Privacy Policy

November 2026 update to this policy

Effective November 8, 2026. This section adds to the policy below and, where they differ, replaces it.

Who is responsible

FintechZoom Pro, the independent publication at fintechzoompro.com, is responsible for personal data collected on this site. Contact us about privacy at milesfinleyfintech@gmail.com.

Accounts

If you create an account on My Account, we store:

• Your name and email address, to identify your account and let you sign in.
• Your password, only as a salted hash (PBKDF2-SHA256). We never store or see your password in readable form.
• Session records: a hashed session token with its creation and expiry time, so you stay signed in.
• Security counters: short-lived, hashed keys derived from your IP address and email address, used only to limit repeated sign-in and sign-up attempts.
• The date your account was created and last updated.

We use this data only to run your account and protect the site. We do not sell it, use it for advertising, or send marketing email from the account system. Sign-up does not require any social login, and we do not send verification or password-reset emails.

Legal basis

We process account data to provide the account you ask for (performance of a contract) and to keep the site secure (legitimate interests). Where the law requires consent, for example for non-essential cookies, we ask for it.

Cookies

• fzp_session: an essential cookie set only when you sign in. It is HttpOnly, Secure and SameSite=Lax, and it expires after 30 days or when you sign out.
• A small setting in your browser's local storage may remember your light or dark theme choice. It never leaves your device.
• Third-party widgets described below may set their own cookies under their policies.

Retention and deletion

• Account data is kept until you delete your account. You can delete it at any time in My Account; this permanently removes your name, email address, password hash and all sessions.
• Sessions expire after 30 days and expired sessions are removed. Changing your password signs out all other sessions.
• Security counters are reset after their time window (15 minutes to 1 hour) and contain no readable IP address or email address.
• Hosting providers may keep short-term technical logs (such as IP address and request time) for security and reliability.

Service providers and third parties

• Cloudflare hosts the site and stores account data in its database service. Data may be processed in the countries where Cloudflare operates, under its data protection terms.
• TradingView provides the live charts and tickers. When a chart loads, your browser connects to TradingView, which may receive your IP address and set cookies under its own privacy policy.
• Alternative.me provides the Crypto Fear & Greed Index; your browser requests it directly when that widget is shown.
• Some articles embed videos or other content from third parties, which load from those providers when you view them.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to a data protection authority. You can update your name and delete your account yourself in My Account. For any other request, email milesfinleyfintech@gmail.com from the address on your account; we answer within 30 days.

Security and children

We use encrypted connections (HTTPS), hashed passwords and tokens, rate limits and origin checks to protect accounts. No system is perfectly secure, so please use a unique password. The site is not directed at children, and accounts are for people aged 18 or over; if you believe a child has created an account, contact us and we will delete it.

Changes

We will update this policy when our practices change and show the new effective date here.