Home/Cookie policy

Legal

Cookie policy

This policy explains what cookies are, which ones yusr.com.sa uses, what each of them is actually for, and how to change your settings if you would rather we used fewer of them.

The short version

A handful of cookies keep the site working and keep you signed in. The rest tell us which pages help people and which ones don't, and let us see whether our campaigns are worth running. You can turn the second group off.

Change your cookie settings

Yusr Bank — Cookie and tracking policy · Version 2.1
Last updated 14 January 2026 · Applies to yusr.com.sa

1. What cookies are

A cookie is a small text file that a website asks your browser to store on your computer or phone. The next time you visit, the browser hands that file back, so the site can recognise the same browser and pick up where it left off — keeping you signed in, for example, or remembering that you already dismissed a banner.

Cookies set by yusr.com.sa itself are called first-party cookies. Cookies set by a company we work with, through content loaded onto our pages, are called third-party cookies. This policy covers both, along with a few related technologies that do a similar job — local storage in your browser, and the small transparent images sometimes called pixels or beacons.

Where this policy talks about cookies, take it to mean all of those.

2. Why we use them

Some of it is plumbing. Web servicing at yusr.com.sa cannot work without a way to tell one visitor's session apart from another's, and a bank in particular needs to be certain that the request arriving at its servers came from the person who is actually signed in.

The rest is about knowing whether the site does its job. We look at which pages people read before they open an account, where applications stall, which help articles get opened twice because they weren't clear the first time, and whether the campaigns we pay for bring anyone here. That is the difference between improving the site and guessing at it.

3. The categories we use

Every cookie on yusr.com.sa falls into one of three groups. The cookie banner lets you make a separate decision about the second and third.

Always on

Strictly necessary

Sign-in, session handling, load balancing and the security tokens that protect forms. Without these the site either breaks or becomes unsafe to use, so they cannot be switched off. They are all first-party and none of them are used to build a picture of you.

On by default

Analytics

Page views, referring links, the route taken through the site, how long a page held attention, and whether a visit ended in an application. Reported to us in aggregate — we use it to fix the pages people struggle with, not to identify individual visitors.

On by default

Marketing

Measures how our campaigns perform — which advert, email or message brought someone to the site, and what they did once they arrived. It also lets us show Yusr adverts to you on other websites you visit.

4. The cookies we set

The list below covers the cookies in use at the date of this policy. Names and durations change occasionally as we replace the tools behind them; we refresh this table whenever that happens.

Cookie What it does Provider Duration
yusr_sid
Necessary
Identifies your signed-in session on web servicing and ties your requests together. Deleted the moment you close the browser. Yusr (first party) Session
yusr_csrf
Necessary
Security token. Stops another website submitting a form to us while you are signed in. Yusr (first party) Session
yusr_lb
Necessary
Keeps a single visit on a single server so pages load consistently. Yusr (first party) Session
yusr_cookie_prefs
Necessary
Stores the choice you made in the cookie banner, so we stop asking on every page. Clearing it brings the banner back. Yusr (first party) 12 months
yusr_lang
Necessary
Remembers whether you chose the Arabic or English version of the site. Yusr (first party) 12 months
_ysa_id
Analytics
Gives your browser a random identifier so we can count visitors rather than visits, and see which pages people read before opening an account. Yusr (first party) 13 months
_ysa_ses
Analytics
Groups the pages you open into one visit, so a long read isn't counted as five separate people. Yusr (first party) 30 minutes
pg_ref
Marketing
Records which email or SMS campaign brought you to the site, so campaign reporting can attribute the visit to the right message. Pulsegate Ltd, Dublin, Ireland 90 days
_ysx_aud
Marketing
Campaign measurement pixel. Reports how many people who saw a Yusr advert went on to visit us, and lets Yusr adverts be shown to you on other websites. Our advertising partners 180 days

Durations are the maximum life of the cookie. Clearing your browser's cookies removes all of them immediately, including the one that remembers your settings.

5. Email and SMS campaigns

Our marketing emails and SMS messages are delivered by Pulsegate Ltd, a messaging provider based in Dublin, Ireland. Pulsegate sends the message on our behalf and reports back on how it performed: whether it was delivered, whether the email was opened, and which links were clicked.

Opens are measured with a single transparent image embedded in the email. If your mail program blocks images by default — most now do — the open is simply never recorded. Clicks are measured by routing the link through Pulsegate before it lands on our site, which is also what sets the pg_ref cookie described above.

Every marketing email carries an unsubscribe link, and every marketing SMS carries a stop instruction. Using either one stops the campaign messages and the measurement that goes with them. Service messages — a payment alert, a card despatch note, a statement, anything we are required to send you about your account — are handled separately and are not campaign traffic.

Turning marketing cookies off is not the same as unsubscribing

The cookie banner controls what happens on this website. Email and SMS preferences are held against your account and are changed in the app under Settings, or by asking our support team.

6. Advertising on other sites

We advertise Yusr on search engines, social platforms and other websites. Two things follow from that. The first is measurement: the campaign pixel tells us how many people who saw an advert went on to visit yusr.com.sa and how many of those opened an account, which is how we decide whether a campaign was worth its budget.

The second is that advertising networks can use the same signal to show you Yusr adverts again after you have been here — the "you looked at us once" adverts everybody recognises. Turning off marketing cookies stops that signal being sent from our site. It will not remove adverts you are shown for other reasons, and it will not delete data an advertising network already holds about your browser. Most networks offer their own opt-out; the platform's own ad settings are the place to use it.

7. Your choices

When you first arrive at yusr.com.sa a banner appears at the bottom of the screen explaining that we use cookies. By continuing to browse the site you agree to our use of cookies. You can accept everything with a single tap, or open Manage settings to make a category-by-category choice.

Strictly necessary cookies are always on, because the site cannot function without them. Analytics and marketing cookies are switched on by default. If you would rather they weren't, open Manage settings in the banner, untick the categories you don't want and save. Your choice is recorded in yusr_cookie_prefs and applies to every page from that point on.

To revisit the decision later, clear the cookies for yusr.com.sa in your browser. The banner will appear again on your next visit and you can choose differently.

Changing your settings right now

If the banner is no longer showing, it means a choice has already been saved on this browser. Clear the site's cookies and reload this page to bring it back.

8. Browser controls

Your browser gives you a second, broader set of controls that work across every site you visit, not just ours. You can block third-party cookies, delete what has already been stored, or set the browser to clear everything each time you close it. Blocking cookies outright will stop you signing in to web servicing, since the session cookie is what keeps you signed in.

Settings › Privacy and security › Third-party cookies. From there you can block third-party cookies, and under "Delete browsing data" remove what has already been stored, either for all sites or for yusr.com.sa alone.

On macOS: Safari › Settings › Privacy, where "Prevent cross-site tracking" is on by default. Use "Manage Website Data" to remove stored data for a single site.

On iOS: Settings › Apps › Safari › Clear History and Website Data.

Settings › Privacy & Security › Enhanced Tracking Protection. The "Cookies and Site Data" section below it lets you clear stored data and set Firefox to delete cookies when it closes.

Settings › Cookies and site permissions › Manage and delete cookies and site data. "See all cookies and site data" lets you search for yusr.com.sa and remove only ours.

Some browsers can send a "Do Not Track" header with every request. There is no agreed standard for how a website should respond to it, and yusr.com.sa does not currently act on it. Use the cookie banner settings instead — those we do act on.

9. Changes to this policy

We update this policy when the cookies on the site change, when we start or stop working with a provider named here, or when the rules we operate under change. The version number and the date at the top of this page always reflect the current text. If a change materially affects the choices available to you, we will show the cookie banner again so you can make the decision afresh.

10. How to reach us

If something in this policy is unclear, or you want to know more about a specific cookie in the table above, write to us at hello@yusr.com.sa or use the form on our contact page. Post reaches us at Yusr Bank, King Fahd Road, Al Olaya, Riyadh, Kingdom of Saudi Arabia.

How we handle personal information more generally — what we collect, what we do with it and the rights you have — is set out in our privacy notice.