Cookies Protocol
& Security Tracking
Last Updated: June 2026
8 Sections
Jump to Section
Essential Infrastructure & Session Integrity
Section 01 of 8
Our platform relies on essential cookies to maintain state integrity during the cryptographic identity verification flow. These cookies are strictly necessary to securely transmit your data payload across our load balancers without losing session state or compromising AES-256 encryption.
Automated Bot Detection (Cloudflare Turnstile)
Section 02 of 8
To prevent Distributed Denial of Service (DDoS) attacks, brute-force credential stuffing, and API scraping, we implement Cloudflare Turnstile. This security layer uses non-intrusive tracking challenges to cryptographically verify that requests are originating from human operators rather than automated botnets.
Ping-Tree Network Routing Identifiers
Section 03 of 8
When your loan request is submitted, it is dynamically routed through our Ping-Tree network. We use temporary routing cookies and tracking pixels to track the status of your application across our integrated affiliate network nodes. This ensures that duplicate leads are suppressed and you receive the most optimal approval.
Consent Documentation (Session Replay)
Section 04 of 8
In strict adherence to the Telephone Consumer Protection Act (TCPA) and the Telemarketing Sales Rule (TSR), we utilize specialized session replay scripts, such as ActiveProspect TrustedForm and Jornaya LeadiD. These scripts record your interactions with our web forms to generate an immutable Certificate of Consent, providing cryptographic proof of your authorization to be contacted.
Performance Analytics & Optimization
Section 05 of 8
We utilize secure analytical identifiers to measure conversion performance, identify user experience bottlenecks, and optimize our routing algorithms. While these cookies analyze behavioral metrics on an aggregate level, no sensitive personal financial data (like SSN or bank account numbers) is exposed or shared for unrelated third-party marketing purposes.
Global Privacy Control (GPC) & DNT Signals
Section 06 of 8
We natively support and recognize the Global Privacy Control (GPC) signal. If your browser transmits a valid GPC signal, our systems will automatically opt you out of the "sale" or "sharing" of your data for cross-context behavioral advertising, complying with the California Privacy Rights Act (CPRA). We do not currently respond to legacy Do Not Track (DNT) headers due to a lack of industry standardization.
Third-Party Behavioral Tracking
Section 07 of 8
In addition to our proprietary infrastructure, we may partner with select third-party advertising networks (e.g., Google Ads, Meta Pixel) to deliver targeted financial product offers on external websites. These third parties may place cookies on your device to build a behavioral profile. You may opt out of these specific cookies via our consent management portal or network opt-out tools.
Managing Your Cookie Preferences
Section 08 of 8
You reserve the right to restrict or block non-essential cookies. You can manage your preferences directly through your browser settings by clearing cache, blocking third-party cookies, or utilizing privacy extensions. Please be advised that disabling "Essential Infrastructure" cookies will render the InstantLoans.ai matching engine inoperable, as we cannot securely process encrypted financial requests without state management.
Questions about our cookies or tracking? Contact us at compliance@instantloans.ai
By disabling essential cookies, you acknowledge that you will not be able to use the InstantLoans.ai matching engine.