Cookie Policy | Finteli

1. What are cookies and similar technologies?

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, session storage, and pixels used to identify or track a device.

Cookies may be first-party (set by the site you visit) or third-party (set by another service).

2. Our approach on this website

We do not use cookies or similar technologies on this website for:

Advertising or retargeting
Social media tracking pixels
Product analytics (Google Analytics, PostHog, Hotjar, Mixpanel, or similar)
A/B testing or marketing personalisation

Those tools are not present in our current website code. We do not show a cookie consent banner on this site because we do not set non-essential cookies requiring consent under UK / ePrivacy rules. If that changes, we will update this policy and site controls first.

3. What this website uses

First-party storage

Our React site does not use localStorage or sessionStorage to remember you or track browsing.

Strictly necessary hosting

Vercel may set short-lived, technically necessary cookies or similar mechanisms for security, delivery, or bot protection. These support site operation and are not used for marketing.

Contact and demo forms

When you submit a contact or demo form, your browser sends data to our website API. We verify the submission with Cloudflare Turnstile, then forward it to our form handling provider. Turnstile may set cookies or use similar storage on challenges.cloudflare.com while the challenge runs.

Google Fonts

Font files are requested from Google's CDN. This is a network request that may include your IP address; it is not a marketing cookie on our domain. See the Privacy Policy.

4. Summary table - this website

Technology	Provider	Purpose	Typical duration
Hosting / security (if set)	Vercel	Deliver and protect the website	Session or short-term
Font requests	Google Fonts	Display typography	Browser cache dependent
Form submission API	Finteli / Vercel	Receive and verify contact and demo submissions	Session only
Bot protection challenge	Cloudflare Turnstile	Verify form submissions are from humans	Per Cloudflare policy
Form delivery (server-side)	Form handling provider	Deliver verified submissions to us	Per provider policy

5. How to control cookies

You can block or delete cookies in your browser settings.

Blocking strictly necessary cookies may affect how the site loads or forms submit. Blocking Google font requests may change typography but content remains readable with system fonts.

Questions: Privacy Policy or privacy@finteli.co.

6. The Finteli application (app.finteli.co)

When you use https://app.finteli.co, you leave this marketing site. Cookies and sessions there are separate from this website.

What the application uses

Clerk session cookies on the app domain to keep you signed in. Exact cookie names and lifetimes are controlled by Clerk (see Clerk's documentation and your Clerk dashboard). Our product front-end does not set its own auth cookies.
API authentication via short-lived bearer tokens from Clerk (getToken()) sent to our API - not stored as a separate marketing cookie by us.
No localStorage / sessionStorage keys for tracking were found in the current product front-end code.
No PostHog, Google Analytics, or similar analytics packages in the current product front-end build.
Our API does not issue its own session cookies; it validates JWTs on each request.

Summary table - application

Technology	Domain	Purpose
Clerk authentication cookies	`app.finteli.co` (and staging equivalent)	Maintain signed-in session for the SPA
Hosting delivery (if set)	Vercel (app host)	Serve the application

Optional calendar integrations (Google or Microsoft) involve OAuth flows that may set cookies on those providers' domains when you connect a calendar - not on this marketing website.

Full details of product processing are in section 7 of our Privacy Policy and in your software licence agreement.

7. Changes to this policy

We will update this page if we add analytics, chat widgets, embedded media, or other non-essential cookies to the website or application. The "Last updated" date will change when we do.