Cookie Policy

A cookie is a small file a site stores in your browser. CloneALO also uses two related browser features — local storage and session storage — for the same purposes. Everything described here applies to all three.

This policy covers clonealo.com and the CloneALO application. It sits alongside the Privacy Policy, which explains the wider handling of personal and financial information.

• CloneALO sets no advertising cookies and no cross-site tracking pixels.
• We do not sell personal information or share it for cross-context behavioral advertising.
• Borrower loan data is never used to target advertising.

• Session tokens that keep you signed in as you move between screens, and refresh tokens that renew that session. Stored in your browser and cleared when you sign out.
• The company or workspace you are currently working in, so record screens load the correct tenant.

Without these the platform cannot verify who you are, so they cannot be switched off while you are using an account.

• A request-verification value that blocks another site from submitting actions using your session.
• Short-lived values used to complete sign-in, password reset, and invitation links.

• Interface choices such as theme and sidebar state.
• Signup progress, so returning from the payment page lands you on your confirmation instead of a blank form.

When you pay for a subscription, the checkout page is hosted by our payment processor, which sets its own cookies to complete the payment and detect fraud. CloneALO never receives or stores your full card number.

• Session values: removed when you sign out or the browser session ends.
• Sign-in renewal values: rotate regularly and expire when the session is no longer valid.
• Preference values: kept on your device until you clear them or change the setting.
• Payment-processor cookies: governed by that processor's own policy.

• Every browser lets you view, block, and delete cookies and site storage in its settings.
• Blocking strictly necessary values will sign you out and prevent the platform from loading records.
• Clearing preference values only resets the interface to its defaults.
• Signing out removes the session values CloneALO set for your account on that device.

Because CloneALO performs no cross-site tracking, browser Do Not Track signals do not change what is stored. Marketing and messaging opt-outs are handled separately and are honored — see the SMS consent terms and the privacy request page.

If the cookies we use change, this page is updated and the effective date above changes with it. Prior versions remain available in the legal archive.

Write to privacy@clonealo.com. Borrowers with a question about a specific loan file should contact their loan officer or brokerage first, since the brokerage controls that record.