Website privacy & cookies

Updated October 26, 2026. FinanceFD is operated by Front Door Services LLC, owned by Neal Moore. This notice covers financefd.com and www.financefd.com. It also describes the separate downloads site configured at financefd.link; privacy choices are stored per browser and host. The Android app has a separate privacy notice.

Your choices

You can use free lessons, calculators and requested services without optional tracking. Open Privacy Preferences to accept, reject or customize optional categories. Optional categories start off. Global Privacy Control turns off analytics and marketing in this implementation. No precise location is requested and we do not use invasive fingerprinting.

Optional analytics providers are currently disabled pending configuration and verification. A consent choice alone does not enable a provider. No advertising or retargeting tag is installed. We do not use analytics identifiers to authenticate customers or unlock Premium.

The Android free website view uses the non-personal fd_app=android-free URL marker and financefd.app-free-view.v1 session storage to keep payment destinations out of that tab. This necessary display choice is not an analytics or account identifier and has no time-based expiry beyond the browser tab session.

Saved investor favorites

When you save an investor in the Premium research desk, FinanceFD stores the investor’s public SEC identifier with your account reference in its Cloudflare-hosted database. Your choices load on other devices when you sign into the same passkey-linked account. The Favorites view shows only investors in the active rotation; choices for other pools remain saved and reappear when those investors return. This is requested account storage, separate from optional analytics consent. Favorites are not used to personalize research or sent to a model. There is no automatic expiry: remove a favorite in the research desk or delete your account to erase the saved choices. Losing Premium access does not itself delete them.

Synced lesson bookmarks, notes and Android app connections

When you choose account sync, FinanceFD stores your lesson bookmarks and the notes you save, together with a random account reference, canonical lesson IDs and note revision numbers. Notes are limited to 2,000 characters. The same signed-in account can read and change these records on the website and in the Android app. This is a requested account service, separate from optional analytics or functional browser-storage consent and from billing. Notes are not public, not used as tutor prompts or analytics events, and are not end-to-end encrypted. Avoid account numbers, passwords or other sensitive financial details.

FinanceFD’s Cloudflare-hosted account database processes this saved learning data. Saved notes, bookmarks and account learning progress have no automatic expiry. Use Saved lessons & notes to remove bookmarks or erase and save a note. A revision counter can remain to prevent an older device from overwriting a newer edit or restoring deleted text. Offline devices can retain cached copies until they reconnect or their local data is cleared. A conflicting note preserves your draft and asks which version you want to keep. The Android app imports guest learning, bookmarks, notes and favorites only when you explicitly choose the import control; existing account notes are protected from automatic replacement.

The optional Android connection verifies your passkey on FinanceFD’s website, then asks you to approve a code displayed in an app you control. Codes expire after five minutes and are consumed once. The server stores hashes of connection secrets and a scoped app authorization token, along with the associated account, passkey reference and connection timestamps; app authorization lasts at most 30 days and is checked for expiry and revocation. The app encrypts its token with an Android Keystore key and does not place it in JavaScript local storage or pass it to TradingView. Account data and pending edits may be cached in the app’s private local storage so they can be shown or retried offline. Caches are separated by account; signing out removes the current account cache, and Delete my local app data removes all app account caches and unsynced drafts. Scheduled cleanup removes expired connection codes and expired or revoked grants; server deletion may follow the next scheduled cleanup rather than the instant of expiry.

Revoke an Android connection by signing out in the app while online or through the website’s authenticated session controls. If offline sign-out cannot confirm server revocation, the app tells you. Revoking an app connection does not remove your passkey, delete your saved server data or cancel billing. Delete your account and associated data through the signed-in account controls or the dedicated contact route. Ownership verification applies; any necessary retention or billing steps are reviewed for the request. Clearing cookies or uninstalling the app does not itself delete your server account.

Optional browser reminders and push notifications

In Settings, you may choose U.S. market open/close reminders, lesson reminders and on-site newsletter edition updates. The website keeps these choices in this browser. Market reminders use the published NYSE holiday and early-close calendar; lesson reminder time uses the device’s selected time zone. Browser permission is requested only after you choose Enable. If permission or Web Push is unavailable, reminders can appear only while FinanceFD is open.

If you enable closed-browser delivery, the browser creates a push subscription. FinanceFD stores that device’s push-service endpoint, browser public key and authentication secret, selected reminder topics and lesson schedule, and time-zone name in its Cloudflare database so it can send the requested reminder. The endpoint, keys and preferences are stored server-side; only the delivery payload is Web Push encrypted. The browser push service used by your browser receives encrypted notification payloads and ordinary connection information; providers vary by browser. Push payloads contain a short reminder and a FinanceFD page link, not your lesson history, account, email address, or financial data. This is a device feature, not a marketing email subscription, sign-in method, analytics identifier, or account sync. Active subscriptions remain until you remove them in Settings, the browser unsubscribes and FinanceFD processes the removal, or the push provider reports the endpoint expired. Delivery records stay queued until delivery or bounded retries finish; sent and failed records are deleted after 90 days. You can remove this device’s subscription in Settings or change browser permission in browser settings; removing it stops future push delivery from FinanceFD.

Necessary and optional storage

Separate FinanceFD downloads site

The FinanceFD downloads page configured at financefd.link is separate from financefd.com. Its page source does not load FinanceFD optional analytics or advertising tags, create browser storage, or send page-view events to the owner dashboard. When you choose to download the Android APK, its first-party script fetches four file segments, verifies the complete file against its SHA-256, and then offers the file; it does not run the installer. A generated-host response showed Cloudflare’s __cf_bm security cookie, but the custom financefd.link response could not be independently verified from this environment. Cloudflare documents this cookie for bot protection with a 30-minute continuous-inactivity expiry. The existing owner dashboard lists this as scoped cookie metadata only; it does not read cookie values or add downloads-page visitors to analytics. FinanceFD privacy preferences on financefd.com do not control Cloudflare’s hosting-security settings for this separate host.

Payments, passkeys and sessions

The FinanceFD passkey implementation stores random customer references, public passkey credentials, hashed session/recovery credentials, billing references and entitlement records. Passkey verification takes place on your device; FinanceFD does not receive biometrics. Premium checkout is restricted to Square. Square processes membership payment information under its own terms; FinanceFD receives billing references and verification results rather than full card details. Donations are optional and separate from Premium subscriptions. The donations page offers a Bluevine hosted payment page and direct Ethereum or Bitcoin mainnet wallet addresses; using them requires no FinanceFD account and does not create Premium access. Bluevine processes information entered on its page under its own privacy terms. Cryptocurrency transfers are sent from the visitor's wallet and may be visible on the relevant public blockchain. FinanceFD never asks for wallet private keys or recovery phrases, and this site does not submit wallet transactions or record whether a wallet donation was sent. Creating a passkey alone does not start billing. We do not replace authentication tokens with tracking identifiers.

Rejecting or clearing tracking cookies must not cancel subscriptions, revoke passkeys or remove paid entitlements. Deleting an authentication cookie can sign a browser out, but cannot cancel billing. Use a saved passkey or recovery code to regain access. Accountless does not mean no data is processed.

Information sources and recipients

We receive information you provide through privacy or support requests, passkey registration and browser-session names; browser choices and saved lesson or watchlist IDs; ordinary connection information; and provider billing verification where membership is used. We use this information to deliver requested tools, maintain account security, verify member access and handle requests. Hosting and cloud AI providers, model-file hosts, payment processors and market-widget providers receive the information needed for their respective services described below. Optional analytics providers remain disabled in the checked-in configuration. The FinanceFD Newsletter includes a free on-site reading list and an optional email subscription. Email subscriptions use a double opt-in process: enter an address, select the email consent box, and confirm through a link sent by Resend within 48 hours. No newsletter editions are sent before confirmation. Confirmed subscribers receive future published editions only; each message includes a visible unsubscribe link and supports one-click unsubscribe. Resend processes the address and message to deliver email under its own privacy and retention terms.

Optional newsletter email subscriptions

If you subscribe, FinanceFD stores your email address, a keyed email lookup value, subscription status and timestamps in its Cloudflare database to manage confirmation and delivery. A pending address is removed after the 48-hour confirmation period. A confirmed address is retained until you unsubscribe. Unsubscribing removes the address and pending deliveries; delivery status and completed edition records are kept for up to 90 days for reliability and then deleted. Newsletter email is optional and separate from membership billing, browser reminders and analytics. It does not require a FinanceFD account or financial details. You can also read the free on-site edition without subscribing. Subscription messages come from newsletter@notices.financefd.com, labeled Do Not Reply. Please use support@financefd.com for help rather than replying to the newsletter address.

Transactional billing notices

FinanceFD’s Square renewal-notice sender is configured to check qualifying subscription records on a six-hour schedule; readiness checks and a synthetic email do not establish that a particular customer notice was sent or delivered. For a notice that is due, it obtains the recipient address from the Square customer record and sends a transactional membership notice through Resend. The message may include the plan name, recurring amount and frequency, next expected charge date, and a link to Manage subscription. This processing is separate from the on-site Newsletter and is not controlled by optional analytics or cookie preferences. FinanceFD’s notice ledger stores a random notice reference, notice date and type, processing status and attempt timestamps; it does not store the recipient email address or message body. The ledger has no automatic expiry in the current implementation and may be retained with billing/consent records where required. Resend states that Free-plan email and log data is retained for 30 days and customer data is stored in the United States; provider retention and deletion follow its current terms. Resend security and retention details.

Separate notices for new membership, cancellation, completed refund, and expiration are not active by default. If separately enabled, FinanceFD stores Square refund identifiers and status, amount, currency and timestamps, plus a minimized notification record containing the FinanceFD account and subscription references, message type, non-recipient event details, retry status and timestamps. A verified Resend webhook can add provider message IDs, event types and timestamps for delivery, bounce, failure, delay or complaint history. FinanceFD does not store the recipient email address or message body in those ledgers. The email address is retrieved from Square for sending; the added lifecycle sender and webhook remain disabled unless separately configured and approved. Support mail remains in the existing iCloud inbox and is not imported into this dashboard.

Social profile links and third-party marks

FinanceFD links to its own profiles on X and Snapchat. The X and Snapchat names and logos are marks of their respective owners. FinanceFD claims no ownership of these marks and grants no rights to them. They are displayed only to identify our external profiles and do not imply affiliation, sponsorship, or endorsement. These links do not load X or Snapchat tracking widgets. If you follow a link, that service may receive ordinary connection information and process activity under its own privacy notice.

Optional Android app usage sharing

Some Android app versions may offer optional first-party screen-usage sharing. It is separate from this website's cookie preferences and is unavailable unless the FinanceFD service enables it. After an explicit in-app opt-in, the app may send a coarse section name (Learn, Markets, Money Lab, News, Saved or Settings) and app version to help improve navigation. FinanceFD stores daily aggregate screen-event counts and schedules their deletion after 90 days. The records do not contain app-account, passkey, device or install identifiers, favorites, tickers, searches, lesson IDs, notes or Ask Fin prompts. The Cloudflare-hosted endpoint receives the IP address and request time needed to deliver and protect the request; a short-lived IP hash is held only in volatile memory for rate checking and is not stored with usage records. Cloudflare may process ordinary network logs; FinanceFD has not verified provider-side log retention. Turning this option off stops future events, but already aggregated counts cannot be tied to or removed for a person. This app feature does not change passkeys, account sync, billing or website consent. See the Android app privacy notice. The service accepts events only when its separate feature flag is enabled.

Analytics and attribution, if enabled

Consent-gated usage events contain approved categories only, such as a lesson category, tool category, coarse traffic source and product tier. We do not send calculator amounts, income, debt balances, free-text entries, authentication credentials, recovery codes, passkey IDs, payment-provider IDs or transaction references to analytics. Query strings and URL fragments are excluded. Private Premium subpages are reported only as the public Premium category. No analytics identifier is added to Checkout URLs.

Optional page-source reporting reduces approved campaign labels to a coarse category. Membership checkout is not linked to visitor or campaign attribution. Optional first-party analytics consists of aggregate daily counters, retained for 90 days by the implemented cleanup. It is not a record of every visitor or an estimate of unique people.

Verified billing records and necessary operational payment counts are separate from optional behavior tracking. A successful browser redirect is not proof of payment. Provider billing/accounting records can require longer retention for legal, tax, chargeback or dispute reasons; deleting cookies does not delete these records. Applicable retention periods must be reviewed as laws and provider requirements change, and before enabling any new billing or data use.

Hosting, fonts, offline tools and the tutor

Hosting providers receive ordinary connection information, such as IP address and request time, to serve and protect the site. FinanceFD does not claim that this infrastructure collects no personal data. Website fonts use local system fallbacks and make no Google Fonts request.

The installable website may cache public educational files and a dated public news edition for requested offline use. On WebGPU-compatible browsers, the local tutor begins loading model files automatically on ordinary visits; the Help page automatically prepares its separate customer-support model. Each can download hundreds of MB, use GPU memory and leave model files cached. Only one model is kept active at a time: opening tutor mode on Help hands memory over from support. Unload or Skip local controls stop local loading. Model hosts receive ordinary network information. These automatic local-model downloads are independent of optional analytics choices. The cloud tutor requires its separate opt-in and sends your question and short conversation to the Cloudflare tutor service. On the website, a free browser visit allows up to 100 total Fin questions across on-device Local Fin and Cloudflare fallback; Cloudflare is separately capped at 50 of those questions. Premium members may ask Local Fin without a cap and use Cloudflare for up to 150 questions per browser-tab visit. Free Cloudflare use remains capped at 50 questions and counts toward the free 100-question total. Per-visit usage counters are kept in browser session storage. Avoid sharing sensitive financial or personal details in chat. These requested services are not enabled by analytics consent, and withdrawing tracking does not erase offline files or AI model caches.

Do Not Track and third-party tracking

The website does not use the older browser Do Not Track signal to change its consent settings. Global Privacy Control is a different signal: the implemented preference controls turn off analytics and marketing when GPC is present. Hosting, requested account services and market widgets remain distinct from these optional categories. Third-party widgets and model downloads can expose ordinary connection information to those providers; their own services may process activity across sites under their policies. FinanceFD cannot use its preference controls to erase those providers’ historical records.

Change preferences or make a privacy request

The permanent Privacy Preferences link is in each website footer. Withdrawal stops future optional collection in this integration, removes its provider execution frame, and deletes allowlisted optional first-party cookies/storage. It cannot retract a request already sent or directly delete a third party’s historical records. Requests to address eligible provider data require the provider’s tools and applicable procedures.

For applicable access, correction, deletion or other privacy requests, contact support@financefd.com. Include only what is necessary; never email session tokens, recovery codes, private keys or full card details. This privacy-request contact remains available even where general technical support is limited. Identify the request and the account or browser information needed to locate it, without sending secrets. We must verify ownership appropriately before disclosing or deleting protected records. Signing out or revoking a passkey is not an account-deletion request, and deleting browser storage does not cancel billing. We will review applicable rights, exemptions and retention duties; this notice does not claim blanket GDPR, PECR or CCPA/CPRA compliance.

Account, watchlist, support and provider billing records do not all have the same retention rules. Account watchlists remain until items are removed or an applicable verified deletion request is processed; no universal account-retention deadline is implemented. Necessary legal, security, tax and dispute records may be retained where required. The operator must review applicable duties and provider retention before promising a fixed deletion period. Privacy choices are stored per browser and host. www.financefd.com is the canonical public address. No automatic host migration transfers host-only authentication cookies; you may need to make a separate choice or sign in with a passkey on another host.

California privacy requests

If the California Consumer Privacy Act, as amended (CCPA/CPRA), applies to FinanceFD, California residents may have rights that include knowing/accessing, correcting, and deleting personal information; opting out of its sale or sharing; limiting certain uses of sensitive personal information; and freedom from discrimination for exercising privacy rights, subject to statutory definitions and exceptions. This notice does not determine whether FinanceFD meets the law's coverage thresholds or whether any particular provider disclosure is a sale or sharing under the law. To ask about or submit a California privacy request, email support@financefd.com with “California privacy request” in the subject and identify the account or browser data involved. Do not send passwords, session or recovery tokens, passkey secrets, or full payment details. We may request information needed to verify identity and locate records. Applicable law may permit retention or other exceptions. The Privacy Preferences control and Global Privacy Control address the optional categories described above; they do not cancel a subscription or replace an account-deletion request.

Android local AI and voluntary safety reports

The Android beta’s separate app privacy notice describes its optional model download and on-device processing. Local questions are not sent to cloud AI automatically. When an app user separately chooses to send an edited answer report, FinanceFD’s Cloudflare-hosted database stores only the submitted answer excerpt, category, engine and app version for safety review. Questions, account tokens and conversation history are not attached, although an answer can repeat information the user entered. Reports are available only through verified administrator access and deleted once older than 90 days on the next submission or administrator review. A timed purge has not been verified. A hashed IP rate-limit key expires after two minutes; no raw IP address is stored with the report. Hosting logs and backup retention are not verified. Website cookies and optional analytics choices do not control this separate, voluntary submission.

Subscription terms and consent records

If you choose a paid plan, FinanceFD records your account and session reference, the selected plan and charge frequency, the exact version and snapshot of the disclosed terms, separate affirmative terms and automatic-renewal choices, the acceptance time and checkout reference. These records verify the transaction agreement; they are separate from optional cookie or analytics consent and contain no full card details or biometric data. Signed-in customers can save an acceptance receipt from Manage subscription. An acceptance receipt alone is not proof of payment.

Subscription-consent evidence is retained independently of the short operational audit cleanup. Where California automatic-renewal law applies, verification must be retained for at least three years from consent or one year after contract termination, whichever is longer. No automated purge of this consent ledger is implemented; termination and any further legal retention must be reviewed before removal. Account deletion does not erase records needed to meet these duties.

Permanent account deletion

In Android builds offering native account deletion, use Settings → Passkey account & sync → Account management. The confirmation requires a fresh passkey verification through Android Credential Manager. A deletion-only challenge is bound to the current app connection and expires after five minutes; it is consumed once. The app sync token alone cannot delete an account or access website billing endpoints. On confirmed deletion, the app removes its connection secret and current-account cache. FinanceFD cannot erase the passkey entry held by your password manager or copies still offline on other devices.

Open the Passkey button, sign in, and use Account management → Delete account. You must verify with your existing passkey recently and confirm “Permanently delete account” in the “Are you sure?” dialog. Choose “Keep my account” or press Escape to leave without deleting anything.

If you subscribe, turn off automatic renewal first in Manage subscription or through the cancellation link in your Square receipt. Deletion cannot finish while renewal remains on, a checkout is unresolved or billing cannot be verified. Old account checkout links are disabled during deletion. Deletion does not itself cancel a subscription or request a refund.

Deletion permanently closes the account, disables all its passkeys, recovery codes and website/app sessions, removes its server favorites, lesson progress, bookmarks and notes, and ends all remaining paid access immediately. The deleted account cannot be restored. You may create a new account, but it will not inherit the deleted account’s saved data, subscription or remaining paid access. Voluntary deletion does not automatically issue a refund for unused access; any refund rights required by law still apply. Send billing and refund requests to support@financefd.com.

We retain a minimal closed-account reference and necessary billing, consent, audit, security and legal records under the applicable retention rules. Revoked session records follow existing expiry cleanup. FinanceFD cannot remove a saved passkey entry from Google Password Manager, iCloud Keychain or another password manager; remove it there separately. Offline app copies, unsynced drafts and guest/browser data on your devices must be cleared on those devices. Administrator accounts require an ownership transfer before self-service deletion; applicable privacy requests remain available through support.

Changes to this notice

We publish revisions at this address and update the publication date when a revision is released. Material changes will be highlighted here and through a website notice; any additional notice or consent required for a new use must be provided before that use begins. The October 25 revision adds optional device push reminders and discloses their subscription data, purpose, storage and removal controls. It also documents conditional Resend processing for transactional Square renewal notices, the notice-ledger fields and current provider-reported retention/location. It also removes checkout attribution from membership processing, confirms that current Premium membership includes access to the member Research desk and its published reports, and identifies Square as the membership checkout provider. Production configuration, permission checks and one synthetic email delivery have been verified; whether a first customer notice has run or been delivered is not confirmed. The separate lifecycle-mail queue and signed provider-event webhook remain disabled until owner/provider setup is completed. The October 24 revision adds versioned subscription terms and separate automatic-renewal consent records, permanent account deletion with subscription-renewal checks and a confirmation dialog, and website Fin question limits for free and Premium visits. It also clarifies our X and Snapchat profile links, third-party mark ownership, and the absence of implied affiliation or endorsement. The October 21 revision adds Android on-device Fin, model-download disclosures and separately consented answer safety reports. It also describes the separate downloads page and its scoped Cloudflare security-cookie observation. Earlier revisions describe optional Android account connections and synced lesson bookmarks and notes, passkey-account storage for completed money-basics and Chart School lesson IDs with clear-progress controls, TradingView Symbol Info quote widgets and no-referrer frames, and clarifies information sources and recipients, Do Not Track and Global Privacy Control, California privacy requests, retention and membership processing.

Optional market charts and free account watchlists

The Markets overview automatically loads the TradingView Market Glance ticker and Symbol Info quote widgets for displayed browse and favorite rows; opening an asset page loads its chart. The first visible rows load promptly and off-screen rows load as you scroll. These widgets are used on Markets pages. Each embedded frame is sandboxed and set to no-referrer. TradingView receives the displayed symbol and ordinary network information such as your IP address; its own providers and feed timing vary by market, and its privacy policy applies. FinanceFD does not read quote data from the frames. See TradingView privacy policy. Closing or reloading the page removes loaded widgets from the page.

When account watchlist sync is enabled, canonical asset IDs and import receipts are stored under your existing FinanceFD account. They remain free and are independent of Premium payments and analytics preferences. Unfavoriting removes the item; guest imports are deduplicated to prevent a retry from restoring removed items. Account watchlists are private API data, not public offline cache content. Use the existing account security controls to sign out. Guest view does not sign out the account.

Money-basics and Chart School completion IDs can be saved under your existing FinanceFD account while signed in. Use the same account to see completed lessons on another signed-in device. Browser-only progress is merged only after you choose to sync; you can clear synced progress from the lesson pages. The account record is separate from optional functional storage and analytics preferences, contains no quiz answers or calculator entries, and remains until you clear it or submit a verified deletion request. No automatic expiry is implemented.

The Passkey button shows whether this browser has an authenticated FinanceFD session. You may choose a browser-session name such as “My phone”; FinanceFD does not infer a hardware device name or receive biometric data. The same existing account supports free watchlists and subscriptions. Session status and optional browser names are not analytics identifiers and are not sent to TradingView.