Cookies and browser storage
Finchoq sets cookies only for analytics, and only if you allow it. What is kept in your browser, why, and how to change it.
Last updated 17 September 2026
Analytics, only if you say yes
We use Google Analytics to see which pages are visited, how people arrive, and where a sign-up or a booking gets abandoned. It runs only after you allow it — until then the Google script is not even downloaded, and nothing is set.
It never receives your name, your email address, your account or anything you type into a profile or a booking. Addresses that carry a sign-in or reset token are stripped before they are sent, and account administration pages are not measured at all. Google signals and advertising features are switched off.
If your browser sends Global Privacy Control or Do Not Track, we treat that as your answer: analytics stays off and you are not asked.
Analytics is not enabled on this version of the site, so there is nothing to switch.
_ga13 monthsA random identifier, so repeat visits from this browser count as one visitor.
_ga_<ID>13 monthsWhich visit this is and when it started, so pages seen together count as one session.
What we store
Signing in keeps a session in your browser's local storage, along with your analytics choice. Unlike a cookie, local storage is never attached to a request automatically and is never sent to another site.
auth-storageSign-in sessionEssentialNot storedKeeps you signed in between visits. Holds your access token, your account name and email, and your role. Cleared when you sign out.
analytics-consentAnalytics choiceEssentialNot storedRemembers whether you allowed analytics, so you are asked once rather than on every visit. Holds only "granted" or "denied".
userLegacy session (older accounts)Not storedThe key an earlier version of the app used. Nothing writes to it any more; it is read once and removed when it is found to be stale.
Clearing it
Signing out removes the session. You can also clear everything here, which signs you out on this device and forgets your analytics choice, so you will be asked again. It does not delete your account or anything stored on our servers — for that, see the privacy notice.
Third parties
Beyond analytics, two services can set cookies of their own, and only when you choose to involve them. Signing in with Google, or connecting Google Calendar as a mentor, happens on Google's own pages under Google's terms. Avatars and images are served from Cloudinary, which is a plain image request and sets nothing on our behalf.
Do Not Track and Global Privacy Control
Both are honoured as a refusal of analytics. We do not track visitors across sites, build advertising profiles, or share browsing behaviour with anyone for advertising.