Cookie & Data Policy

1. Our Analytics System

FinUties uses Metrility, a self-hosted analytics platform we operate (network endpoint: metrility.techuties.com). Metrility is not a third-party advertising SaaS product — it runs on infrastructure we control for FinUties.

The public site does not load any Metrility script until you make a choice. After you choose, the browser injects the matching pixel with defer:

• Necessary only — lightweight pixel (basic first-party page-use statistics).
• Analytics — the same lightweight pixel (basic page-use metrics).
• Advanced analytics — lightweight pixel plus a second, richer pixel. Advanced never loads if you only chose necessary or analytics.

If your browser sends Global Privacy Control (Sec-GPC / navigator.globalPrivacyControl) or Do Not Track, we treat that as an opt-out of both analytics pixels.

2. Necessary storage and the lightweight pixel

Until you make a choice, we do not request metrility.techuties.com for pixels. The consent record itself (see Section 5) is strictly necessary storage.

After Necessary only or Accept analytics, we inject the lightweight Metrility pixel so first-party statistics can be taken. That pixel is not advanced analytics (no session replay / heatmap script).

Legal basis for the consent record: strictly necessary to remember your choice (ePrivacy). Legal basis for the lightweight pixel: your choice on this banner (Art. 6(1)(a) GDPR, Art. 5(3) ePrivacy Directive).

3. Analytics pixels (choice required)

If you choose Necessary only or Accept analytics (or enable analytics in Preferences), we inject the lightweight Metrility pixel. If you choose Advanced analytics (or enable that toggle), we also inject the advanced pixel. Both are first-party-operated scripts on metrility.techuties.com.

Legal basis: Consent (Art. 6(1)(a) GDPR, Art. 5(3) ePrivacy Directive). You can withdraw consent at any time (see Section 7).

4. Cookies that Metrility may set after consent

After you choose Necessary only, analytics, or advanced analytics, Metrility may set cookies such as:

Cookie Name	Purpose	Duration	Type
_metrility_id	Unique visitor identifier for session tracking	1 year	Analytics
_metrility_session	Session identifier for grouping page views	30 minutes	Analytics

Note: Actual cookie names and durations are determined by the Metrility platform and may differ slightly. This table represents our best documentation at the time of writing.

5. localStorage Usage

In addition to cookies, we use your browser's localStorage for the following purposes:

Key	Purpose	Duration
fin_cookie_consent	Stores your choice as JSON (necessary, analytics, or advanced) in localStorage and a first-party cookie of the same name. Legacy values accepted / declined are read as analytics / necessary.	12 months from the last save
finuties_dash_config	Dashboard API base URL and bearer token cache (landing dashboard only)	Until manually cleared or sign-out
finuties-api-config	Terminal API base URL and bearer tokens (terminal.finuties.com)	Until manually cleared or sign-out
fin_token, fin_refresh_token	Legacy token keys cleared on sign-out (HttpOnly cookies are primary for www)	Until sign-out or manual clear

localStorage data is stored entirely in your browser and is never transmitted to our servers (except the API token, which is sent as an Authorization header when you make API calls from the dashboard).

localStorage is classified as strictly necessary technical storage under the ePrivacy Directive and does not require consent.

6. No Third-Party Tracking

FinUties does not use:

• Google Analytics or any Google tracking services
• Facebook Pixel or Meta tracking
• Advertising networks or retargeting pixels
• Social media tracking widgets
• Any third-party analytics or tracking services

All analytics are self-hosted on infrastructure we operate. No data is shared with, sold to, or accessible by third parties.

7. Your Control

Change your cookie consent

You can change your preference at any time. Withdrawal is as easy as giving consent (GDPR Art. 7(3)):

• Method 1 (recommended): Use Cookie Settings (also in the footer). That re-opens the banner so you can choose Necessary only, analytics, advanced, or save Preferences.
• Method 2: Delete the fin_cookie_consent first-party cookie and the localStorage key of the same name. The banner will return on the next visit.
• Method 3: Clear site data for finuties.com.

If you switch from Advanced to Necessary only, we stop injecting the advanced script and drop our in-page tracker objects (best-effort). The lightweight pixel stays unless you send GPC/DNT or clear this site’s data. Scripts that already ran cannot be fully undone. Cookies that metrility.techuties.com may already have set are third-party from the browser’s point of view; we cannot reliably delete them. You can clear those in your browser or block metrility.techuties.com.

Clear API configuration

To remove your stored API configuration (base URL and bearer token), open your browser's developer tools (Application → Local Storage → finuties.com or terminal.finuties.com) and delete finuties_dash_config (www dashboard) or finuties-api-config (terminal). Alternatively, signing out via the dashboard or terminal clears session data automatically.

Block analytics entirely

Sending Global Privacy Control or Do Not Track is enough for this site not to load either pixel. You can also:

• Use a browser extension that blocks trackers
• Block requests to metrility.techuties.com in your browser or network settings
• Use the browser’s tracking-protection features

8. Cloudflare

Our website is served through Cloudflare's CDN for performance and security. Cloudflare may set the following cookies:

Cookie Name	Purpose	Duration	Type
__cf_bm	Bot management and DDoS protection	30 minutes	Strictly necessary

Cloudflare's cookies are classified as strictly necessary for the operation of the website (security) and do not require consent under the ePrivacy Directive.

9. Contact

For questions about our cookie and data practices:

Email: [email protected]
See also: Privacy Policy | Impressum