Privacy policy

FinTk is a personal, non-commercial project by an individual developer. It is not a company and it does not sell anything. There is no advertising, no tracking and no analytics on this site.

To ask a question about this policy, open an issue on the project's GitHub page (opens in a new tab) and do not put personal information in it. To report a security problem privately, use GitHub private reporting (opens in a new tab). You can delete your own account at any time without asking anyone (see the Deleting your data section).

You can read all of the research pages without an account. If you sign in, FinTk stores:

• From Google or GitHub: your email address, your display name, the address of your profile picture, which provider you used and your ID at that provider. FinTk asks those providers only for that basic profile and your email. It never receives your password and cannot act on your Google or GitHub account.
• What you enter: the coins on your watchlist, and for each holding the coin, the amount and, if you choose to give it, the total you paid. FinTk does not connect to any exchange or wallet, so nothing else about your holdings is known.
• Your sign-in: a random token kept in a cookie. Only a one-way hash of the token is stored on the server, so a copy of the database cannot be used to sign in as you.

• Sign-in cookie. Kept while you are signed in. Scripts on the page cannot read it. It expires after 30 days without a visit, and after 90 days in all, which asks you to sign in again.
• Sign-in step cookie. A short-lived cookie (about ten minutes) used while you are being sent to Google or GitHub and back, to make sure the reply belongs to your request.
• Display choices. Your theme, accent color, typeface and motion setting are saved in your browser's own storage on your device. They are never sent to FinTk's servers.

These are all needed for the site to work as you asked, so there is no cookie banner. No advertising or tracking cookies are used.

Servers keep short technical logs so problems can be fixed: the time, the page requested, the result and a random request number. FinTk's logs leave out the part of a web address after the question mark, your sign-in token and anything you type into a form. The companies that host the site may keep their own technical logs under their own policies.

Your information is not sold or shared for marketing. It is handled only by the services needed to run the site: Google or GitHub when you choose to sign in with them, and the companies that host the site and its database.

Market figures come from CoinMarketCap and news from official government feeds. FinTk requests those from its own servers, so those providers are never told who you are or what you look at.

Open your account page and choose Delete my account. This removes your account, your sign-ins, every active session, your watchlist and your holdings, immediately and permanently. Signing out removes only the current session.

If the host keeps backups of the database, a deleted account can remain in an older backup until that backup expires under the host's schedule. It is never restored into the live site.

FinTk is not meant for children under 13 and does not knowingly collect their information.

If what is stored or how it is used changes, this page is updated and the date at the top changes with it. Earlier versions are in the project's public history on GitHub.