Skip to main content

Cookie & Data Policy

How we use cookies, analytics, and browser storage on finuties.com

Last updated: October 24, 2026 — Version 1.3

1. No cookie banner, because we set no tracking cookies

finuties.com and terminal.finuties.com set no cookies for statistics or advertising. That is why there is no cookie banner. The only cookies are the ones needed to sign in (Section 4) and Cloudflare’s security cookie (Section 8).

2. Website statistics without cookies

We count visits with Umami, an open-source statistics tool we run ourselves on our own servers in Switzerland. The script is loaded from our own domain (/u/s.js) and sends page views to our own domain (/u/e). It sets no cookies and stores nothing in your browser. It does not record sessions, mouse movements or keystrokes.

Your IP address is used only in memory, to determine your country and to recognise page views of the same visit through a one-way hash with a secret value that changes every day; it is never stored. Details, retention and legal basis: see our Privacy Policy, Section 2.4.

3. Your choice

Click (also in the footer) and this browser is no longer counted. Browsers that send Global Privacy Control (Sec-GPC / navigator.globalPrivacyControl) or Do Not Track are never counted.

4. Sign-in cookies

When you sign in, we set first-party, HttpOnly session cookies so you stay signed in. They are strictly necessary for the service you request and do not require consent under the ePrivacy Directive. They are removed when you sign out or when they expire.

5. localStorage Usage

In addition to cookies, we use your browser's localStorage for the following purposes:

Key Purpose Duration
fin_analytics_optout Only set if you click “Do not count my visits”: remembers that this browser is not counted in our statistics. Never sent to our servers. Until you clear site data or click “Count my visits again”
finuties_dash_config Dashboard API base URL and bearer token cache (landing dashboard only) Until manually cleared or sign-out
finuties-api-config Terminal API base URL and bearer tokens (terminal.finuties.com) Until manually cleared or sign-out
fin_token, fin_refresh_token Legacy token keys cleared on sign-out (HttpOnly cookies are primary for www) Until sign-out or manual clear

localStorage data is stored entirely in your browser and is never transmitted to our servers (except the API token, which is sent as an Authorization header when you make API calls from the dashboard).

localStorage is classified as strictly necessary technical storage under the ePrivacy Directive and does not require consent.

6. No Third-Party Tracking

FinUties does not use:

All analytics are self-hosted on infrastructure we operate. No data is shared with, sold to, or accessible by third parties.

7. Your Control

Statistics

Clear API configuration

To remove your stored API configuration (base URL and bearer token), open your browser's developer tools (Application → Local Storage → finuties.com or terminal.finuties.com) and delete finuties_dash_config (www dashboard) or finuties-api-config (terminal). Alternatively, signing out via the dashboard or terminal clears session data automatically.

Block statistics entirely

Besides the button and Global Privacy Control / Do Not Track, you can block the script /u/s.js with a content blocker. The site works the same without it.

8. Cloudflare

Our website is served through Cloudflare's CDN for performance and security. Cloudflare may set the following cookies:

Cookie Name Purpose Duration Type
__cf_bm Bot management and DDoS protection 30 minutes Strictly necessary

Cloudflare's cookies are classified as strictly necessary for the operation of the website (security) and do not require consent under the ePrivacy Directive.

9. Contact

For questions about our cookie and data practices:

Email: [email protected]
See also: Privacy Policy | Impressum