Cookie Policy
1.What this page covers
A cookie is a small piece of text a site asks your browser to keep and send back on the next visit. Browser storage — localStorage, sessionStorage and IndexedDB — is similar but stays on your device and is never sent to us. We use all of them, sparingly, and this page lists every one, plus the one thing that rides in a page address rather than in storage.
2.Strictly necessary
These make the site work and cannot be switched off without breaking it. They need no consent.
- Session cookie — set when you sign in with Whop; lasts 7 days or until you sign out. Without it, every member page would send you back to the login.
- Sign-in handshake cookie — set for the few minutes of the Whop sign-in and deleted when it completes.
- Member token in the chart's address — FloCharts opens inside a frame whose address carries a signed token naming your member reference and plan, valid for 24 hours, so the recorder knows who is asking; when live trading is enabled for you it also carries a trading grant. It is not a cookie, but your browser may keep that address in its history. It cannot be turned into a better plan or a longer life, and it expires on its own.
3.Preferences and the chart's own storage
These remember how you like things. They hold no personal data and are never sent to a third party.
- Theme cookie — which chart theme you chose, so the page is dressed before it loads. One year.
- Chart storage (localStorage) — the symbol, timeframe, panes, drawings, indicators and saved layouts of FloCharts, and your Journal view settings. Stays until you clear it or the site removes it.
- FloCharts trading key (IndexedDB and tab storage) — if you ask the chart to remember your Toobit key, it is kept encrypted in your browser's IndexedDB on this device, under a key your browser will not hand out; if you choose "this tab only", it is kept unencrypted in the tab's session storage and goes when the tab closes. Neither is sent to us.
- Consent decision (localStorage) — whether you accepted or declined analytics, so we do not ask again.
4.Analytics
- Google Analytics — the
_gacookie and its companions, lasting up to two years, which tell us which pages and features are used. In the EEA, the UK and Switzerland we set it only after you accept it in the banner; decline and it is never set, and the site works exactly the same. Outside those regions the cookie is set when the page loads, without a banner. Analytics receives a hashed member reference, never your name or anything you typed. - Sign-in count without a cookie — when you sign in, our server tells Google Analytics that a sign-in happened, with your hashed member reference. This sets no cookie and happens whether or not you accepted the banner; the Privacy Policy explains why.
- Vercel Web Analytics — page-view counts with no cookie and no cross-site identifier.
5.What we do not use
No advertising cookies, no social-media pixels, no cross-site tracking, no fingerprinting. If that changes, this page changes first and the banner asks again.
6.Your choices
To change your analytics decision, clear this site's data in your browser and the banner will ask again on the next visit where it applies. Clearing this site's data also deletes any trading key the chart remembered on this device, the chart's last state (named layouts you saved are kept on our recorder and are not affected), and the consent decision itself. Your browser can also block or delete cookies for any site; blocking the session cookie means you cannot stay signed in. Or write to us and we will tell you how to withdraw your analytics choice.
If your browser sends a Global Privacy Control signal, we treat it as declining analytics on this site: the analytics cookie is not set and the banner does not ask. We do not respond to browser Do Not Track headers, because there is no accepted standard for them; since we set no advertising or cross-site cookies, neither signal changes anything else.
Questions: [support@flosignals.com or flosignals@gmail.com — pick one].