Cookies and Online Tracking Disclosure

At State Street (“we”, “our”, “us”) we are committed to handling cookies and online tracking methods responsibly and transparently. This Cookies and Online Tracking Disclosure (“Cookies Disclosure”) contains the following sections:

• What are cookies?
• What categories of cookies do we use?
  • Strictly Necessary Cookies
  • Performance Cookies
  • Functionality Cookies
• Third party websites and cookies
• Web beacons and other technologies
• How do I refuse or withdraw consent to the use of cookies?
• What are the most frequently used or a representative sample of the cookies on our Website?
• Cookie lifespan

MANAGE COOKIES

Cookies are small text files downloaded to your computer or device by websites you visit. Cookies are widely used to allow websites to function properly, as well as to provide business and marketing information to the operators of the site.

We use the following three categories of cookies on our website https://my.statestreet.com/ (Website).

Strictly Necessary Cookies

These cookies are essential to enable you to navigate our Website and use its features, such as accessing secure areas. Without these cookies, we cannot provide the services you have requested.

Performance Cookies

These cookies are used to gather statistics on how visitors use our Website. This allows us to gain insight so that we may make improvements to its usability.

We categorize the following as performance cookies:

• Referrer URL (internal page): used to store the URL of the previous page visited. Allows us to track how visitors navigate through our Website.
• Referrer URL: used to store the URL which refers a visitor to our Website, so we may understand what URLs are referring visitors to our Website.
• URL history: used to store the page visited by a user before that user submits a form. Also, used to display recently viewed articles by each visitor.
• Unregistered visitor cookie: a unique identifier given to each visitor to allow analysis on how unregistered visitors use our Website.
• Session management cookies: these cookies allow us to follow the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close their browser window. Our session management cookies are created temporarily. Once you close your browser, our session management cookies are deleted.

Functionality Cookies

These cookies are used to enhance your experience when you visit our Website such as by capturing your preferences so that they are remembered for subsequent visits to improve your experience.

These cookies allow a site to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced, more personal features. For instance, a site may be able to provide you with local information by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, font, and other parts of web pages that you can customize. They may also be used to provide services you have requested such as watching a video or commenting on a blog. In most cases we will not be able to track individuals by name. However, cookies may associate registered users with their names.

These cookies cannot track your browsing activity on other websites. They do not gather any information about you that could be used for online advertising on other websites or remember where you have been on the internet outside our Website.

We categorize the following as functionality cookies:

• Registered visitor cookie - a unique identifier given to each registered user to our Website, or each user who voluntarily provides Personal Data on our Website to request information from us, used to serve them content and offers based on their profiles. Also used for analysis and marketing purposes (see also Strictly necessary cookies above).

This Website may contain links to third party sites. Please review the cookie and privacy policies of these third-party sites to understand how they may use cookies and your information. We, we are not responsible for the contents, operations or security of other websites.

Third-parties may also place cookies on their own. We do not have control over the placement of cookies by another website, even if you are directed to them from our Website. These companies use the data they process in accordance with their privacy policies, which may enable these companies to collect and combine information about your activities across website, apps, or online services. Please review the cookie and privacy policies of these sites to understand how they may use Cookies and your information.

We may also use web beacons and other technologies for analytics and intelligence about our Website to determine whether email messages have been opened or whether links on our Website have been accessed. Web beacons do not place information on your device but may work in conjunction with cookies to monitor online activity.

While we may automatically use some cookies that are strictly necessary to provide the services you request or enable communications, we request your consent for all other cookies used. If you want to remove existing non-essential cookies from your device, you may do so by selecting the options in the cookie banner. You may also refuse to accept cookies by changing your browser settings. For more information on managing cookies and other tracking methods see www.allaboutcookies.org/manage-cookies.

**** Please note that deleting and blocking cookies will have an impact on your user experience as parts of the Website may not function properly or be accessible.

The following tables detail the most frequently used or a representative sample of the cookies our Website uses and explains their use.

Strictly Necessary Cookies

Cookie	Cookie Type	Duration	Description
SMSESSION	Strictly Necessary	Session	Is set by Web Agent upon authentication. This cookie represents a user’s session and contains: User’s ID (User name and user DN), ClientIP address, ID of the directory or database from which the user was authenticated, SMSESSIONSPEC, Unique Session ID (a hash of the GUID of the logged in user), Creation time, Last Access Time
SMTRYNO	Strictly Necessary	Session	Contains number of failed login attempts
SMUSRMSG	Strictly Necessary	Session	The Web Agent has the ability to convert the text from an SM_AGENTAPI_ ATTR_USERMSG response to a SMUSRMSG cookie when performing a forms challenge
secIDTimeOut	Strictly Necessary	Session	Session timeout
hasloggedinbefore	Strictly Necessary	Session	Logged in before
HOMESESSIONID	Strictly Necessary	Session	Homepage session ID
MSSSMSESSION	Strictly Necessary	Session	Mss session ID
JSESSIONID	Strictly Necessary	Session	Java session ID
WPSLOGINATTEMPT	Strictly Necessary	Session	WPS login attempt times
MYSSLOGONTYPE	Strictly Necessary	1 year	Login type

Performance Cookies

Cookie	Cookie Type	Duration	Description
s_ecid	Performance	2 years	Contains a copy of the Experience Cloud ID (ECID) or MID. The MID is stored in a key-value pair that follows this syntax, s_ecid=MCMID|<ECID>
AMCV_###@AdobeOrg	Performance	2 years	Unique visitor IDs used by Experience Cloud Solutions.
s_cc	Performance	Session	This cookie is set and read by the JavaScript code to determine if cookies are enabled (simply set to “True”)
s_sq	Performance	Session	This cookie is set and read by the JavaScript code when the ClickMap functionality or the Activity Map functionality are enabled; it contains information about the previous link that was clicked on by the user
s_vi	Performance	2 years	Unique visitor ID time/date stamp
s_fid	Performance	2 years	Fallback unique visitor ID time/date stamp
gpv_Page	Performance	1 day	First-party cookie holds previous page value
s_tslv	Performance	2 years	First-party cookie holds Unix timestamp
s_inv	Performance	4.5 Hours	Used for time tracking related metrics within Adobe Analytics, such as having the ability to get Time Since Last Visit
AMCVS	Performance	Session	Identifies an Adobe Cloud Experience session and is required for all Adobe Experience functionality
QST	Performance	1 day	Prevents multiple survey submissions
QSI_SI_abGfb5kE5AiYY2F_intercept	Performance	1 day	Used to track whether we should display the intercept on repeated user visits
QSI_HistorySession	Performance	Session	Tracks the URLs of web pages visited by the user
L1kyuDtbzpDi2EcDueSeV8eMOFCy4tcQlVzKoWp%2Fp0Q%3D	Performance	1 day	Dropped when survey response started and Save and Continue is enabled
XSRF-TOKEN	Performance	Session	Secure cookie used to prevent cross site request forgery
userType	Performance	2 years	Tracks user type at login to Qualtrics software
brandID	Performance	2 years	Tracks subdomain instance at login to Qualtrics software
q_marketing_community_feedback	Performance	2 months	Tracks if a user has interacted with our feedback tab
q_marketing_utm_ref_tracking	Performance	24 Hours	This cookie allows us to track referrer and page behavior to allow for proper follow up of form submissions
users30day	Performance	30 days	This cookie tracks if a user has been active on our site in the last 30days. We use that information to determine if we need to run other scripts and cookies

Functional Cookies

Cookie	Cookie Type	Duration	Description
DIRECTPATH	Functional	1 year	The default redirect path
RESOLUTION	Functional	Session	User screen resolution
isRedirectHome	Functional	Session	If needs to redirect to home
ci_session	Functional	Session	Part of the CodeIgniter PHP framework, this stores any data needed to be saved across a user session to improve user experience
fs_uid	Functional	1 year	Records a website visitor session to improve website visitor experience.

Unless stated above, the lifespan of the cookies we use is limited and will not exceed 13 months.

Last Reviewed: November, 2022