Legal
Cookie Policy
Last updated: March 2026 · Effective: 1 March 2026
This Cookie Policy explains how TheBrokers FZ-LLC ("TheBrokers", "we", "our", or "us"), a company incorporated in the Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates, uses cookies and similar tracking technologies when you visit our marketing website at thebrokers.ae or use TheBrokers platform (collectively, the "Service"). Please read this policy in conjunction with our Privacy Policy.
1. What Are Cookies
Cookies are small text files that a website places on your device — computer, tablet, or smartphone — when you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide analytical information to site owners.
Cookies set by the website you are visiting are called first-party cookies. Cookies set by parties other than the website owner are called third-party cookies. Third-party cookies enable features or functionality provided by external services such as analytics platforms or payment processors.
In addition to cookies, we may also use local storage and session storage — browser-based mechanisms that store small amounts of data on your device. These are not transmitted to us with each request in the same way as cookies, but serve similar purposes (such as preserving your login session).
Cookies can remain on your device for different periods. Session cookies expire when you close your browser. Persistent cookies remain on your device until they expire or until you delete them.
2. Types of Cookies We Use
We categorise the cookies we use into four types based on their purpose. You can manage non-essential cookies via your browser settings — see Section 5 for instructions.
a. Essential Cookies
These cookies are strictly necessary for the Service to function. They cannot be disabled without breaking core functionality such as logging in, navigating securely between pages, or maintaining your active session. Because they are essential, they do not require your consent under applicable data protection law.
Essential cookies are used for:
- Authentication and session management — verifying your identity after you log in and maintaining your session so you do not have to re-authenticate on every page.
- Security tokens — protecting against cross-site request forgery (CSRF) attacks and other security threats.
- Load balancing — distributing requests across our infrastructure to ensure availability and performance.
- Consent state — storing your cookie preferences so we can honour them on subsequent visits.
b. Functional Cookies
Functional cookies enable the Service to remember choices you have made and provide enhanced, personalised features. They may be set by us or by third-party providers whose services we have added to our platform.
Functional cookies are used for:
- Language and locale preferences — remembering your preferred language or regional number/date formatting.
- Display and layout settings — storing sidebar collapsed/expanded state, table column preferences, and other UI configuration choices.
- Notification preferences — remembering which in-app notification categories you have dismissed or enabled.
- Last-visited state — returning you to the section of the platform you were last working in.
If you disable functional cookies, some personalisation features may not work as expected, but the core Service will remain available.
c. Analytics Cookies
Analytics cookies help us understand how visitors interact with our website and platform. The information collected is aggregated and anonymised wherever possible. We use this data to identify usability issues, measure the effectiveness of new features, and improve overall performance.
Analytics cookies collect information such as:
- Pages visited and the order in which they were accessed.
- Time spent on each page and the actions taken (clicks, scrolls, form interactions).
- Referral source — how you arrived at our site (search engine, direct link, etc.).
- Device type, browser, and operating system (no personal identifiers).
- Error events and performance metrics (page load times, API response durations).
We use PostHog as our primary product analytics provider. PostHog can be configured to store data within the EU or on self-hosted infrastructure. Data collected via PostHog is used solely for improving TheBrokers product and is never sold to third parties or used for advertising purposes.
d. Marketing Cookies
Marketing cookies are used to track visitors across websites and display targeted advertisements. They are typically placed by advertising networks with the website operator's permission.
TheBrokers currently does not use marketing or advertising cookies. We do not partner with ad networks, run retargeting campaigns through cookie-based tracking, or place any cookies intended to build an advertising profile about you. Should this change in the future, we will update this policy and seek your consent before deploying any marketing cookies.
3. Cookies We Set
The table below lists the specific cookies that TheBrokers sets directly, their purpose, how long they persist, and which category they fall into.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-access-token | Supabase authentication JWT. Identifies you as a signed-in user and grants access to your organisation's data within TheBrokers platform. | Session (1 hour) | Essential |
| sb-refresh-token | Supabase refresh token used to issue new access tokens without requiring you to log in again. Stored in HttpOnly storage for security. | Persistent (60 days) | Essential |
| il_csrf | Cross-site request forgery protection token. Validates that form submissions and API mutations originate from legitimate TheBrokers sessions. | Session | Essential |
| il_cookie_consent | Records your cookie consent choices (which categories you have accepted or declined) so we can honour your preferences across visits. | Persistent (1 year) | Essential |
| il_ui_prefs | Stores your interface preferences: sidebar state (open/closed), table column configuration, and selected date-range filters. | Persistent (6 months) | Functional |
| il_last_org | Remembers the organisation subdomain you last logged into, enabling faster navigation on return visits. | Persistent (30 days) | Functional |
| ph_distinct_id | PostHog analytics identifier. Assigns an anonymised identifier to your browser session to track product usage patterns. No personally identifiable information is stored in this cookie. | Persistent (1 year) | Analytics |
| ph_session_id | PostHog session identifier. Groups a series of page views and events into a single product session for journey analysis. | Session (30 minutes inactivity) | Analytics |
| ph_featureflags | Caches PostHog feature flag evaluations to reduce latency. Used to A/B test new platform features before full rollout. | Persistent (7 days) | Analytics |
Cookie names and durations may change as we update our infrastructure. This table is reviewed and updated alongside the rest of this policy.
4. Third-Party Cookies
Some pages of our Service embed or interact with services provided by third parties that may set their own cookies on your device. We do not control these third-party cookies and they are governed by the respective third party's own privacy and cookie policies.
PostHog (Product Analytics)
We use PostHog to understand how TheBrokers platform is used. PostHog collects anonymised interaction data including page views, feature usage, and performance metrics. PostHog processes this data subject to its own privacy policy available at posthog.com/privacy. We have configured PostHog to respect Do Not Track browser signals and to anonymise IP addresses before storage.
Supabase (Infrastructure)
Our backend is powered by Supabase, which sets cookies to manage authentication sessions. These are first-party cookies set on the thebrokers.ae domain and are covered by our Essential Cookies category above. Supabase's data processing is governed by the Supabase Privacy Policy.
Embedded Content
If you access content that embeds third-party resources (such as maps, videos, or document previews), those third parties may set their own cookies. You will be notified before such content loads where it is technically practical for us to do so.
5. How to Manage Cookies
You have several options for controlling cookies. Please note that disabling certain cookies will affect how the Service works and may prevent you from accessing some features.
Browser Settings
Most web browsers allow you to view, manage, delete, and block cookies through their built-in settings. The precise steps depend on your browser:
- Google Chrome: Settings → Privacy and Security → Cookies and other site data.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Apple Safari: Preferences → Privacy → Manage Website Data.
- Microsoft Edge: Settings → Cookies and Site Permissions → Cookies and Site Data.
Clearing all cookies will sign you out of TheBrokers platform and delete all saved preferences. Blocking all cookies will prevent you from logging in entirely, as authentication depends on essential session cookies.
Opt-Out of Analytics
You can opt out of PostHog analytics collection at any time by visiting the cookie preferences link in our website footer, or by enabling the Do Not Track (DNT) signal in your browser settings. When DNT is detected, we instruct PostHog to cease collecting data for that session. You may also install the PostHog opt-out mechanism, which sets a persistent opt-out flag in your browser.
Mobile Devices
On mobile devices, you can typically manage cookies through your browser app's settings. iOS and Android provide additional privacy controls at the operating system level — consult your device's user guide for instructions relevant to your model and operating system version.
6. UAE Regulatory Context
TheBrokers is incorporated in the Dubai International Financial Centre (DIFC) and operates under the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (as amended). Where cookies involve the processing of personal data, we comply with the requirements of that law, including requirements relating to transparency, lawful basis, and data subject rights.
To the extent that our platform is also used by individuals in other jurisdictions — including those subject to the European Union's General Data Protection Regulation (GDPR) or the United Kingdom's UK GDPR — we apply equivalent standards of consent and transparency to cookie deployment across the Service as a whole.
Lawful basis for essential cookies: We process data via essential cookies on the basis of our legitimate interests (and in some cases, contractual necessity) to operate a secure and functional platform. No consent is sought for essential cookies as they are technically required to deliver the Service you have requested.
Lawful basis for non-essential cookies: Analytics and functional cookies are deployed on the basis of your consent, which you may provide or withdraw at any time. Consent is recorded via the il_cookie_consent cookie described in Section 3.
If you are a resident of the UAE or a DIFC-regulated individual and wish to exercise your rights under the DIFC Data Protection Law — including the right to access, correct, or erase personal data associated with your use of the Service — please contact us at the address in Section 8 below.
7. Changes to This Policy
We review and update this Cookie Policy periodically to reflect changes in the cookies we deploy, updates to applicable data protection law, and improvements to TheBrokers platform.
When we make material changes — such as adding a new category of cookie or engaging a new third-party analytics provider — we will update the "Last updated" date at the top of this page and, where required by law, seek fresh consent from affected users. For significant changes, we may also notify you directly via email or an in-platform banner.
We recommend reviewing this policy periodically. Continued use of the Service following the posting of a revised Cookie Policy constitutes your acknowledgement of the updated terms. You can always withdraw consent for non-essential cookies through your browser settings or the in-platform cookie preferences panel.
Previous versions of this policy are available on request — please contact us using the details in Section 8 below.
8. Contact Information
If you have any questions, concerns, or requests relating to this Cookie Policy or the way we use cookies and similar technologies, please reach out through the in-app support chat.
We aim to respond to all privacy-related enquiries within 10 business days. If you are not satisfied with our response, you may refer your complaint to the DIFC Commissioner of Data Protection or to the data protection supervisory authority in your jurisdiction.