Cookie Policy

This policy describes cookies and similar storage used on grofi.com and in the GroFi application. It should be read with the Privacy Policy.

GroFi uses cookies that are required to run the Service. We do not currently set advertising or analytics cookies on the public site.

• Authentication session. When a broker or staff member signs in, GroFi sets a secure, HTTP-only session cookie so the browser can prove that sign-in on later requests. The cookie is first-party, scoped to GroFi, and is not used for advertising. Signing out or the session expiring clears it.
• CSRF protection. Authenticated API requests include origin checks tied to that session so a third-party site cannot reuse the cookie.

The public marketing site does not rely on advertising identifiers in local storage. Browser storage may hold short-lived UI state (for example, a form in progress). That data stays on your device unless you submit the form.

If you connect a bank account, Plaid may set cookies on Plaid’s domains as part of Link. Those cookies are governed by Plaid, not by this policy. Embedded videos or fonts served from our content network may result in standard technical requests; they are not used to build an advertising profile.

You can block cookies in your browser. If you block the session cookie, broker login and staff admin will not work. The public apply and contact forms do not require an account cookie.

Questions: privacy@grofi.com or the contact form.