Cookie Policy

Cookie Policy

Effective date: March 20, 2026 | Last updated: March 20, 2026

Tokenised ETFs (“we,” “us,” “the Platform”), operated by The Vanderbilt Portfolio AG, Zurich, Switzerland, uses cookies and comparable tracking technologies on tokenisedetfs.com. This Cookie Policy provides a detailed account of what cookies are, the specific cookies active on this Platform, why each cookie exists, how long each cookie persists, and how you can exercise control over cookie storage on your device. This policy is a companion document to our Privacy Policy and Terms of Service.

What Cookies Are and How They Work

A cookie is a small text file that a web server sends to your browser, which then stores it on your device — desktop, laptop, smartphone, or tablet. When you return to the same website or navigate to a new page within the same site, your browser sends the cookie back to the server, enabling the site to recognize your device and recall information from your previous interactions. Cookies are a foundational technology of the modern web, enabling features ranging from session management to personalized content delivery.

This Platform also employs tracking mechanisms related to cookies, including web beacons (invisible pixel-sized images that record when a page or email has been accessed), browser local storage (which retains data on your device without an expiration date unless manually cleared), and JavaScript event listeners that capture interactions such as clicks, scroll depth, and navigation patterns. When this policy references “cookies,” it encompasses all of these technologies collectively.

Types of Cookies on tokenisedetfs.com

We organize the cookies deployed on this Platform into four categories based on their function and purpose.

Essential (Strictly Necessary) Cookies

Essential cookies underpin the fundamental operation of the Platform. Without them, core features would not function — pages would not load correctly, session states would not persist, and the consent management system could not record your cookie preferences. Essential cookies handle tasks such as distributing traffic across our server infrastructure (load balancing), validating security tokens to prevent cross-site request forgery, and persisting your consent choices so you are not prompted to accept or decline cookies on every page view.

Because these cookies are indispensable for delivering the service you have requested, they are exempt from the consent requirement under the ePrivacy Directive (Article 5(3)) and GDPR recital 30. They are set as soon as you access the Platform. Essential cookies are either session-scoped (deleted when you close your browser) or persist for up to 24 hours to maintain consent records between browsing sessions.

Analytics Cookies (Google Analytics 4)

Analytics cookies enable us to measure how visitors use the Platform in aggregate, providing statistical insights that inform editorial and technical decisions. We use Google Analytics 4 (GA4) for this purpose. Understanding aggregate traffic patterns — such as whether visitors spend more time on treasury ETF profiles or yield product comparisons — helps us allocate research resources to the content areas that deliver the most reader value.

GA4 deploys the following cookies on your device:

• _ga — Assigns a randomly generated, pseudonymous client identifier to distinguish unique visitors across sessions. This cookie does not contain your name, email address, or any directly identifiable information. Retention: 2 years from last activity.
• _ga_[container-id] — Tracks session state, determining whether a given page view is part of a new session or a continuation of an existing one. Retention: 2 years.
• _gid — Provides a secondary visitor distinction mechanism for high-frequency measurement over shorter periods. Retention: 24 hours.

We have configured GA4 with privacy-protective settings: IP anonymization is active (the last octet of your IP address is zeroed before processing), data retention is set to 14 months, remarketing and advertising reporting features are disabled, and data sharing with other Google products is restricted to core analytics functions. GA4 data is processed on Google servers, which may reside in the United States. Google LLC maintains certification under the EU-U.S. Data Privacy Framework.

Advertising Cookies (Google AdSense)

This Platform displays advertisements served by Google AdSense. As stated in our conflict-of-interest disclosure, advertising revenue from Google AdSense is our exclusive revenue source — we do not receive payments, sponsorships, or compensation from any tokenized fund issuer, including BlackRock, Franklin Templeton, Ondo Finance, or Maple Finance.

Google AdSense sets cookies to deliver advertisements, measure ad performance, cap ad frequency (preventing the same ad from appearing excessively), and personalize ads based on inferred interest categories derived from your browsing history across the Google Display Network. The principal advertising cookies include:

• IDE (DoubleClick) — The primary advertising cookie used for ad targeting, conversion tracking, and frequency management. Retention: 13 months in EEA/UK regions subject to GDPR; up to 24 months in other jurisdictions.
• NID — Stores preferences and settings used by Google to customize advertisements on non-Google websites. Retention: 6 months.
• ANID — Links your Google Account (if you are signed in) to your advertising preferences across Google services and partner sites. Retention: 13 months (EEA/UK) to 24 months (other regions).
• 1P_JAR — Collects site statistics and measures conversion rates for advertisements. Retention: 30 days.
• CONSENT — Records your consent state for Google services. Retention: 20 years (set by Google, not by this Platform).

Personalized advertising means that the ads you see may be influenced by the types of tokenized fund content you have previously viewed — both on this Platform and on other participating sites across the internet. You can opt out of personalized ads at Google Ad Settings: https://adssettings.google.com. You can also opt out across the broader advertising ecosystem at the Network Advertising Initiative: https://optout.networkadvertising.org.

Functional Cookies

Functional cookies remember your preferences and settings to provide a smoother experience on return visits. On tokenisedetfs.com, functional cookies primarily persist your consent choices (which cookie categories you accepted or declined) and may store display preferences such as dismissed notification banners. These cookies typically persist for up to 12 months.

Google Consent Mode v2

tokenisedetfs.com implements Google Consent Mode v2 in accordance with Google’s publisher requirements and European data protection law. Consent Mode v2 communicates your cookie consent decisions to all Google services integrated on the Platform through standardized consent signals:

• ad_storage — When set to “granted,” advertising cookies may be read from and written to your device. When “denied,” Google AdSense will not set advertising cookies and will serve only non-personalized, contextual advertisements.
• analytics_storage — When “granted,” analytics cookies are set normally. When “denied,” GA4 switches to cookieless measurement mode, sending anonymized pings to our analytics property without storing any persistent identifier.
• ad_user_data — Controls whether user-level data may be sent to Google for advertising optimization.
• ad_personalization — Controls whether data may be used for remarketing and interest-based ad personalization.
• functionality_storage — Controls whether functional cookies (such as preference storage) may be set.

On your first visit, all consent signals default to “denied.” The consent banner presented on initial page load gives you granular control — you may accept all categories, reject all non-essential categories, or selectively enable specific categories. Your consent state is saved in a first-party cookie so it persists across sessions and pages without requiring re-consent each time.

Cookies Set by Third Parties

Beyond Google Analytics and Google AdSense, the following third-party integrations on the Platform may independently set cookies:

• Google Fonts — Typeface assets are loaded from Google’s content delivery network. Font requests may be logged server-side, but Google Fonts does not set persistent tracking cookies on your device.
• External embeds — If any page embeds content from external services (e.g., blockchain explorer widgets, data visualization tools), those services may set cookies governed by their own policies.

We do not control third-party cookies and recommend reviewing the cookie and privacy policies of each third-party provider.

How to Control Cookies

Consent banner. On your first visit, our consent banner lets you accept or decline non-essential cookie categories. To reset your preferences at a later date, clear your browser’s cookies for tokenisedetfs.com — the consent banner will reappear on your next visit.

Browser settings. All major browsers offer cookie management controls. You can block all cookies, allow only first-party cookies, delete existing cookies, or receive a prompt before each cookie is set. Browser-specific instructions are available at:

• Chrome: chrome://settings/cookies
• Firefox: about:preferences#privacy
• Safari: Preferences > Privacy
• Edge: edge://settings/privacy

Note that blocking all cookies may impair Platform functionality, including navigation and the display of data-intensive pages like our dashboard.

Google-specific opt-outs. Install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) to prevent GA4 from collecting data during your visits. Manage Google advertising preferences at https://adssettings.google.com. For broader industry opt-out, use the Digital Advertising Alliance tool at https://optout.aboutads.info.

Do Not Track and Global Privacy Control. This Platform recognizes the Do Not Track (DNT) browser header and the Global Privacy Control (GPC) signal. When either signal is detected, non-essential cookies are suppressed and analytics operates in cookieless mode.

Cookie Retention Reference

GDPR and Swiss FADP Rights

If you are in the EEA, UK, or Switzerland, you have the right to: be informed about cookie usage (fulfilled by this policy); access personal data collected through cookies; request erasure of cookie-related data; restrict processing; withdraw consent at any time without affecting the lawfulness of prior processing; and lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection supervisory authority. To exercise these rights, contact info@tokenisedetfs.com.

CCPA/CPRA Rights

California residents may: request disclosure of personal information collected through cookies; request deletion of that information; and opt out of the sale or sharing of personal information. Google advertising cookies may constitute “sharing” under CCPA definitions. Opt out by declining advertising cookies via our consent banner, by enabling Global Privacy Control (GPC) in your browser, or by contacting info@tokenisedetfs.com.

Policy Updates

We may revise this Cookie Policy to reflect changes in cookie technology, regulatory requirements, or our use of third-party services. The “Last updated” date at the top indicates the most recent revision. We encourage periodic review of this policy.

Contact

For questions about this Cookie Policy or our use of tracking technologies:

The Vanderbilt Portfolio AG Zurich, Switzerland Email: info@tokenisedetfs.com

For comprehensive data protection information, see our Privacy Policy.