Legal
Cookie Policy
A plain-language inventory of the cookies and browser storage currently used by FXInsight.
Last updated: 24 October 2026
1. Current position
FXInsight currently uses only cookies and browser storage needed for sign-in, security, preferences, and features you request. It does not set advertising or analytics cookies. Because the listed cookies are strictly necessary, they cannot be switched off from inside FXInsight and no consent banner is shown.
FXInsight measures how the site is used with PostHog in cookieless mode: no cookie, local storage, or other identifier is stored on or read from your device for this. See section 4.
If optional analytics, advertising, or other non-essential trackers are introduced, FXInsight will update this policy and request consent before activating them where required.
2. Cookies used
| Name | Purpose | Duration |
|---|---|---|
pkce_verifier | Completes Google sign-in securely and prevents interception of the authorisation code. | 10 minutes |
csrf_token | Checks that the Google sign-in callback belongs to the login request you started. | 10 minutes |
fxi_guest | Identifies the browser’s single guest study allowance. | 1 year |
login_return | Returns you to the page where you started sign-in. | 10 minutes |
auth_token | Keeps an authenticated session active and authorises protected requests. | 1 hour |
refresh_token | Renews an authenticated session without requiring you to sign in again. | 30 days, or until sign-out |
These are first-party, HTTP-only access and authentication cookies. Production authentication cookies are sent over secure connections and use SameSite restrictions. They are not available to client-side JavaScript.
3. Local browser storage
Local storage is not a cookie, but European cookie rules also cover similar technologies that store or read information on your device. FXInsight uses the following first-party keys:
| Key | Purpose | Duration |
|---|---|---|
theme | Remembers your interface theme. | Until cleared |
fxinsight.calendar-alerts.v1 | Stores the calendar-alert rules you configure. | Until cleared or changed |
fxinsight.calendar-event-subscriptions.v1 | Stores event reminders you explicitly create. | Until cleared; expired entries are ignored |
fxinsight.calendar-alerts.seen.v1 | Prevents the same in-app alert from being shown repeatedly. | Entries older than 7 days are pruned as new alerts are stored |
Study session storage
The current study draft and accepted guest request are stored in this tab’s session storage so you can return from sign-in or reopen the same study. Draft restoration expires after 24 hours. Session storage is cleared when the browser ends the tab’s session.
4. Cookieless usage analytics
To understand which pages and features are used and how visitors find FXInsight, the site sends usage events (pages viewed, studies run, examples loaded, sign-in clicks) to PostHog, hosted in the European Union. Events include the page address, referring site, campaign tags such as ref or utm_source, browser and device type, and an approximate country. PostHog counts unique visitors with a one-way hash that changes every day, so a visitor cannot be recognised across days and is not linked to an FXInsight account. Session recording is off.
5. Managing site data
You can remove cookies and local storage using your browser's privacy or site-data settings. Blocking authentication cookies will prevent Google sign-in and protected features from working. Clearing local storage resets the saved theme and alert settings.
Links to Google, Discord, X, and YouTube take you to third-party services. Those services may use their own cookies after you visit them; their policies and controls apply there.
6. Questions
For questions about these technologies or your data, use the Contact page. More detail about personal data is available in the Privacy Policy.