Cookie Policy
Effective date: 7 August 2026 · Policy version 2026-08-07.1
Bright Capital America applies a single, privacy-protective global standard: optional cookies stay off until you turn them on. This policy and the underlying consent configuration are pending review by qualified privacy counsel and should not be represented as a guarantee of compliance in every jurisdiction. Items marked "pending confirmation" below have not yet been finalised.
What cookies and similar technologies are
Cookies are small files a website stores in your browser. Similar technologies include local storage, session storage, pixels, and software development kits. They can be set by Bright Capital America (first party) or by a provider whose content or service appears on our pages (third party).
Why Bright Capital America uses them
To keep you signed in, protect accounts and the investor directory from abuse, balance traffic, keep a secure payment flow usable, remember the settings you asked for, store your cookie choices, and — only with your permission — measure how the website performs.
Strictly necessary
Required to operate and secure the website. These technologies keep you signed in, protect against fraud and abuse, balance traffic, keep a secure checkout usable, remember essential accessibility or language settings, and store your cookie choices. They cannot be switched off and do not require your consent.
- Authentication session
- Security and fraud prevention
- Load balancing
- Checkout continuity
- Consent preference storage
- Language or essential accessibility settings
Preferences
Remember non-essential interface choices so the site looks and behaves the way you last left it. Off unless you turn it on.
- Remembered interface settings
- Nonessential personalization
- Optional language or display preferences
Analytics
Measure traffic and page performance in aggregate so we can find broken or slow pages and improve the product. Analytics is configured to minimise collection, shorten retention, and disable advertising features. Investor contact data, financial details, and directory record content are never sent to analytics. Off unless you turn it on.
- Traffic measurement
- Page-performance analytics
- Aggregated product-usage analytics
Marketing and advertising
Advertising and cross-site measurement technologies. We use the Meta Pixel to measure the effectiveness of our advertising, build audiences, and deliver more relevant messages to people who may benefit from Bright Capital America's platform. No financial, investor-directory, or authentication data is sent to Meta. Off unless you turn it on.
- Meta (Facebook/Instagram) Pixel
- Advertising effectiveness measurement
- Retargeting
- Cross-site measurement
- Advertising audiences
Functional integrations
Third-party content and tools embedded in a page, such as video, scheduling, or chat. Where an integration is not strictly necessary, we show a placeholder until you allow this category. Off unless you turn it on.
- Embedded video
- Chat tools
- Scheduling widgets
- Social-media content
Current cookie inventory
| Key | Provider | Party | Category | Purpose | Data | Duration | Leaves your country | Status |
|---|---|---|---|---|---|---|---|---|
| sb-<project>-auth-token | Bright Capital America (Supabase Auth) | First party | necessary | Keeps a signed-in account session active and lets the server validate the request. | Session token, token expiry, account identifier | Session token refreshed continuously; cleared at sign-out | Pending confirmation | active — Hosting region and transfer mapping to be confirmed with counsel. |
| bc_consent | Bright Capital America | First party | necessary | Stores your cookie choices, the policy version they were given against, and the renewal date. | Consent identifier, category choices, policy and banner version, timestamp | 180 days | No | active |
| bc_visit_meta | Bright Capital America | First party | necessary | Counts visits locally in the browser to avoid repeating upgrade prompts. Never sent to a third party. | Visit count, last prompt date | Local storage until cleared | No | active |
| __stripe_mid / __stripe_sid | Stripe | Third party | necessary | Fraud prevention and payment-session continuity for the checkout you requested. | Payment session and device-integrity identifiers set by Stripe | __stripe_mid: 1 year; __stripe_sid: 30 minutes | Yes | active |
| bc_ui_prefs | Bright Capital America | First party | preferences | Remembers non-essential interface choices such as display density and dashboard layout. | Interface setting values | 180 days | No | active |
| _fbp | Meta Platforms, Inc. (Meta Pixel) | First party | marketing | Stores a unique browser identifier for the Meta Pixel so advertising effectiveness and audience activity can be measured on brightcapital.fund. | Unique browser identifier generated by the pixel; no investor, financial, or authentication data is shared | 90 days | Yes | active |
| fr | Meta Platforms, Inc. (Facebook/Instagram) | Third party | marketing | Used by Meta to deliver, measure, and improve the relevance of advertisements shown on Facebook, Instagram, and Audience Network properties. | Encrypted Facebook user ID and browser identifier; no investor, financial, or authentication data from Bright Capital America is shared | 90 days | Yes | active |
| _fbc | Meta Platforms, Inc. (Meta Pixel) | First party | marketing | Stores the Facebook click identifier (fbclid) when a visitor arrives from a Meta ad, so conversions can be attributed to the correct campaign. | Facebook click identifier from the URL; no investor, financial, or authentication data is shared | 90 days | Yes | active |
| bc_analytics_session | Bright Capital America (first-party aggregate analytics) | First party | analytics | Aggregated traffic and page-performance measurement. Loads only after analytics consent. | Page path, referrer category, performance timings, coarse device type | Session | No | planned — Analytics provider selection and retention window pending confirmation. |
Optional technologies that are not listed and classified here are blocked from production. Last reviewed 7 August 2026.
Cookie duration and retention
Durations are listed per entry above. Your cookie choices are stored for 180 days, after which we ask again. Consent records are retained for audit purposes with only a salted, truncated hash of the IP address; the plain IP address is not stored.
International data transfers
Stripe processes payment-security cookies outside some visitors' countries under its own terms. The hosting region for authentication session data and the corresponding transfer mechanism are pending confirmation with counsel and will be published here once finalised. We do not publish transfer statements we have not verified.
How to manage or withdraw consent
Use in the footer, or on the Privacy Choices page, at any time. Withdrawing is as easy as consenting. When you withdraw a category we stop future related scripts and requests and delete the related optional first-party cookies where technically possible. Data already collected by a third party is handled under that provider's retention and deletion process. Cookies required for an active, signed-in session are not deleted.
Browser controls and Global Privacy Control
Your browser can block or delete cookies; blocking strictly necessary cookies will break sign-in and checkout. We detect the Global Privacy Control signal and treat it as an opt-out of sale, sharing, and targeted advertising. We never override it with a default.
Do Not Sell or Share
Bright Capital America does not currently operate advertising or cross-context behavioural advertising technologies, and no marketing provider is enabled. Where these rights apply to you, submit them through Do Not Sell or Share My Personal Information or Privacy Choices. Sensitive financial, identity, authentication, and investor-directory information is never used for targeted advertising.
Regional configuration
- European Union / EEA / United Kingdom: Affirmative, granular, freely given consent is required before any optional technology loads. Scrolling, continued browsing, or closing the banner is never treated as consent. Consent can be withdrawn at any time and is re-requested when purposes, providers, or the policy version materially change.
- Canada: Meaningful consent: each category states what is collected, why, and who receives it in plain language, and optional consent can be withdrawn at any time. Behavioural advertising and profiling are not used, and are never directed at known minors.
- United States: The global opt-in baseline applies. A Global Privacy Control signal is detected and honoured as an opt-out of sale, sharing, and targeted advertising, and is never overridden by a default. Sensitive financial, identity, authentication, and investor-directory information is never used for targeted advertising.
- Other regions: Where a visitor's location cannot be determined reliably, the strictest configuration is applied: optional technologies stay off until the visitor opts in.
How this policy is updated
Each published version carries a version number and effective date. When purposes, categories, or providers materially change, the version increments and consent is requested again before optional technologies resume.
Privacy contact
Bright Capital America, 3911 Concord Pike, 8030, Wilmington, DE 19803, United States. Email support@brightcapital.fund.