Finlume Cookie Policy
This Cookie Policy should be read together with our Privacy Policy and Terms & Conditions. Continued use of the Service constitutes your agreement to all of the foregoing documents.
Last updated: August 18, 2026
Operator: Hong Kong Xingyue Network Technology Limited ("Finlume", "we", "us", a Hong Kong-incorporated company)
Registered address: Rm 511 5/F MING SANG INDL BLDG 19-21 HING YIP ST, Kwun Tong, Hong Kong
Contact email: [email protected]
1. What Are Cookies and Similar Technologies
A cookie is a small text file stored locally on your browser/device when you visit a website. Similar technologies include pixel tags (web beacons), local storage, and session storage. They help us remember your actions and preferences, and let us understand how the Service is used.
Cookies are categorized as follows:
- First-party cookies: set by Finlume itself;
- Third-party cookies: set by our partners (e.g., analytics, payment, and advertising service providers).
2. How We Use Cookies
We use cookies in the following four categories. "Strictly necessary cookies" are essential for the Service to function and cannot be disabled; the remaining categories are requested via a consent banner on your first visit and are disabled by default, becoming active only after you click "Accept" or make a specific choice. You may withdraw or adjust your choice at any time.
- Strictly necessary cookies: keep the website fundamentally usable (secure login, fraud prevention, remembering steps). Always on, cannot be disabled.
- Preference cookies: remember small preferences such as your interface language or whether you skipped onboarding. Off by default.
- Statistics cookies: anonymously understand how people use the product and where they get stuck, so we can improve it. Off by default.
- Marketing cookies: show more relevant product information, or perform retargeting where you consent; not used to make investment decisions on your behalf. Off by default.
3. List of Cookies We Use
The typical cookies used by the Service are listed below by the four purpose categories. The actually effective list is determined by your device; the names and durations of third-party cookies are set by their providers and may change with version updates.
3.1 Strictly Necessary Cookies (First-party)
| Cookie name | Provider | Domain | Purpose | Duration |
|---|---|---|---|---|
| finlume_session | Finlume (first-party) | .finlumeapp.com | Maintain login session, identify logged-in users | Session (expires when browser closes); 30 days if "Remember me" is checked |
| finlume_csrf | Finlume (first-party) | .finlumeapp.com | Security protection against cross-site request forgery (CSRF) attacks | Session |
| finlume_consent | Finlume (first-party) | .finlumeapp.com | Record your choice of cookie categories | 12 months |
If payment, anti-fraud, or other essential functions are provided by a third party that sets cookies in the necessary scenario (e.g., a payment processor), we will supplement its name, provider, domain, purpose, and duration here.
3.2 Preference Cookies
| Cookie name | Provider | Domain | Purpose | Duration |
|---|---|---|---|---|
| finlume_lang | Finlume (first-party) | .finlumeapp.com | Remember your selected interface language | 12 months |
| finlume_onboarding | Finlume (first-party) | .finlumeapp.com | Remember whether you have skipped onboarding | 12 months |
3.3 Statistics Cookies
| Cookie name | Provider | Domain | Purpose | Duration |
|---|---|---|---|---|
| _ga | Google (Google Analytics) | .finlumeapp.com / google.com | Distinguish users, anonymously count site visits | 2 years |
| _gid | Google (Google Analytics) | .finlumeapp.com | Distinguish users | 24 hours |
| _gat | Google (Google Analytics) | .finlumeapp.com | Rate limiting (control request rate) | 1 minute |
3.4 Marketing Cookies
Currently Finlume does not load third-party marketing cookies by default. If retargeting or ad attribution is enabled in the future, the corresponding cookies (e.g., Google Ads _gcl_au, Meta _fbp, etc.) along with their provider, domain, purpose, and duration will be listed here, and your authorization will be obtained via the consent banner before they take effect.
Note: The first-party cookie names in this list follow common naming conventions and are subject to the actual production implementation; the statistics cookies are compiled based on the official Google Analytics integration. If Finlume changes service providers or adds third-party cookies, this list will be updated accordingly.
4. Your Choices and How to Manage Cookies
4.1 Consent Banner
When you first visit Finlume, you will see a cookie consent banner. Strictly necessary cookies are always on; preference, statistics, and marketing cookies are off by default and become active only after you click "Accept All" or make a specific choice. You may also choose "Necessary Only" to reject the remaining categories.
4.2 Change or Withdraw at Any Time
You may adjust your choices at any time by:
- Clicking the "Cookie Settings" link in the website footer to reopen the preferences panel;
- After clearing your browser cookies, the consent banner will reappear on your next visit.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
4.3 Browser Settings
You may also block or delete cookies at the browser level. Note: if strictly necessary cookies are disabled, some website functions may not work properly. Instructions for each browser are available in their official help centers:
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
On mobile devices, you can manage cookies through device settings (Android: refer to Google Support; iOS: refer to Apple Support).
5. Other Similar Technologies
In addition to cookies, we may use: pixel tags / web beacons (for counting opens and interactions), local storage / session storage (to save temporary state). The purposes and management of these technologies are consistent with Sections 2, 3, and 4 above.
6. International Data Transfers
Finlume is operated by the Hong Kong entity Hong Kong Xingyue Network Technology Limited and currently primarily serves the U.S. market. We or our third-party service providers may store cookie-collected data on servers in the United States, Hong Kong, the European Union, or other jurisdictions; for specific data processing locations, transfer mechanisms, and the list of third-party service providers, please see Section 7 "International Transfers" of the Privacy Policy.
For Cookie data from U.S. users: we use it for the normal operation, security, analytics, and marketing optimization of the Service. Under the U.S. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and similar state laws, users may have the right to "opt out of the sale or sharing of personal information." We do not sell your personal information; however, some third-party cookies (e.g., analytics and advertising services) may constitute "sharing" or "cross-context behavioral advertising" under California law. You may exercise this opt-out right via this Service's cookie consent banner or the "Privacy Settings / Do Not Sell or Share My Personal Information" link in the website footer.
For transfers from users in the European Economic Area (EEA) or United Kingdom (UK): we and the relevant providers rely on the European Commission's Standard Contractual Clauses (SCCs), the UK IDTA/Addendum, or adequacy decisions (where applicable) to ensure an adequate level of protection.
7. Children
This Service is intended solely for users aged 18 and above. This age threshold is higher than the 13-year standard under the U.S. Children's Online Privacy Protection Act (COPPA) and higher than the minor threshold in most jurisdictions—a more conservative setting that is consistent with the age requirement in Finlume's Terms of Service. We do not knowingly collect personal data from anyone under 18, nor target them with advertising or process their cookie preferences. If we discover that a minor's data has entered our systems, we will delete it.
8. Changes to This Policy
We may update this policy from time to time (e.g., adding third-party cookies or changing purposes). Material changes will be notified via the website. Continued use of the Service after changes constitutes acceptance of the revised policy. The "Last updated" date at the top of this page will be adjusted accordingly.
9. Contact Us
For questions about cookies, please contact:
Entity: Hong Kong Xingyue Network Technology Limited (Hong Kong-incorporated company)
Registered address: Rm 511 5/F MING SANG INDL BLDG 19-21 HING YIP ST, Kwun Tong, Hong Kong