Privacy Policy

Account information. If you create an account, we store your email address and an encrypted password. We never store your password in plain text. When you set a new password, we check it against Have I Been Pwned's public breach database to warn you if it's already known to be compromised. Only a short, irreversible partial fingerprint of the password is ever sent for that check, never the password itself. If you turn on two-factor authentication, your authenticator app secret is stored securely by our authentication provider (Supabase), never by us directly.

Rewards activity. If you use the points/rewards program, we store the purchases you report, your points/XP balance and history, redemption and redemption requests.

Payout information. If you request a payout of rewards or an affiliate referral bonus, we collect the payment details you provide, such as a crypto wallet address or bank/cash instructions. These are used to process that payout. If you choose to save your details for future payouts, we store them securely until you remove or change them; otherwise we delete them once the payout is completed and any legal record-keeping period has passed.

Usage data. We keep basic, self-hosted pageview analytics: which pages get visited, roughly when, what site (if any) referred you, and a coarse device type. No third-party analytics tool or advertising pixel is used. We do not set a cookie for this and never store your IP address for this purpose: a visit is grouped using a one-way, irreversible fingerprint of your IP, browser, and the current date, which changes every day and can't be traced back to you.

Support conversations. If you message us through the chat widget, we store your name, email, the conversation, and the IP address it was sent from. That IP address is used only to prevent spam and abuse on that feature.

Local browser storage. Some preferences (like dismissing the sign-up popup, or your last-used pass-probability calculator inputs) are saved only in your own browser's local storage. They are never sent to us.

• To operate your account and the points/rewards program (calculating balances, tiers, and eligibility).
• To manually confirm reported purchases and fulfill reward redemptions.
• To send account-related email (sign-up confirmation, password reset).
• To understand how the site is used and improve it (aggregate pageview analytics only, see above).

We do not sell your personal information.

We process your personal data because it's necessary to provide the account and rewards service you sign up for (performance of a contract), to meet legal obligations we're subject to (such as keeping payout records), and for our legitimate interests in keeping the site secure and preventing fraud or abuse.

Account and rewards data is stored with Supabase (Postgres), a third-party database provider. Access is restricted by row-level security so that, in normal operation, you can only read and write your own data. We'll update this section if the hosting or database provider ever changes.

We keep account and rewards data for as long as your account is active, and for a reasonable period afterward to handle disputes or meet legal requirements. Payout details are deleted once a redemption or referral payout is completed and any required record-keeping period has passed. Support chat logs are kept for up to 24 months.

We use the minimum cookies needed to keep you signed in (via Supabase Auth) and to render the site with your device correctly. We do not currently use advertising or tracking cookies. A short notice about this appears the first time you visit; you can revisit this policy any time for the full detail. We'll update this section, and the cookie notice's own wording, if analytics or advertising cookies are ever added.

• You can request a copy of the personal information we hold about you.
• You can request that we delete your account and associated personal information, subject to any records we're required to keep (e.g. for confirmed reward redemptions already fulfilled).
• You can ask us to correct any personal information we hold about you that's inaccurate.
• You can object to, or ask us to restrict, certain processing of your data.
• You can unsubscribe from any non-essential email we send.
• You can complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk), if you're unhappy with how we've handled your data.

To exercise any of these, contact us at support@futuresfirmfinder.net.

This site is not directed at, and we do not knowingly collect information from, anyone under 18.

We may update this policy from time to time; the "last updated" date at the top will reflect the most recent change.

The data controller for the purposes of UK GDPR is Futures Firm Finder Ltd, a company registered in England and Wales under company number 17485997. Registered office: 21a Lower Rock Gardens, Brighton, England, BN2 1PG.

Questions about this policy: support@futuresfirmfinder.net.