How we use cookies
We use cookies or similar technologies to make our website work well for you. When you accept cookies, you allow us to use them. You can choose to only accept certain categories of cookies.
Change your cookie settings
Change cookie settings
You can change which cookies you allow us to use at any time. Necessary cookies cannot be deleted.
Withdraw cookie consent
You can withdraw your consent to the use of cookies at any time. All cookies, except necessary cookies, will be deleted.
3 types of cookies
We use three different categories of cookies or similar technologies. You can accept all cookies or certain categories. When you accept a category, you allow all cookies in that category.
-
Necessary cookies
Necessary for the website to work smoothly and securely and cannot be deselected. Enable important functions such as login and language settings.
-
Functions, performance and statistics
Required in order for functions and customisation to work. Help us understand how the website is used so that we can improve it. The information is aggregated for all users and can never be linked to you. If you do not accept these cookies, some functions may not work properly.
-
Relevant marketing
Help us understand how you use our services so that we can create better tips and offers for you. Some are added by our partners and may affect content and ads you see on other websites. If you do not accept these cookies, you will see less targeted content.
Questions and answers about cookies
Cookies are small text files containing letters and numbers that are stored on your computer, mobile device or tablet when you visit a website that uses cookies. Some cookies are stored on your computer, mobile device or tablet for the duration of your visit to the website. Other cookies are stored for a limited time.
We use cookies to make the website and internet banking easier for you to use, to get information about how visitors use our website and to improve the services we offer you. They are also used for our marketing purposes, and may then be shared with third party providers – companies we work with.
In some cases, the use of cookies means that we process your personal data. In this case, we follow our principles for the processing of personal data.
If you want to, you can delete cookies through the settings on your browser. Please note that the internet bank will not work if you block or remove all cookies. Blocking or removing cookies may also affect the rest of our site and how it works for you. Please note that the necessary cookies are needed to show content on the website and for you to be able to log in to the internet bank.
How to manage cookies in your browser
Yes, so-called necessary cookies are needed to:
- we should be able to display the website in a user-friendly way
- you should be able to log in to the internet bank
- you should be able to select the language for the website
When you are logged in to the internet bank, we use cookies to allow the web server (the bank) to distinguish between different users. The cookie contains your identity and is stored on your computer, mobile or tablet for as long as you are connected to the internet bank. When you log out, it disappears. To use the internet bank you need to allow necessary cookies.
We need your consent to use cookies. You consent by accepting cookies or categories of cookies in the cookie banner that appears when you visit the site. Necessary cookies need to be accepted for some services to work.
In order to show the content on our site and for you to be able to log in to the internet bank, so-called necessary cookies will be saved on your computer, mobile or tablet throughout your visit to the website, or for a limited time. Read more about different cookies and how they are used under "What categories of cookies do we use?".
Cookie list
Below you can find detailed information on our cookies and how we use them.
| Vendor | Cookie | Description | Expires |
|---|---|---|---|
| System | INACTIVITY_VIOLATION_INDICATOR | Value that is stored to make it possible to allow longer durations of user inactivity for certain views in the internet bank. | After session |
| System | JSESSIONID | User session identifier. | After session |
| System | SWBTC | TDE cookie to enable logging. | 5 years |
| System | campaign | Anti-fraud cookie. | After session |
| System | dsid | Cookie to prevent cross-site request forgery (CSRF) | After session |
| Load balancer | wcm | Cookie wcm is to keep users state referred as Cookie persistence to ensure that requests from the same client are directed to the same pool member after the BIG-IP system initially load-balances them. If the same pool member is not available, the system makes a new load balancing decision. Cookie is necessary to ensure sites performance. | After session |
| Load balancer | TS | ASM systems cookie to enforce security policies. The BIG-IP ASM system validates these cookies returned from clients to ensure that the cookies are not modified. | After session |
| System | user-preferred-language | Used to present the login page in the right user choose language | After session |
| System | user-preferred-login-method-id | This cookie is set during every login to retain the customer's choice of login method. | Delete in the browser |
| Tutorial | _DEVICEID | Used for unique device identification. | Delete in the browser |
| Tutorial | _DEVICE_ID | Used for unique device identification. | Delete in the browser |
| System | _EL_TOKEN | Data for Easy Login - generated easy login id, method, masked user id | Delete in the browser |
| System | _LAST_KNOWN_CUSTOMER_TARGET | Used to lazy load private/corporate app bundle | Delete in the browser |
| System | postLoginRedirectUrl | Back from OLD IB | After session |
| System | lang | Used in order to save information in which language content has to be shown. | Delete in the browser |
| System | COOKIE_CONSENT | Cookie stores information whether allowed cookies in your browser. | 1 year |
| System | BIGipServer | Used to distribute traffic to the web site on several servers in order to optimise response times. | After session |
| System | identification_login_preference | The purpose of this cookie is to save selected login preference when user is performing login into internet bank. For example when user clicks save my choice and clicks to login into NIB we want to save this option into cookies so that on the next login user would be immediately logged in into NIB. | 1 month |
| SiteSpect | SSLB | This cookie serves as affinity cookie. It is either (1) session-only or (2) persistent, depending on the situation. Indicates to a downstream load balancer that subsequent requests by a user should be routed to or away from SiteSpect, depending on the cookie's value. This is created under swedbank.se domain and not used by online channels. | 2 years |
| SiteSpect | NSSLB | This cookie serves as affinity cookie. It is either (1) session-only or (2) persistent, depending on the situation. Indicates to a downstream load balancer that subsequent requests by a user should be routed to or away from SiteSpect, depending on the cookie's value. This is created under swedbank.se domain and not used by online channels. | 2 years |
| Local Storage | fdpTutorial | Determines if the internet bank tutorial has been completed by the visitor. | Delete in the browser |
| Session Storage | skipKYC | Stores information to prevent the DKYC application to run again when visitor has answered. | After session |
| Local Storage | unauth-bank-id | Keeps track of whether our logo should be shown to visitor after logout. | Delete in the browser |
| System | x-user | User session identifier. | After session |
| System | x-profile | User session identifier. | After session |
| System | x-engagement | User session identifier. | After session |
| System | APPID | Used for unique device identification. | After session |
| System | DEVICEID | Used for unique device identification. | After session |
| System | __swdbnk___fpcachecc | Is used to identify unique visitors, with ID and timestamp. | 1 year |
| System | __swdbnk___rlcl | Is used to identify unique visitors, with ID and timestamp. | After session |
| System | __swdbnk___rkybrd | Is used to identify unique visitors, with ID and timestamp. | After session |
| System | __swdbnk_k0 | Is used to identify unique visitors, with ID and timestamp. | After session |
| System | __swdbnk_k1 | Is used to identify unique visitors, with ID and timestamp. | After session |
| System | VisitedConsentPopup | Purpose of use is to determine whether a user has been presented a consent offer within the session, so that logically in the code we can prevent from showing multiple consents within the same session. | After session |
| System | CORPORATE_ONBOARDING_TARGET | The cookie is used to determine wether a user originated from a banks .se page with the purpose of starting a company in service portal. It is also used to store the bankId respective to the swedbank or savings bank the user came from. | After session |
| System | x-profile | User session identifier. | Session |
| System | x-user | User session identifier. | Session |
| Vendor | Cookie | Description | Expires |
|---|---|---|---|
| Adobe Analytics | AMCVS_ | Adobe Analytics cookie, shows if Analytics are enabled. | After session |
| Adobe Analytics | s_ifs | A session-based cookie used to ensure that cookie consent values are synchronized when a customer navigates Swedbank’s website and Internet bank pages, which in some cases run on different domains. Using such a cookie contributes to server performance optimization. | After session |
| Adobe | s_cc | Adobe Site Catalyst cookie, determines if cookies enabled in the browser. | After session |
| Internal Tracking | AMCV_ | Adobe Analytics marketing cloud ID cookie, tracks if the same device is using the site. | 2 years |
| Adobe | s_vi | Adobe Site Catalyst cookie, used to identify unique visitors, with an ID and timestamp | 2 years |
| Adobe | s_vi_vx60gx60x60 | Adobe Site Catalyst cookie, used to identify unique visitors, with an ID and timestamp | 2 years |
| AppDynamics | ADRUM | Written by the JavaScript Agent, this cookie contains the referral page URL and some timing information to assist gathering First Byte Time for some browser types. When the agent loads on the subsequent page, it reads the information and then deletes the cookie. If there is no agent on that page, the cookie is deleted when the browser is closed. For privacy purposes, the URL of the referral page is hashed. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BT | Written by the server-side agent when the page is served from an instrumented server. These cookies help correlate browser data with related server-side performance data. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BTa | Contains the backend transaction ID as well as timing info and is used to correlates end-user experience with the health of the backend app. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BTg | Contains the backend transaction ID and is used as an alternative method to correlate end-user experience with the health of the backend app. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BT[1-5] | Contains the business transaction numbers as well as timing and error info for the first five business transactions, such as ADRUM_BT1, ADRUM_BT2, etc. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BTs | Contains a link from a browser snapshot to a server snapshot. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| AppDynamics | ADRUM_BTh | Only written if there was a server-side error. Does not contain any personally identifiable information (PII) and are immediately deleted after being read. | Immediately deleted after being read |
| Glassbox | _cls_s | Used to improve the user experience and helps us understand and analyse the activity on our websites. | After session |
| Glassbox | _cls_v | Used to improve the user experience and helps us understand and analyse the activity on our websites. | After session |
| Glassbox | Bc | This cookie allows recording of user sessions across subdomains. | After session |
| Glassbox | gb.sid | LocalStorage value for the current Glassbox session id. | Delete in the browser |
| Glassbox | db.botDetection | LocalStorage value used for detecting search engine bots | Delete in the browser |
| Glassbox | gb.lastReferrer | LocalStorage value for the last referred url | Delete in the browser |
| Glassbox | gb.cors_ready | LocalStorage value for indication of CORS readiness. | Delete in the browser |
| Glassbox | gb.recording.bychance.enabled | LocalStorage value that indicates whether recording is enabled by chance. | Delete in the browser |
| Glassbox | gb.record.bychance.prev_th | LocalStorage value used to identify updated threshold configuration settings to ensure resampling of current user. | Delete in the browser |
| Glassbox | gb.domrecord.bychange.enabled | LocalStorage value used to indicate whether DOM recording is enabled by chance. | Delete in the browser |
| Glassbox | gb.domrecord.bychange.prev_th | LocalStorage value for previously used DOM recording chance threshold configuration. | Delete in the browser |
| Glassbox | gb_unbound.app.conf | LocalStorage value for recent configuration received from Glassbox Gateway. | Delete in the browser |
| Glassbox | gb_unbound.res.pending | LocalStorage value for pending resources for download. | Delete in the browser |
| Glassbox | gb_unbound.res.all | LocalStorage value for indicating full resources recording mode. | Delete in the browser |
| Glassbox | gb_unbound.cls_v_expr | LocalStorage value with number of days in which the visitor id expires. | Delete in the browser |
| Glassbox | gb.psn | LocalStorage value with page serial number in the current browser tab. | Delete in the browser |
| Glassbox | gb.btabid | LocalStorage value with tab ID to identify when new tab was opened. | Delete in the browser |
| AppDynamics | ADRUM_CLIENTINFO | Contains a sequence ID that is used to stitch together sessions. | 20 years |
| AppDynamics | ADRUM_AGENT_INFO | Contains a GUID that identifies the domain from which the page that loaded adrum.js originated, along with the version. | 20 years |
| AppDynamics | ADRUM_XD_AGENT_INFO | Used instead of the ADRUM_AGENT_INFO when cross-domain sessions are enabled. Contains a GUID and a time-to-live that is used to expire the entry, by default a week after being set. The browser does not remove the entry, but after the TTL, the agent will no longer reference the GUID. | 1 week |
| AppDynamics | ADRUM_XD_AGENT_ID | A GUID that identifies the server (a CDN) that hosts adrum-xd.html, used in cross-domain sessions. | 20 years |
| Microsoft | ARRAffinity | This cookie is added by Windows Azure Cloud Platform. It is used for load balancing and to ensure that page calls from the same visitor are directed to the same server in every session. | After session |
| Vitec Software | 42e9259729 | Added when the user previously have visited www.vitecsoftware.com and is used for visitor statistics. | 128 day |
| NID | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | 20 years | |
| ANID | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | 1 year | |
| DV | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | 1 day | |
| 1P_JAR | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | 1 month | |
| reCAPTCHA* | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | After session | |
| CONSENT | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | 20 years | |
| _GRECAPTCHA | Google ReCaptcha stores a cookie to help detect whether the user is a robot or not (ensure security). | After session | |
| App banner | SMART_APP_BANNER | Cookie to save preferences on smart app banner which redirects to app store (iOS and Android) if chosen then it is not displayed for 30 days in public sites. | 1 month |
| SiteSpect | SSID | Purpose of this cookie is user tracking. It is a persistent cookie that tracks a visitor over time. | 1 year |
| SiteSpect | NSSID | Purpose of this cookie is user tracking. It is a persistent cookie that tracks a visitor over time. | 1 year |
| SiteSpect | SSSC | Purpose of this cookie is to signal a status. It is a session-only cookie used to send the user's Campaign assignment information to the backend webserver. This is created under swedbank.se domain and not used by online channels. | After session |
| SiteSpect | NSSSC | Purpose of this cookie is to signal a status. It is a session-only cookie used to send the user's Campaign assignment information to the backend webserver. This is created under swedbank.se domain and not used by online channels. | After session |
| SiteSpect | SSRT | Purpose of this cookie is to track recent requests. It stores the date and time of the user's last request to determine if the visit has timed out. In addition, it stores information about the robot test (does SiteSpect think this person is a robot, how many tries of the robot test have we done). This is created under swedbank.se domain and not used by online channels. | 1 year |
| SiteSpect | NSSRT | Purpose of this cookie is to track recent requests. It stores the date and time of the user's last request to determine if the visit has timed out. In addition, it stores information about the robot test (does SiteSpect think this person is a robot, how many tries of the robot test have we done). This is created under swedbank.se domain and not used by online channels. | 1 year |
| SiteSpect | SSPV | Purpose of this cookie is to enable preview. It is used by the Preview feature and used when the Logging Level field on the Logging & Performance tab for the Domain is set to Debug. This is created under swedbank.se domain and not used by online channels. | 1 year |
| SiteSpect | NSSPV | Purpose of this cookie is to enable preview. It is used by the Preview feature and used when the Logging Level field on the Logging & Performance tab for the Domain is set to Debug. This is created under swedbank.se domain and not used by online channels. | 1 year |
| SiteSpect | SSOD | Purpose of this cookie is to store additional data. It stores additional Campaign data for the user, including the hit rating value and the baseline Metric hit data. | 1 year |
| SiteSpect | NSSOD | Purpose of this cookie is to store additional data. It stores additional Campaign data for the user, including the hit rating value and the baseline Metric hit data. | 1 year |
| Youtube | APISID | Youtube’s cookies provide videos that we embed and present to the users. | From 6 months to 10 years. |
| Youtube | SSID | Enables Google to collect user information for videos hosted by Youtube. | 2 years |
| Youtube | HSID | Enables Google to collect user information for videos hosted by Youtube. | 2 years |
| Youtube | LOGIN_INFO | This cookie is used to play Youtube videos embedded on the website. | From 6 months to 10 years. |
| Youtube | PREF | This cookie is used to play Youtube videos embedded on the website. | From 6 months to 10 years. |
| Youtube | SAPISID | This cookie is used to play Youtube videos embedded on the website. | From 6 months to 10 years. |
| Youtube | VISITOR_INFO1_LIVE | An embedded Youtube-video collects visitor information and adjusted preferred settings. | From 6 months to 10 years. |
| Youtube | YSC | An embedded Youtube-video collects visitor information and adjusted preferred settings. | After session |
| Youtube | CONSENT | Consent cookie for Youtube service | 18 years |
| System | VACACHE-SID_ | Used to tell whether the user is starting a new Virtual Assistant chat session or just coming back (e.g. page refresh). | After session |
| System | va-last-read-message-time | It stores timestamp of last time user has read the chat and is needed for managing notification counter of incoming messages that user has not read when the chat is minimized. | After session |
| System | user-preferred-login-on-same-device | This cookie is set during every login to retain the customer's choice of whether to log in using a Mobile BankID on the same or different device. | Delete in the browser |
| AppDynamics | allow_bt_cookie | Allow to set Backend correlation cookies | 1 year |
| System | eventbucket | This is a user identifying cookie generated by Swedbank used to log cookie consent selection. It ensures selected cookie consent policy is enforced between different platforms. | 6 months |
| System | IsCookiesConsented | Defines wether customer have consented to cookies or not, turns out in either true or false | After session |
| System | KycIsPresent | Defines wether the customer have unanswered kyc questions, turning out in either true or false | After session |
| System | savings.search-history | Save user search history for better user experience | 1 year |
| System | savings.chart.settings | Save chart settings for better user experience | 1 year |
| System | savings.news.language.settings | Save which languages news user wants to receive | 1 year |
| System | savings.news.sources.settings | Save which sources the user wants to receive news from | 1 year |
| System | savings.dashboard.view.settings | Save if user wants to see detailed or compact view of the savings dashboard by default | 1 year |
| System | savings.news.universe.settings | Save which universe the user wants to receive news for | 1 year |
| System | VISIT_NOTIFICATION_POPUP | Determines whether the user have visited notification settings popup in service portal start page | After session |
| System | savings.account-details.settings | To store page layout preferences for /spara-placera/oversikt/konto page. | 3 years |
| Vitec Software | 42e9259729 | Added when the user previously have visited www.vitecsoftware.com and is used for visitor statistics. | 128 days |
| Swedbank on Azure | ARRAffinity | This cookie is added by Windows Azure Cloud Platform. It is used for load balancing and to ensure that page calls from the same visitor are directed to the same server in every session. | Session |
| Vendor | Cookie | Description | Expires |
|---|---|---|---|
| SID | Google uses security cookies to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorized parties. | 2 years | |
| SIDCC | Secure cookie to protect user data from unauthorized access. | 15 months | |
| _ga | Used for Google Analytics. It is used to distinguish unique users by assigning a randomly generated number as a client identifier. | 2 years | |
| _gid | Used to store randomly generated ids and campaign information about the user. | 1 day | |
| APISID | Google uses cookies, like the PREF, NID and SID cookie, to contribute to the personalization of the ads in Google properties, like Google search. For example, we use them to store your most recent searches, your previous interactions with ads or search results and your visits to an advertiser's website. In this way we can show you personalized ads on Google. | 2 years | |
| HSID | Contains encrypted entries of your Google account and the last login time to protect against attacks and data theft from form entries. | 2 years | |
| OTZ | This cookie is used to support Google’s advertising services | 17 days | |
| OGPC | This cookie enables the functionality of Google Maps. | 1 month | |
| Adform | C | Adform identifies if user’s browser accepts cookies. If the user accepts cookies, 1, the setting is saved for 60 days. If the user does not accept cookies, 3, the setting is saved for 3650 days. | 14 days |
| Adform | CM14 | Adform identifies if there is a need to re-check partner‘s cookie matching existence (set by Cookie Matching). | 14 days |
| Adform | DigiTrust.v1.identity | User identifier set by DigiTru.st, independent industry body. | 1 week |
| Adform | TPC | Identifies if user’s browser accepts third-party cookies. (A third-party cookie is one that is set in the user’s browser by a web site from a domain other than the one the user is visiting.) | 14 days |
| Adform | adtrc | Identifies if browser information was gathered for Adform. | 7 days |
| Adform | cid | Cookie id (legacy) – unique identifier for cookie (same as uid for Adform). | 2 months |
| Adform | uid | Unique identifier for Adform, same as cid for cookie. | 1 month |
| Adform | _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3 months |
How your privacy is protected by our partners
Some partners place cookies or similar technologies on your computer, mobile or tablet when you visit this website. Read about how our partners handle your privacy and cookies.
| Privacy policy | Cookie policy | |
|---|---|---|
| Adform | ||
| Google's privacy policy | Google's cookie policy | |
| Investis | Investis' privacy policy | Investis' cookie policy |
| Sitespect | Sitespect's privacy policy | Sitespect's cookie policy |
| Vitec Software | Vitec Software's privacy policy | Vitec Software's cookie policy |
| YouTube | YouTube's privacy policy | YouTube's cookie policy |
| Facebook's privacy policy | Facebook cookie policy | |
| AppDynamics | AppDynamic's privacy policy | AppDynamics cookie policy |
| Glassbox | Glassbox's privacy policy | Glassbox's cookie policy |
| Adobe Analytics | Adobe Analytics privacy policy | Adobe Analytics cookie policy |
| Microsoft | Microsoft's privacy policy | Microsoft cookie policy |