Cookies Policy.

The short version

• We use a few cookies to keep you logged in and remember your preferences.
• We use Google Analytics to understand how visitors use the site, in aggregate.
• We do not use advertising or tracking cookies for cross-site profiling.
• You can disable non-essential cookies in your browser at any time.

1. What is a cookie

A cookie is a small text file stored on your device by your browser when you visit a website. Cookies let a site remember information between visits (like your login session) or measure how the site is used.

We also use similar technologies such as local storage and session storage. For simplicity, this policy refers to all of these as "cookies".

2. How we categorize cookies

We group the cookies we use into three categories:

• Strictly necessary. Required for the site to function — login sessions, security, and load balancing. The site does not work properly without these.
• Functional. Remember preferences and choices you make (theme, layout, dismissed banners).
• Analytics. Help us understand traffic patterns and improve the site. Aggregated and pseudonymous.

3. Cookies we use

Strictly necessary

• sb-access-token, sb-refresh-token (Supabase) — keeps you signed in. Session-length, expires when you log out or after refresh.
• __cf_bm (Cloudflare / Vercel) — bot mitigation. 30 minutes.
• __vercel_live_token (Vercel) — preview deployment authentication on staging URLs only. Session.

Functional

• fp-prefs (FundedPlan) — remembers UI preferences such as which sections you have expanded. 12 months.

Analytics

• _ga (Google Analytics) — distinguishes unique visitors. 24 months.
• _ga_* (Google Analytics) — session-state for GA4 properties. 24 months.

Google Analytics is configured with IP anonymization. We do not enable Google's advertising features, and we do not share GA data with advertising networks.

4. Third-party services that may set cookies

When you interact with the following embedded services, they may set their own cookies under their own privacy policies:

• Calendly — when you open a booking widget. Calendly Privacy Policy.
• Tawk.to — when you open the live chat widget. Tawk.to Privacy Policy.
• Trustpilot — when reviews are displayed via embedded widgets. Trustpilot Privacy Terms.
• Stripe — when you reach the checkout page, for fraud prevention. Stripe Privacy Policy.

5. How to control cookies

Most browsers let you block or delete cookies through their settings. You can:

• Block all cookies (the site will not work properly).
• Block third-party cookies only (recommended if you want stricter privacy).
• Delete existing cookies at any time.
• Use private/incognito browsing, which discards cookies when you close the window.

Browser-specific guides: Chrome, Firefox, Safari, Edge.

To opt out of Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on.

6. Do Not Track

Some browsers offer a "Do Not Track" signal. There is no industry consensus on how sites should respond to this signal, so we do not currently respond to it. You can still control cookies through the methods above.

7. Changes to this policy

We may update this policy occasionally. The current version is always posted on this page with the "Last updated" date.

8. Contact

Questions about cookies or our data practices? Email support@fundedplan.com.