Fynca Cookie Policy
Version 1.1 · Last updated: September 24, 2026
Brainhood Ltd. (company no. 517324679), 97 Rokach Blvd., Tel Aviv, Israel · support@fynca.io · Applies to fynca.io and app.fynca.io
1. What this Policy covers
This Policy explains how Fynca uses cookies and similar technologies - including localStorage, sessionStorage, SDKs and pixels ("cookies") - on fynca.io and app.fynca.io (together, the "Service", as defined in our Terms of Service), and the choices you have. It supplements the Privacy Policy.
2. Categories we use
- Strictly necessary. Required to run the Service: authentication and session cookies (including our sign-in provider), security and fraud prevention, load balancing, cookie-consent storage, and billing/checkout (Stripe). These cannot be switched off: storing or accessing them is exempt from the consent requirement because they are strictly necessary to provide the Service you request, and to the extent any personal data is processed, our legal basis is the performance of our contract with you and our legitimate interest in the security and proper operation of the Service.
- Functional. Remember your preferences and workspace state (e.g., interface settings, canvas view state stored in localStorage). Where the law treats these as non-essential, we ask for consent.
- Analytics. Product analytics (e.g., PostHog) to understand feature usage and improve the Service. Set only with your consent in the EU/EEA, UK and other opt-in regions; elsewhere (including Israel) they may be set on an opt-out basis. Client IP addresses are discarded and not stored with analytics events (coarse location may be derived from the IP before it is discarded). Our analytics may include session replay (a recording of page interactions) in opt-in regions, set only with consent. Where you are signed in, a session replay may be associated with your account; form inputs are masked and you should not enter passwords, payment details or other sensitive information in free-text fields during your session.
- Advertising/measurement. Not used today. If we ever introduce them, we will update this Policy and ask for prior consent where required.
3. Your choices
- Consent banner. On first visit (and in-app on first login) you can accept or decline non-essential cookies, and change your choice anytime via "Cookie settings" (footer link on the website; Settings → Privacy in the app). In opt-in regions (the EU/EEA, UK and similar jurisdictions), non-essential cookies are not set until you consent; in other regions (such as Israel and certain US states) they may be set on an opt-out basis, and you can opt out at any time, including via the Global Privacy Control signal. We record your choice and the version of the notice shown.
- Global Privacy Control. We honor GPC signals as an opt-out of analytics-based "sharing"/targeted advertising where applicable US state law requires.
- Browser controls. You can block or delete cookies in your browser; the Service may not function properly without strictly necessary cookies.
- Withdrawal. Withdrawing consent stops future setting/reading of the relevant cookies; already-collected data is handled per the Privacy Policy.
4. Cookie and storage inventory
The following reflects our current technical audit (June 2026); we update it as our cookie use changes. Cookie durations are those set by each provider.
Strictly necessary. Clerk authentication and session cookies (first-party; for example __session, __client_uat, __clerk_db_jwt); where Stripe Checkout or Stripe.js is loaded for payment, Stripe fraud-prevention cookies (for example __stripe_mid, __stripe_sid); your cookie-consent choice and its version, stored on the website in localStorage under “fynca-cookie-consent”; and, where the Service is served through a CDN, a security cookie (for example Cloudflare __cf_bm).
Functional. Interface and workspace state saved in your browser’s localStorage - for example TradingView chart state under keys prefixed “tvlocalstorage”. Where the law treats these as non-essential, we set them only with consent.
Analytics. PostHog, which stores a client identifier (for example a “ph_*_posthog” key in localStorage and PostHog cookies) and, where enabled, records session replays of page interactions. These are set only with your consent in opt-in regions: on the website through the consent banner and “Cookie settings” control, and in the app through the in-app consent banner.
Advertising/measurement. None are set today.
5. Changes and contact
We may update this Policy as our cookie use changes; the date above reflects the current version, and material changes are notified via the banner or in-app. Questions: support@fynca.io. Controller: Brainhood Ltd., 97 Rokach Blvd., Tel Aviv, Israel. If you are in the EU or UK, you may also contact our appointed representative (Prighter Group) or exercise your rights as described in our Privacy Policy.