Privacy policy
Privacy policy
FundedKeys measures visits with Google Analytics only if you accept, and runs no advertising. This page says exactly what is stored, where, and what your rights are.
Last updated Oct 5, 2026
In short
- FundedKeys measures visits with Google Analytics 4, and only after you click Accept. Reject, or leave the banner unanswered, and no analytics cookie is set.
- No advertising: advertising storage and advertising signals are always denied, and no advertising cookie is set.
- Apart from Google's tag, nothing is loaded from a third party: fonts are served from this site and logos are local files.
- Your preferences, and the working numbers of the risk planner, stay in your browser. The web server keeps no access log, and the application logs only errors, never IP addresses.
- You can change your choice at any time with Cookie settings in the footer.
Who is responsible
The controller of the personal data described on this page is the publisher of FundedKeys, identified in the legal notice.
To ask a question or use a right, write to contact@fundedkeys.com.
What the server sees and keeps
To send you a page, your browser sends a request to the server: the address of the page, your IP address and technical details such as your browser and language. The server uses them only to answer that request.
- The web server (a Caddy reverse proxy) keeps no access log.
- The application writes only errors to its log: the error and, for a failed page refresh, the page concerned. It writes no IP address and no visitor identifier.
- The login of the site owner's admin area limits failed attempts: the IP address of a failed attempt is held in the server's memory for 15 minutes and then dropped. It concerns only people who try to log in there.
Google Analytics
FundedKeys uses Google Analytics 4, a measurement service of Google, to see which pages and tools are used and by how many people, so that the site can be improved. It is not used for advertising.
Before you choose, or if you reject. Google's tag is loaded on every page but starts in "consent denied" mode: it sets no cookie and reads none. In that mode it may still send cookie-free signals to Google: the page address, the referrer, a timestamp, your browser's user agent, whether you consented, and the IP address that comes with any web request. Google states that Google Analytics 4 does not log or store IP addresses, and that it uses such signals for statistical modelling.
After you accept. Analytics storage is switched on: the tag sets the two cookies listed below and measures page views (the address of each page, which can include the numbers of a plan or a filter), how visitors arrive (the referrer), the use of the tools, approximate location, which Google derives from the IP address without storing it, and device and browser details. These are linked to a random identifier in the _ga cookie, not to your name or email address.
No advertising. The tag always sends advertising storage, advertising user data and ad personalisation as denied, and is set to anonymise IP addresses. Only analytics storage can change, and only when you accept.
Who processes the data. Google acts as our processor (Google Ireland Limited and Google LLC). Data can be transferred to the United States; Google relies on the EU-US Data Privacy Framework and on its standard contractual clauses for those transfers.
How long. Analytics data is kept for the retention period set in our Google Analytics property. The cookies last up to 2 years (see Cookies below).
Legal basis. Your consent (Article 6(1)(a) GDPR, and the same rule of the UK GDPR). Clicking Accept is the consent; nothing that needs it is set before.
Your choice. Choose Accept or Reject on the banner. You can change your choice at any time with Cookie settings in the footer: Reject there stops the tag from using analytics storage and removes the analytics cookies from your browser. Withdrawing consent does not affect what was measured before. The banner asks again after six months.
Cookies
Cookies are set only as listed below. The two Google Analytics cookies are set only after you click Accept. The admin cookie is set only when the site owner logs in, never for visitors, and is strictly necessary for that area.
| Cookie | Purpose | Duration | Set when |
|---|---|---|---|
| __Host-unch_admin | Keeps the site owner logged in to the admin area. Strictly necessary; httpOnly, Secure, SameSite=Strict. | 8 hours | Only when the owner logs in to the admin area. |
| _ga | Google Analytics: tells visitors apart with a random identifier, so that they can be counted. | Up to 2 years | Only after you click Accept. |
| _ga_W7802HP5VB | Google Analytics: keeps the state of your session. | Up to 2 years | Only after you click Accept. |
What stays in your browser
Some features remember what you chose, in your browser's local storage on your own device. These values are never sent to the server, and nobody at FundedKeys can read them. They are written only when you use the feature, with one exception: opening the page of a market (such as futures) saves that market as yours. You can delete them at any time in your browser's site-data settings.
| Key | What it keeps |
|---|---|
| unch.ticket.theme | Your theme: Auto, Light or Dark. |
| unch.market | The market you chose in the header (All, Futures, Forex, Crypto); also saved when you open a market's own page. |
| unch.ticket.shortcuts | Whether keyboard shortcuts are on. |
| unch.desk.compare | The accounts you put in the compare tray of the lists. |
| unch.review.<firm> | On a firm's review: the program, option and size you picked, and the sort order of its table (the keys end in .pick and .sort3). |
| unch.rp.mode | Risk planner: the Simple or Advanced view. |
| unch.rp.room.<account> | Risk planner, "Room left today": the figures you type (closed and floating profit and loss, highest balance), dropped on another day. |
| unch.rp.check.<account>.<day> | Risk planner, "Before each trade": the lines you ticked that day; the ticks of earlier days are cleared. |
| unch.rp.start.<account> | Risk planner: the start date you typed for a time limit. |
| unch.consent | Your analytics choice (accepted or rejected) and its date; asked again after six months. |
Numbers in the page address
Filters, searches, the accounts in a comparison, the entries of the consistency calculator and the plan of the risk planner are written into the page address, so that a link reproduces them. They are sent to the server only when a page is requested with that address (for example when you reload it or open a shared link), because the server needs them to build the page. The site does not log them, and they are not tied to you.
Share images, the cards of a plan or of a comparison, are drawn from those numbers and may be kept in the server's memory for a limited time so that they can be served again. They contain the numbers of the plan or comparison and nothing about you.
The journal import of the risk planner reads your file in your browser. The file is never uploaded.
The share keys are plain links to X, Telegram, WhatsApp, Reddit and email: they open that service only when you click, and the site loads no script from any of them.
If you accepted analytics, the page address, numbers included, is also part of what Google Analytics records.
If you write to contact@fundedkeys.com, your message and your email address are kept in the mailbox, which is hosted on the same server as the site, so that we can answer. They are not used for anything else and are deleted on request.
Links to the firms
A firm link takes you straight to the firm's own website: this site does not route it through a redirect. If you accepted analytics, Google Analytics may record the click as an outbound link.
The firm's website may set its own cookies and record that you came from FundedKeys: that is how the commission works. From then on the firm's own privacy policy applies, not this one. Firm links are marked rel="sponsored".
Hosting and processors
The site runs on a server operated by Hostinger International Ltd, 61 Lordou Vironos str., 6023 Larnaca, Cyprus (company no. HE 301365), which hosts it on our behalf and processes data only as needed to run the server.
Google, described above, is the only other company that receives data about visitors, and only through Google Analytics: there is no advertising, font or other script provider.
Legal bases
- Serving the pages and keeping the site secure: our legitimate interest in running the site (Article 6(1)(f) GDPR). Your IP address is used only to answer the request and is not kept.
- Answering your email: your request and our legitimate interest in replying (Article 6(1)(f) GDPR). The message is kept to answer you and deleted on request.
- Google Analytics: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Your rights
Under the GDPR and the UK GDPR you have the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing and to receive it in a portable form. Where processing rests on consent, you can withdraw it at any time. You can also complain to a data protection authority: that of the country where you live or work, or in the United Kingdom the Information Commissioner's Office.
If you live in California, the CCPA/CPRA gives you the right to know what personal information is collected about you, to have it deleted or corrected, to opt out of its sale or sharing, and not to be treated differently for using these rights. FundedKeys does not sell personal information and does not share it for cross-context behavioural advertising, so there is nothing to opt out of.
Apart from the emails you send us, FundedKeys holds no data that identifies you. Analytics data is linked only to the random identifier in your _ga cookie: if you want us to look it up or delete it, tell us that identifier.
To use a right, write to contact@fundedkeys.com. We reply within the time limits set by law.
Children
This site is not directed to anyone under 18, and it does not knowingly collect personal data from children.
Changes to this policy
This page is dated at the top. When the policy changes, the date changes and the change is made here.