Cookie Policy

BNP SIteFactory

BNP SiteFactory is the platform that delivers content and services to the customers

axes

This cookie stores the basic settings of the user: language, brand, edition (last category visited; e.g. private/retail banking)

7 years

CSRF

Cookie to prevent Cross Site Reference Forgery and to prevent calls made from other origin.

Session

europolicy

This Cookie is added by sitefactory and used for accessing the website, without this cookie website will not work. This cookie stores no user information. The cookie makes the framework of the site work.

1 year

userInformation

Technical cookie that contains a fixed value and is required by the framework. This cookie stores no user information, it makes the framework of the site work.

Session

distributorid

The first 2 caracters of the distributorId are the distributionChannelId (49 for Mobile, 52 for Web). The next two characters represent the brand ('FB' for Fortis Bank, 'KN' for Fintro) and the last three characters the application (001 for EasyBanking, 002 for Hello Bank! application). This cookie is the ID of the website and is used to differentiate between the websites of the different brands.

Session

cookieDisclaimer

Cookie used to track if the cookie disclaimer message is shown to user or not. If the visitor is a first-time visitor, this cookie makes sure the banner is shown. In the new tool, the lifetime will be 6 months, so after 6 months he will see the info/banner again.

6 months

COOKIES_SETTINGS

Cookie used to track if the cookie disclaimer message is shown to user or not. If the visitor is a first-time visitor, this cookie makes sure the banner is shown. The cookie life time is six months: after six months of inactivity or after an update of the cookie policy, the visitor will see the information/banner again.

180 days

(*-)JSESSIONID

This is a technical session cookie. It is used to divert the website visits to different machines in the back-end. Not all visitors go on the same server. If a server crashes, the visit can be reverted another server. This cookie identifies which user lands on which server. It ensures equal distribution of the visitors to the servers and ensures the stability of the performance.

Session

AMWEBJCT!%2F!myaxes

This cookie is used to differentiate the private banking and Wealth Management customers and to display the private banking content to unauthenticated Wealth Management customers. At this moment the site does not differentiate by default between private banking and Wealth Management. Once the user logs in, and is a Wealth Management customer, he will see the Wealth Management content. This is for privacy purposes of Wealth Management clients: if someone uses the computer of a Wealth Management client, then he will not see it is a Wealth Management client unless he is logged in. This cookie is placed in context of privacy by design: even if authenticated, the cookie is needed, because front-end won’t take the data from back-end.

1 year

PD-S-SESSION-ID

Cookie used for session management

Session

TS**********

This is a security cookie set by the Firewall as a unique identifier.

Session

gsn

This cookie creates a global session number, so it is a cookie for session management (session ID, random number to session). If someone accesses, this session has a number. This cookie is placed for communication reasons between client - website - server. This is not for logging in.

Session

seg

Cookie to remember the customer preference of segment.

1 year

plogid

Technical cookie used during the Login process. When a user started logging in, the logid maintains the log-in session, so the site knows that the user has logged in already. As soon as the user logged in, logid will be removed. This cookie is maintained during the phases of the log-in procedure.

Session

logonProfiles

This cookie is used to save clients logon profiles, it is only placed when the customer wants to save this profile. Customer profile cannot be derived directly from the cookie, only of the value when being used on the site.

12 years

w1n0_er

This is a load balancing cookie. BNP Paribas Fortis has multiple server parcs to guarantee availability of the site, as you can only be logged in one of them at the time we keep a cookie to send the user to the best suited location.

Session

FileDownload

Technical cookie used for the download of PDF and CSV files. The cookie is read by the JavaScript code to know whether or not the file was downloaded correctly.

Session

AmountFormat

This cookie enables the user to set his preference for the decimal separator in CSV file exports containing transactions (point or comma)

Until cookie deletion

MSMC_OVERVIEW_TUTORIAL_COMPLETED

This Cookie is used to track whether the user has finished his tutorial on the My Signatures page.

Until cookie deletion

FileDownload

Technical cookie used for the download of PDF and CSV files. The cookie is read by the JavaScript code to know whether or not the file was downloaded correctly.

Session

IM12PR90USER

This Cookie is used to store user credentials (mobile phone number) to be pre-filled when the user tries to log in with itsme®.

Until cookie deletion

IM12PR90GSMNUMBER

This Cookie is used to store user credentials (mobile phone number) to be pre-filled when the user tries to log in with itsme®.

Until cookie deletion

loginSessionId

This Cookie is used to store a unique identifier of the user’s session, as part of the prevention of fraud and hacking.

Session

MTPL-pr56_1.1

This Cookie is used to skip the tooltip in the New transfer screen.

Until cookie deletion

per*

This is a load balancing cookie. BNP Paribas Fortis has multiple server parcs to guarantee availability of the site, as you can only be logged in one of them at the time we keep a cookie to send the user to the best suited location.

Session

Adobe Analytics

Adobe analytics is used to provide (anonymous - when opted out) aggregated statistics on navigation. This allows the bank to monitor performance of the website and improve it accordingly.

s_sq

This cookie is set and read by the JavaScript code when the ClickMap functionality and the Activity Map functionality are enabled; it contains information about the previous link that was clicked by the user. It is used for reporting on website visits (how many times was website visited) , to create a "track" of the path. We do not know who visited (anonymous cookie), but we do know the path of the visit.

Session

s_cc

This cookie is set and read by the JavaScript code to determine if cookies are enabled (simply set to "True"). This cookie is a session cookie and expires when the browser is closed. If we do not have this cookie, we cannot do performance analysis on the website (what was visited and what not).

Session

s_pc

Cookie used for gathering statistics (where did a person click, where did he scroll to,…) of the website usage. These statistics are kept anonymous.

1 year

s_ppn

Record the portion of a page (0-100%) that the user views and passes the value into a variable on the next page view.

Session

s_pprt

Cookie used for gathering statistics of the website usage. These statistics are kept anonymous

Session

s_ptc

This provides a native method to get accurate and detailed timing statistics for loading events e.g. when page or functionality is loaded.

Session

_sdsat_zid

Custom Adobe Dynamic Tag Manager Cookie.

_sdsat_enrolment_ID

Cookie used to remember the value of a unique identifier of the transaction taking place when doing an enrolment.

_sdsat_language

This cookie is used to remember the language in which the content is displayed.

_sdsat_MGM_sponsor_ID

This cookie is used to remember the unique identifier of a "godfather" user in the Hello bank "Member get member" process.

_sdsat_MGM_user_ID

This cookie is used to remember the unique identifier of a "godson" user in the Hello bank "Member get member" process.

_sdsat_user_id

This cookie is used to remember the Hello Connect ID of a user when he logs in on one of the Hello Bank platforms.

visited_domains

This cookie is used to remember which of the Hello bank platforms the user has already visited.

s_vi_*

This cookie is used to identify a unique visitor, the cookie has the format of s_vi_* depending on the report site used.

2 years

AMCVS_F46824205476152E0A4C98A2%40AdobeOrg

The AMCVS cookie serves as a flag indicating that the session has been initialized. Its value is always `1` and discontinues when the session has ended.

Session

AMCV_F46824205476152E0A4C98A2%40AdobeOrg

The AMCV cookie contains the Experience Cloud visitor ID or MID. The MID is stored in a key-value pair that follows this syntax, mid|Experience Cloud ID.
To know more about about the privacy policy of the Adobe Experience Cloud or to opt-out please visit http://www.adobe.com/nl/privacy/opt-out.html

2 years

s_fid

This cookie is used to identify a unique visitor if the standard s_vi cookie is unavailable due to third-party cookie restrictions.

2 years

s_ecid

The ECID cookie contains the Experience Cloud ID (ECID) or MID. The MID is stored in a key-value pair that follows this syntax, s_ecid=MID|Experience Cloud ID.

This cookie is set by the customer's domain after the AMCV cookie is set by the client. The purpose of this cookie is to allow persistent ID tracking in the 1st-party state and is used as a reference ID if the AMCV cookie has expired. Check AMCV cookie for more details.

To know more about the privacy policy of the Adobe Experience Cloud or to opt-out please visit http://www.adobe.com/en/privacy/opt-out.html.

2 years

demdex

The Adobe Experience Cloud Identity Service uses the demdex cookie (with the BNPPF organization id and AMCV cookie) to create and store a unique, persistent identifier for our site visitors. These cookies let the Adobe ID service track visitors across the different domains of BNP Paribas Fortis and enable data sharing among different Experience Cloud solutions that BNP Paribas Fortis is using.

180 days

dpm

DPM (Data Provider Match) informs internal, Adobe systems that a call from the Adobe Experience Cloud ID Service is requesting a visitor ID. This only happens when the AMCV cookie (that contains an Experience Cloud id) isn’t set.

180 days

s_ppv

This cookie is set by the Adobe Analytics plugin “getPercentPageViewed” and is used to measure a visitor’s scroll activity to see how much of a page they view before moving to another page.

Session

Tool

Description

cookie

Purpose

Contentsquare

Contentsquare is an experience analytics solution that is used to measure, report and analyse detailed visitor behavior on our websites. The captured data is anonymous and analysis is done mainly on aggregated data in order to identify key trends, changes, issues in the user experience on our websites. Insights are used to improve the overall user experience.

_cs_mk

This cookie is used for the Google Analytics and Adobe Analytics integrations.

30 minutes

Insided

Insided is an external agency that develops the community websites for BNP Paribas Fortis

locale

The cookie determines the preferred language and country-setting of the visitor - This allows the website to show content most relevant to that region and language.

5 years

anon:new_visit

Used to see if a it’s a first time visit of a user to the platform - if so then show the cookie banner and any other first time displays. Boolean

30 minutes

vuid

Collects data on the user's visits to the website, such as which pages have been read.

2 years

test_cookie

Used to check if the user's browser supports cookies.

1 day

Collapsed

Holds collapsed content

1 year

lastactivity

1/2 year

NSC_#

Used to distribute traffic to the website on several servers in order to optimise response times.

1 day

EMBEDDED

embedded Iframe set cookies on own domain. Shows the embedded video player of youtube.

Session

VISITOR_INFO1_LIVE

Tries to estimate the users' bandwidth on pages with integrated YouTube videos.

179 days

YSC

Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Session

yt-remote-cast-installed

Stores the user's video player preferences using embedded YouTube video

Session

yt-remote-connected-devices

Stores the user's video player preferences using embedded YouTube video

Persistent

yt-remote-device-id

Stores the user's video player preferences using embedded YouTube video

Persistent

yt-remote-fast-check-period

Stores the user's video player preferences using embedded YouTube video

Session

yt-remote-session-app

Stores the user's video player preferences using embedded YouTube video

Session

yt-remote-session-name

Stores the user's video player preferences using embedded YouTube video

Session

topics

Numerical ID's of the topics visited by the user - Used to identify returning visitors to a topic page

48 Hours

JSESSIONID (New Relic)

Tracks platform performance and debugging use (internal use only)

Session

Session

Stores users session

Session

SESS#

Preserves users states across page requests.

Session

Tool

Description

Cookie

Purpose

Validity

Opt-out

Adobe analytics

Adobe analytics is used to provide aggregated statistics on navigation. When comfort cookies are not accepted all data is tracked anonymously. This allows the bank to monitor performance of the website and improve it accordingly like described in the functional cookies. By accepting the comfort cookies, we will also store a hashed customer id (ZoomitID) enabling more advanced analysis.

The ZoomitID is an identifier which is stored in Adobe Analytics. This identifier allows BNP Paribas Fortis to link online behavioral data to a specific customer information only if the user provided his/her consent for profiling. Storing the ZoomitID enables us to enrich anonymous behavior with some customer attributes (gender, age bucket, nationality,…) to enable more advanced analysis of online behavior (on an aggregated level)

2 years

To know more about the privacy policy of the Adobe Experience Cloud or to opt-out please visit https://www.adobe.com/privacy/opt-out.html

Adobe Target

Adobe Target is a tool used to personalise content seen on the website.

mbox

Adobe Target uses cookies to give website operators the ability to test which online content and offers are more relevant to visitors.

http://optout.tt.omtrdc.net/optout

Celebrus

Celebrus contains profiling and statistics cookies. These cookies allow the bank to better know users and their respective interests and needs. It provides information regarding the users' navigation on our site. This information allows bank to provide users with personalised marketing offers. These cookies also allow the bank to conduct statistical research for marketing purposes.

usy46gabsosd

This is a session data coordination cookie. This cookie provides the coordinating reference for information on the user’s activity during the session. The timestamp enables us to identify extended periods of inactivity and so classify those as a new session. The 4 digit load balancer id is a random reference that remains constant through the session for the use of the operator’s load balancers.

Session

Link naar de opt-out van Celebrus

vtz47gabsosd

This is a cross domain session reference. This cookie is only present where the operator has configured the system to maintain a consistent session reference across the domains that they own/operate. It is used to transfer the session reference between domains. It is not effective where a user has his browser configured to block third party cookies.

Session

BNPPFCSAuvt

This is a unique visitor tracking cookie. This cookie allows us to tie together user activity between user sessions using the uvt reference.

configurable (defaults to 150 days)

BNPPFCSADBID

This is the database id. This cookie ensures that all data from one user is sent by the system to the same database or real-time server.

configurable (defaults to 1825 days)

BNPPFCSAKey

This is the security key. This cookie protects the system from attempts to spoof the session reference. The session reference alone is a simple long integer which rises monotonically as new sessions arrive and is thus easy to predict. The session key is random and unpredictable. The system checks that both are present and consistent.

Session

BNPPFCSASF

This is a stop flag. If set CSA assumes comms failure and will no longer communicate with the server. It is there to protect the operation of the site from failures in network or Celebrus systems.

Session

BNPPFCSACDuvt

This is a unique visitor tracking cookie. This cookie is only present where the operator has configured the system to maintain a consistent unique visitor tracking reference across the domains that they own/operate. It is used to transfer the uvt reference between domains. It is not effective where a user has his browser configured to block third party cookies or where another unique visitor reference is present in an affected domain.

31 days

BNPPFCSAP3P

This is the opt out flag. This cookie indicates to the system the state of opt-out of the user from full collection through anonymous collection to no collection at all. It is only present if a user has interacted with an opt-out dialogue.

20 years

BNPPFCSACDID

This is a cross domain database id. This cookie is only present where the operator has configured the system to maintain a consistent session reference across the domains that they own/operate. It is used to transfer the database id and real-time server id between domains. It is not effective where a user has his browser configured to block third party cookies. The key is the security key mentioned above.

Session

BNPPFCSAcdPersisted

Updated on session start

BNPPFCSAcdSession

Updated when events received (server-side)

BNPPFCSApersisted

Updated on session start

BNPPFCSAsession

Updated when events sent (client-side)

ClickTale

Clicktale was used for analysis regarding the experience on the website. It allows the bank to understand customer behaviour on the website and improve it accordingly. Clicktale had been acquired by Contentsquare in June 2020. Since then BNPPF has been using Contentsquare, implemented through the Clicktale tag. Therefore we are still using some Clicktale cookies.

WRUIDAWS

This cookie is used to anonymously identify a visitor of the Website for the purpose of enabling the ClickTale software to track such visitor’s actions across the client’s website.

1 year

__CT_Data

This cookie is used to count the number of pageviews or visits of the anonymous visitor for the purpose of enabling the ClickTale software to track the number of pageviews or visits a visitor made on the client’s website.

1 year

ctm

This cookie contains information to identify the visitor and his action for the ClickTale Experience Cloud.

Session

_CT_RS_

This cookie is used to indicate whether a user is being recorded and by what reason (Random, Enhanced, Forced, ETR)

1 year

Contentsquare

Contentsquare CAP is used for analysis regarding the experience on the website. It allows the bank to understand customer behaviour on the website and improve it accordingly. No personal identifiable data is stored in Contentsquare.

_cs_id

To recognize the same user across pages and sessions. Contains the following data separated by dots: user ID, user creation timestamp, number of visits, last pageview timestamp, last visit timestamp, timestamp of the last time this visitor was drawn, cookie expiration date, cookie SameSite attribute, cookie Secure attribute value (0/1).

13 months

_cs_s

Contains the number of pages viewed in the current session and the recording type: ".1" (not recorded for Session Replay), ".3" (to include a visitor for Session Replay recording service) or ".5" (to include a visitor for Session Replay recording service after a specific trigger). For Advanced recording pipeline: value is 0 when not recorded for Session Replay/ Value is .5 when recorded.

30 minutes

_cs_vars

Includes the session's Custom variables URL encoded. Created when session level custom variables are triggered. Value and expiration date are updated at each page view.

Session

_cs_ex

When set, the user is excluded from tracking. Contains the timestamp of the last time this visitor was drawn.

30 days

_cs_c

Contains the user consent state (not expressed, granted, withdrawn).

13 months

_cs_optout

When set, the user is opted-out from tracking.

13 months

_cs_rl

This cookie is used for a few integrations we have that require us to generate replay links and put them into cookies.

1 year

_cs_t

This is used to check if the browser supports cookies and if the tag must set the SameSite flag to None and the Secure flag to Yes.

Immediately removed

_cs_same_site

This is used to check if the browser supports the SameSite flag.

Immediately removed

_cs_root_domain

This is used to get the root domain.

Immediately removed

Medallia

Medallia is a tool for conducting online surveys and collecting user feedback. This feedback enables us to improve the solutions offered by the bank.

backendDataInSessionFlag

Flag that indicate if we retrieve user based targeting data in the current session.

1 year

kampyleUserSessionsCount

Tracks number of sessions user has been in the browser.

1 year

DECLINED_DATE

Timestamp indicating when an intercept was last declined / survey was last closed.

1 year

SUBMITTED_DATE

Timestamp indicating when a survey was last submitted.

1 year

kampyleUserSession

Timestamp indicating when the user has started his session.

1 year

kampyleSessionPageCounter

Tracks the number of pages the user has been in the session.

1 year

kampyleInvitePresented

Flag indicating whether an intercept was presented in the session.

1 year

kampylePageLoadedTimestamp

Timestamp indicating when the page was loaded. Used for time on page targeting.

1 year

kampyleUserPercentile

Number between 0-1 used for percentage of users targeting.

1 year

LAST_INVITATION_VIEW

Timestamp for when the last intercept was presented.

1 year

kampyle_userid

UUID for identifying a user.

1 year

cd_user_id

Cooladata user ID

1 year

md_isSurveySubmittedInSession

True if any survey was submitted in session, otherwise false

1 year (But cleared on every session start)

BlueKai (Oracle)

BlueKai is the industry's leading cloud-based big data platform that enables companies to personalize online, offline and mobile marketing campaigns with richer and more actionable information about targeted audiences.

bku

Sets the Bluekai Unique User ID. This ID can be used to personalize the user’s experience across the domains of BNP Paribas Fortis. Additionally, data from other organizations associated with this cookie can be used to further optimize the user’s experience.
(https://datacloudoptout.oracle.com)

90 days

bkp1

Placements (tag management)
(https://datacloudoptout.oracle.com)

90 days

bklc

This cookie is used as a timestamp of last logging event.
(https://datacloudoptout.oracle.com)

90 days

bko

This cookie is used for orders management.
(https://datacloudoptout.oracle.com)

90 days

bkw5

Exchange wins
(https://datacloudoptout.oracle.com)

90 days

bksf

SDT ID transfers
(https://datacloudoptout.oracle.com)

90 days

bk

This is the main checksum cookie.
(https://datacloudoptout.oracle.com)

90 days

bkc

This cookie is used to exchange tags.
(https://datacloudoptout.oracle.com)

90 days

bkdc

This cookie remembers which datacenter is used to store the data of the respective user. This way, the closest datacenter can be used, which improves website performance.
(https://datacloudoptout.oracle.com)

90 days

BKAllow

If this cookie is set to active, the user is opted in to the Bluekai tool.
(https://datacloudoptout.oracle.com)

90 days

BKIgnore

If this cookie is set to active, the user is opted out of the Bluekai tool. This cookie overrides BKAllow.
(https://datacloudoptout.oracle.com)

90 days

bkou

This cookie stores the offline file updates into the profile.
(https://datacloudoptout.oracle.com)

90 days

bksso

This cookie is the identifier of the JSON tag for Site Side Optimization (SSO).
(https://datacloudoptout.oracle.com)

90 days

Google Campaign Manager

Google may contact you with their advertising material. Their advertising content will be tailored to your interests on the basis of your browsing behaviour and the pages you have consulted. The cookies are also used to measure the impact of the bank’s advertising campaigns on this site. The bank doesn’t collect any financial or personal data by means of these cookies. Our third party partner (Havas Media Belgium) may show you ads if you have visited our website. Those ads will be tailored to your interests, based on what you do online and the sites you visit. To improve our marketing content, this cookie may therefore send data to our third party parner. You can find more information about our third party partners' advertising policy and how to block the collection of your data on their respective pages.

Facebook

https://www.facebook.com/settings?tab=ads

180 days

Twitter

https://support.twitter.com/articles/20170514

180 days

LinkedIn

https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en

30 days

Mediamath

http://www.mediamath.com/privacy-policy/

390 days

Appnexus

http://www.appnexus.com/platform-policy#choices

180 days

Doubleclick

https://adssettings.google.com

180 days

Strikead

https://www.sizmek.com/privacy-policy/optedin/#options

90 days

Drawbridge

https://www.drawbridge.com/optoutstart

180 days

Google

http://www.google.com/intl/en/policies/privacy/

180 days

Tradelab

http://tradelab.com/en/privacy/

180 days

Ligatus

https://www.ligatus.com/en/privacy-policy#cookie_status

180 days