Cookie and local-storage policy

Cookies are small data items sent by the browser to a server. Local and session storage remains in the browser. The rules apply to both where they store or read device information.

These items only appear when the corresponding feature needs them. A simple explanation is shown first; internal names remain available in the technical details.

We use technical storage to provide the service and, only if you accept, local storage for our own audience and usage measurement. We use no external analytics providers or advertising cookies on the website. Android measurement is separate from Google advertising consent.

Google may set its own cookies when you choose Google sign-in and visit accounts.google.com. Those cookies are governed by Google information. Security infrastructure may set strictly necessary identifiers where risk or abuse is detected.

Accepting and rejecting are equally easy and do not limit Finantzak. On the website use Cookie and measurement preferences at the foot of pages; on Android use Settings > Measurement preferences. Withdrawal stops new transmissions and removes the local identifier; previously received data expires within the stated period. Clearing storage also resets the choice. We respect DNT and GPC on the website.

The legal basis is your optional consent. Before acceptance we do not create a measurement identifier or send events. The choice and a random identifier, only on acceptance, last at most 180 days: finantzak.usage-consent.v1 in browser local storage and product_usage in Android preferences. Rejection retains no identifier. Previous guide consent does not authorize this expanded purpose.

We count page views, opens of the private web area or Android app, and completed manual saves of accounts, movements and budgets. Only consent version, acceptance, random identifier, platform and event type are sent. No amounts, descriptions, financial content, emails, account identifiers, paths, URL parameters or credentials are sent. Opens are separated by 30 minutes. No offline backlog is stored.

The server transforms the identifier using a secret key and stores pseudonymized daily activity, counters and the first observed date for at most 90 days on our own infrastructure with restricted administrative access. Reports calculate active devices and return after 1, 7 and 30 days. Accounts, devices and the two domains are not linked; a device is not a person. Data is not anonymous while it distinguishes an installation. Reports cover consent and received deliveries, not all users.

Guide counters continue to measure views and clicks to Finantzak and Google Play by UTC day, guide, language, domain and source category, without identifiers in those counters. Clicks do not establish installations. The server technically receives an IP address, but it is not included in statistics: a separate IP-derived key limits abuse for one hour, alongside the security logs described in this policy. Measurement is not sent to analytics providers. You can exercise your rights through the contact in this policy.

Accepting and rejecting are equally easy and do not limit Finantzak. On the website use Cookie and measurement preferences at the foot of pages; on Android use Settings > Measurement preferences. Withdrawal stops new transmissions and removes the local identifier; previously received data expires within the stated period. Clearing storage also resets the choice. We respect DNT and GPC on the website.