_mon2_layout, qg_mon2_study, qg_mon2_screen, qg_mon2_screen_pick, qg_mon2_phone_view, qg_mon2_phone_range | Local storage, terminal.quantgpt.co | The new monitor, where it is switched on: your watchlist, the name and range on the chart, the layout and study you had open, the journal backtest you picked for your screen with that day's screen result (so it runs once a day), and the list and range you last used on a phone. They stay in this browser. | Until you clear it |
qg_agent_chat, qg_agent_conf | Local storage, terminal.quantgpt.co | The AI panel: your last 40 messages, and the provider, model and API key you set for your own AI. The key goes from your browser straight to that provider, never to us. Your messages go to the AI you picked. | Until you clear it |
qg_nav, qg_tiers | Local storage (qg_nav) and session storage (qg_tiers), terminal.quantgpt.co | Kept by older versions of the terminal. The terminal now deletes them. | Deleted on your next visit |
qg_src, qg_utm, qg_ref, qg_rdt_cid, qg_rdt_uuid, qg_twclid, qg_gclid, qg_gbraid, qg_wbraid, qg_fbclid | Session storage, terminal.quantgpt.co | Attribution on the terminal: the same values as the site's keys above (qg_rdt_uuid holds the value of the advertising partner's _rdt_uuid cookie the site passed on), kept while you go from /join to checkout and back, so a signup records where it came from. The advertising click ids, the partner's cookie value and an advertising campaign code are kept only under the advertising conditions below. | Until the tab closes |
qg_tiers2 | Session storage, terminal.quantgpt.co | Which pages your plan opens, so the sidebar draws at once. A copy older than five minutes is not used. | Until the tab closes |
qg_exchange_draft | Session storage, terminal.quantgpt.co | A backtest you chose to list on the exchange, carried from the backtest page to the listing form, which deletes it once read. | Until the form reads it, or the tab closes |
qg_wn_seen | Session storage, terminal.quantgpt.co | That this tab already showed the latest what's-new note. | Until the tab closes |
// ADVERTISING MEASUREMENT
When we advertise, our advertising partner's pixel on quantgpt.co records that a visit or a waitlist signup followed one of our ads. It loads only on quantgpt.co, never inside the terminal, and only for visitors our server places in the United States whose browser sends neither the Global Privacy Control nor the Do Not Track signal; for everyone else it is never loaded. For those United States visitors it is on by default: it loads with the page, and a short notice on your first visit says so and links to the opt-out below. Unless you opt out, it loads on each page. When it loads, it sets the _rdt_uuid cookie and sends the partner a page visit on each page and a "Lead" event when you join the waitlist, together with the technical details a browser sends with any request, such as your IP address, user agent, and the page address. The partner's script may also read an email address or phone number you type into a form on quantgpt.co and send it in hashed (one-way coded) form, and when you give us your email address on one of our forms, our site keeps a SHA-256 hash of it as qg_rdt_em (above) for the script to send on your later page visits. For each of those page visits our own server also sends the partner's Conversions API a copy, with the visit's id (so the partner counts it once), the click id if your browser holds one, the value of the _rdt_uuid cookie, and your IP address and user agent. It carries no email address and no account id, it goes only from a page where the pixel itself ran, and our server checks again for Global Privacy Control, Do Not Track, your opt-out, and that the request comes from the United States.
Under the same conditions, unless you opt out, our site stores the partner's click id as qg_rdt_cid for 28 days from your first visit from an ad (above) and passes it, and the value of the _rdt_uuid cookie, to the terminal sign-in link, which keeps them in qg_attr and stores them with an account you create. When you create an account, start a trial, or make your first payment, our server reports that event to the partner's Conversions API, once, whether or not you arrived from one of our ads, so the partner can measure its ads; if you arrived from one of our ads, it also reports when you start a checkout. Each report (checkout started, sign-up, trial started, or first purchase) carries the click id if there is one, the _rdt_uuid value if we hold one, a one-way SHA-256 hash of your email address, a SHA-256 hash of your account id, the IP address and user agent of the request that caused the event (or, for a report made when our payment processor notifies us, of your sign-up request), the plan you chose, and for a checkout and a purchase the plan's monthly price. Reports are made only for an account whose sign-up request our server places in the United States, whose browser sent neither Global Privacy Control nor Do Not Track, and whose owner has not opted out; an account created before this version took effect is reported only if it arrived from one of our ads. A second advertising partner's click id (twclid) is kept the same way as qg_twclid and stored with an account created from that visit; we send that partner no report and no click id. Google's click ids (gclid, gbraid, wbraid) and Meta's (fbclid) are kept the same way as qg_gclid, qg_gbraid, qg_wbraid, and qg_fbclid and stored with an account created from that visit, and are used only to tell Google or Meta that one of its ads led to a sign-up or a purchase. The Privacy Policy, Section 8, has the full detail.
The partner learns which of our pages you visit. Some state laws, including California's, may treat this as "sharing" personal information for cross-context behavioral advertising, or as targeted advertising, so you can opt out at any time.
Do Not Sell or Share My Personal Information
Choose Opt out of ad cookies below and, in this browser, the pixel and Google Analytics stop on the page you are on and do not load on any later page, the click ids, the partner's cookie value and the hashed email code are not stored or forwarded, and the partner's and Google Analytics cookies and that code are deleted from quantgpt.co. Your choice is also sent to the terminal, so our server sends the partner no page-visit copies from this browser and no reports about an account you sign in to here. Choose Opt back in to undo it. Turning on Global Privacy Control (or Do Not Track) in your browser opts you out without asking, and we honor it on every visit. Your choice is kept in this browser only, so make it again on another browser or device, or after you clear your browser's storage. A link to this section is at the foot of every page on quantgpt.co.
Needs JavaScript to show your current choice. Global Privacy Control or an email to us opts you out without it.
You can also clear the cookie and local storage for quantgpt.co, email desk@quantgpt.co, or use the advertising controls in your account with the ad platform where you saw our ad. The partner's use of the data is governed by its own privacy policy.
// ANALYTICS
On quantgpt.co we use a cookieless analytics service from our hosting provider, which reports aggregate page views and page speed without identifying individuals or tracking across sites. We also count visits and clicks on the site's main buttons as daily totals by page and by the campaign code or referring site, with no cookie and no visitor id.
We also use Google Analytics on quantgpt.co, under the same conditions as the advertising pixel: only for visitors our server places in the United States whose browser sends neither Global Privacy Control nor Do Not Track, on by default for them, and never after an opt-out. It never runs inside the terminal. When it loads it sets the _ga cookies above and sends Google the pages you view, when, the referring site and campaign tags, and the technical details a browser sends with any request, such as your IP address, user agent, and screen size. We use it to see which pages and campaigns bring visitors. We turn off its advertising features (Google signals and ad personalization), so we do not use this data to target ads. The opt-out under Advertising Measurement turns it off too. Google's use of the data is governed by its own privacy policy.
// CONSENT
Every cookie set by the terminal is strictly necessary to provide the service you asked for or to keep it secure, so no consent is needed for those and the terminal shows no cookie banner. On quantgpt.co, the optional cookies, our advertising partner's and Google Analytics', and the advertising click ids kept in local storage are on by default for visitors in the United States whose browser sends neither Global Privacy Control nor Do Not Track. They can opt out at any time with the buttons under Advertising Measurement or the "Do Not Sell or Share My Personal Information" link at the foot of every page; opting out changes nothing else on the site. Everyone else never gets the pixel or Google Analytics. Apart from this advertising measurement and analytics, if we ever introduce other cookies that are not strictly necessary, we will ask for your consent first, and you will be able to refuse without losing access to the Service.
// HOW TO CONTROL COOKIES
You can delete or block cookies in your browser settings. If you block the session cookie you will not be able to stay signed in to the terminal, and if you block Stripe's cookies you may not be able to complete checkout. Blocking the Cloudflare cookie may cause you to see a security challenge more often.
// CONTACT
Questions about cookies: desk@quantgpt.co.