Cookie Notice

This notice explains every cookie Datum Investment Solutions, LLC sets on this site, what each one does and how long it lasts. It is complete: there are no others.

The short version

We set four cookies, all of them our own, and every one exists to make the site work — to keep you signed in, to finish a sign-in, or to remember that you have been past the front page. There are no advertising cookies, no analytics cookies and no cross-site tracking of any kind, which is why you are not being asked to accept anything. There is nothing here to opt out of.

The cookies

datum_session — signs you in. Set when you sign in, and it is what tells this site who you are on every page after that. It holds a random token and nothing else: no name, no email, no identifier that means anything anywhere else. Lasts 12 hours, or until you sign out.

datum_mfa — carries a half-finished sign-in. Set only when your account has two-step verification and you have given the password but not yet the code. Lasts 5 minutes.

datum_oauth — protects the Google sign-in. Set only if you choose to sign in with Google, and it exists so that the reply coming back from Google can be matched to the request that left this site. Without it, somebody else could start that exchange on your behalf. Lasts minutes, and is deleted the moment you arrive back.

datum_guest — records that you chose to go past the front page and look at listings. Its value is the single character 1. It identifies nobody, and signs in nobody. Lasts 12 hours.

All four are HttpOnly, so no script running in the page can read them; SameSite=Lax, so they do not travel with requests started by another site; and Secure, so they are only ever sent over an encrypted connection.

Things kept in your browser that are not cookies

Some of your choices are stored by your own browser and never sent to us. They are not cookies, they cannot be read by anybody else, and clearing your browsing data removes them:

• the light or dark theme you picked
• whether you were last looking at a list or a map, and how wide the panels were
• a cart and a shortlist you built before signing in, so they survive a reload
• how far you had got in the guided walkthrough

Two things loaded from elsewhere

The listings map fetches two things from other companies' servers, and each of them therefore sees your internet address, as any server does when a browser asks it for a file:

• cdnjs.cloudflare.com — the mapping library the page uses to draw the map.
• tile.openstreetmap.org — the map tiles themselves.

Neither sets a cookie on this site, and neither is told who you are or which property you are looking at. Pages without a map — the front page, this one, the blog — fetch nothing from anybody.

Turning them off

Every browser can block or delete cookies, and you are welcome to. Blocking datum_session means you cannot stay signed in, which is not a restriction we impose so much as arithmetic: without it there is nothing to recognize you by.

Asking us about this

• Email: no-reply@datum-is.com
• Telephone: 888-842-4000
• Post: Datum Investment Solutions, LLC, 30211 Avenida de las Banderas, Suite 200, Rancho Santa Margarita, cA 92688