Cookie Policy
Last updated:
1. What This Policy Covers
This Cookie Policy explains how Frank Finly ("we," "us") uses cookies and similar technologies on frankfinly.com, including our questionnaires and dashboard (the "Site"). Cookies are small text files a website stores in your browser. Similar technologies include local storage, which keeps information in your browser until it is cleared, and pixels and scripts that send information from your browser to us or to other companies. Our advisor portal works differently; see section 6. For everything else about your personal information, see our Privacy Policy.
2. Your Choices
We group what we use into three categories, the same ones you see in Cookie settings:
- Necessary — Keep the site working and remember your choices. Always on.
- Analytics — Show us which pages and tools people use, so we can make them better. On by default. We use Google Analytics and PostHog, never for ads unless you also allow Advertising.
- Advertising — Let Meta and Google measure our ads and show you relevant ads on other sites. Off until you allow it. California law calls this “sharing.”
Analytics is on by default; you can turn it off at any time in Cookie settings. Advertising stays off until you allow it. On your first visit, a banner tells you this and lets you Accept all, Reject all, or Customize your choice category by category. We keep your choice in this browser for up to 12 months, then ask again. Some browsers delete it sooner; if yours does, we ask again then. Your choice applies across frankfinly.com.
If your browser sends Global Privacy Control, or you have made a request on our Do Not Sell or Share page in this browser, Advertising stays off whatever you choose. Analytics works as for everyone else: on unless you turn it off, and the banner still lets you do that.
Google Analytics and the Meta Pixel are set up in Google Tag Manager, a Google tool for running tags on websites. Google Analytics runs unless you turn Analytics off. The Meta Pixel runs only after you allow Advertising; until then we block it on our pages, and we tell Google not to use what Google Analytics collects for ads. Cloudflare, which delivers our pages, also adds Google's tag code to them, even before you choose, and your browser may contact Google while loading it. If you have turned Analytics off, that code doesn't run Google Analytics; unless you have allowed Advertising, it doesn't run the Meta Pixel. On our questionnaire pages the Meta Pixel never runs, even if you choose Accept all.
3. What We Use
The table below shows what the Site stores in your browser or sends from it, by category. Where a name shows <project> or <ID>, the real name contains our ID with that company.
| What it is | Who runs it | What it does | How long it lasts |
|---|---|---|---|
| Necessary — always on | |||
What it is: ff_consent cookie | Who runs it: Frank Finly | What it does: Remembers your choices in Cookie settings on frankfinly.com and its subdomains. | How long it lasts: Up to 12 months |
What it is: ff_dns cookie and local storage | Who runs it: Frank Finly | What it does: Remembers a request you made on our Do Not Sell or Share page, so Advertising stays off in this browser. | How long it lasts: Cookie: 12 months, renewed when you come back. Local storage: until you clear it; some browsers delete it sooner. |
What it is: __ph_opt_in_out_<project> in local storage | Who runs it: PostHog, on our Site | What it does: Remembers whether you turned Analytics off, so PostHog stays off in this browser. Set if you turn Analytics off. | How long it lasts: Until you clear it |
What it is: ff_consent_echo, ff_consent_reload and ff_dns_outcome in session storage | Who runs it: Frank Finly | What it does: Short-lived notes that keep Cookie settings and Do Not Sell or Share working when a page reloads, including a per-tab note that the page has already reloaded once after a change of choice. | How long it lasts: Until you close the tab, or sooner |
What it is: Your answers: survey-progress-… and ff.rrc.v1 in local storage | Who runs it: Frank Finly | What it does: Keep your questionnaire progress and your dashboard — your answers and the key that opens it — in this browser, so you can pick up where you left off. | How long it lasts: Questionnaire progress: up to 7 days. Dashboard: until you choose “Forget this device” (My situation → Your data) or clear your browser's site data. |
What it is: Sign-in: client_token cookie and ff_client_logged_in in local storage | Who runs it: Frank Finly | What it does: Keep you signed in to features that need an account. | How long it lasts: Cookie: 21 days. Local storage: until you sign out. |
What it is: XSRF-TOKEN and frankfinly-session cookies on api.frankfinly.com | Who runs it: Frank Finly | What it does: Set when you open a page served by api.frankfinly.com; they protect forms there from forged requests. | How long it lasts: 2 hours after you were last active there |
| What it is: Cloudflare: page delivery and security | Who runs it: Cloudflare | What it does: Delivers our pages and protects the Site from attacks and abuse. Your browser may report failed page loads to Cloudflare (Network Error Logging). A small Cloudflare script shows you our email addresses while hiding them from spam bots. Cloudflare also adds Google's tag code to our pages (see section 2). | How long it lasts: Usually no cookies; Cloudflare may set a short-lived security cookie if it needs to check that a visit isn't automated. Your browser keeps the error-reporting setting for 7 days. |
| What it is: Error monitoring | Who runs it: Sentry, on our questionnaires and dashboard; GlitchTip, which we run ourselves, on the rest of the Site | What it does: On every page load, sends a session record: a random session ID, its status (for example, whether the page ran into an error), when it started and was last updated, the version of our site, and your browser. For a sample of visits, it also sends page-speed timings with the page address. When something breaks, it sends us details of the error, the page address, your browser and device, and possibly your IP address. | How long it lasts: No cookies |
| Analytics — on unless you turn it off | |||
What it is: PostHog: ph_<project>_posthog cookie and local storage | Who runs it: PostHog | What it does: Shows us which pages and tools people use and how, for example which buttons they click. If you give us your email address or send us your answers, it can link your visits to them. | How long it lasts: Cookie: up to 1 year. Local storage: until cleared. |
What it is: Google Analytics: _ga and _ga_<ID> cookies | Who runs it: Google | What it does: Measures visits and how people find and use our pages. It recognizes your browser by a randomly generated ID stored in these cookies. Unless you allow Advertising, we tell Google not to use this data for ads; if you do, Google may use it to measure our ads and show you relevant ads on other sites. | How long it lasts: Up to 2 years |
| Advertising — only if you allow it | |||
What it is: Meta Pixel: _fbp and _fbc cookies, and lastExternalReferrer, lastExternalReferrerTime and multiFbc in local storage | Who runs it: Meta | What it does: Lets Meta measure our ads and show you relevant ads on its apps and other sites. _fbc and multiFbc are set when you arrive from a Meta ad: they are Meta's record of the ad you came from. | How long it lasts: Cookies: 90 days. Local storage: until cleared; we delete it when you turn Advertising off. |
| No cookies — runs whatever you choose | |||
| What it is: Cloudflare Web Analytics | Who runs it: Cloudflare | What it does: Counts visits and measures how fast our pages load, on every page. | How long it lasts: No cookies |
4. Changing Your Mind
You can change your choices at any time with “Cookie settings” at the bottom of every page, or here:
Turning a category off stops those tools from then on. If our Site is open in another tab, the change applies there at the latest when you return to that tab. When you turn Analytics or Advertising off, with Reject all or in Cookie settings, we also delete the cookies and browser storage those tools set for our Site, except PostHog's record that you turned Analytics off (see the table above). Cookies they set elsewhere, for example on Meta's or Google's own sites, may remain.
- Global Privacy Control. If your browser sends it, we treat it as a request to opt out of the sale and sharing of your personal information: Advertising stays off, and Cookie settings tells you so.
- Do Not Sell or Share. A request on our Do Not Sell or Share My Personal Information page turns Advertising off in this browser as well.
- Your browser. You can block or delete cookies and site data in your browser's settings. If you block necessary cookies, parts of the Site may not work, and if you delete our
ff_consentcookie, we'll ask for your choice again.
5. Other Ways to Control Ads
These tools are run by Google, Meta and industry groups. They work separately from your choices on our Site.
- Google: Google Ad Settings, and the Google Analytics Opt-out browser add-on
- Meta: Facebook Ad Preferences
- Interest-based advertising in general: the Digital Advertising Alliance and the Network Advertising Initiative
6. Our Advisor Portal
Our advisor portal at app.frankfinly.com is for financial advisors, and it works differently. It doesn't show a cookie banner, and choices you make in Cookie settings on frankfinly.com don't carry over to it. Besides a sign-in cookie for advisors, it measures sign-ups with Google Analytics and the Meta Pixel, using the cookies described above, and with PostHog, which there keeps its own cookie, ph_advisor_app, for app.frankfinly.com only. It reports errors to Sentry. If your browser sends Global Privacy Control, or you have made a Do Not Sell or Share request in this browser, Google Analytics and the Meta Pixel don't run there.
7. Changes to This Policy
We may update this Cookie Policy from time to time. We will post the new version on this page and change the "Last updated" date at the top.
8. Contact
For questions about our use of cookies, see our Privacy Policy or contact us at [email protected].