Cookie Policy

1. Introduction

This Cookie Policy explains how Felix Financial Services (“Felix,” “we,” “us,” or “our”) uses cookies and similar technologies when you visit our website or use our platform and services (collectively, the “Services”), including experiences delivered through partner co-branded portals and embedded widgets. This Cookie Policy should be read together with our Privacy Policy, which describes our broader data practices, and our Terms of Service.

A partner name, logo, or domain may appear alongside Felix as co-branding. Felix provides the platform and controls the cookies and similar technologies described in this policy; the partner is not substituted for Felix as the service provider.

2. What Are Cookies and Similar Technologies

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to website operators. Cookies set by the website you are visiting are called “first-party cookies”; cookies set by other parties whose technology is embedded in the website are called “third-party cookies.”

In addition to cookies, we may use similar technologies, including browser local storage and session storage (used to hold application state, such as your progress through onboarding steps) and server-side session identifiers. We do not load third-party advertising pixels, scripts, or web beacons on our pages, and we do not use browser fingerprinting techniques. The advertising measurement described in Section 4.4 works through first-party cookies set by Felix and server-to-server connections under our control. References to “cookies” in this policy include these similar technologies where applicable.

3. How We Use Cookies

We use cookies for the following purposes:

• Authentication and Session Management: To keep you securely signed in to your account and maintain your session as you navigate the platform.
• Security: To help detect and prevent fraud, unauthorized access, and other malicious activity, including CSRF token validation and rate-limiting protections.
• Preferences: To remember your settings, such as your partner co-branding context and user interface preferences.
• Embedded Experiences:To maintain secure, short-lived sessions when you use Felix widgets embedded in a partner organization’s website.
• Analytics: To record how users interact with our platform, which helps us identify areas for improvement and measure the effectiveness of our features. Some of this is aggregated and de-identified; product-usage events recorded in our own systems are linked to your account.
• Advertising Measurement and Attribution:To understand which of our own advertising campaigns bring people to Felix, and to report conversion events (such as account creation or a subscription purchase) back to the advertising platforms where Felix — or the partner that referred you — advertises. This uses first-party cookies only, as described in Section 4.4, and you can opt out at any time.

We do not permit third parties to set cookies on our Services, and we do not use cookies for cross-site tracking of your activity on other websites. Because our advertising measurement involves disclosing limited conversion data to advertising platforms, it may be considered “sharing” of personal information under some state privacy laws; Section 4.4 and our Privacy Policy describe exactly what is disclosed and how to opt out.

4. Types of Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the operation of our platform. They enable core functionality such as authentication, session management, and security protections (including CSRF token validation). Without these cookies, the platform cannot function properly. These cookies do not require your consent and cannot be disabled through our Services; blocking them in your browser will prevent you from signing in.

4.2 Preference Cookies

These cookies remember your choices and settings to provide a more personalized experience. For example, they may store your partner co-branding context or user interface preferences so that you do not need to re-enter them on each visit. Disabling these cookies will not prevent you from using the platform but may result in a less personalized experience.

4.3 Analytics

We use a cookieless, privacy-focused analytics service to collect aggregated, de-identified data about how users interact with our platform — for example, which pages are visited, which features are used, and where users encounter errors. It does not set cookies on your device or track you across other websites. We also record product-usage events (such as pages viewed and onboarding steps completed) in our own systems, under our exclusive control, to improve the Services; those records are linked to your account or visitor identifier and include your IP address and browser user-agent, and so are not de-identified. This analytics data is not used for advertising, profiling, or cross-site tracking purposes. Analytics is enabled by default, is automatically disabled when your browser sends a Do Not Track or Global Privacy Control signal (see Section 10), and can be turned off at any time in our preferences center (see Section 8) without affecting the functionality of the platform.

4.4 Marketing and Advertising Attribution

We use a small set of first-party cookies, set and readable only by Felix, to understand which of our own advertising campaigns work:

• felix_vid — a random visitor identifier (up to 400 days) that lets us connect a visit to an account created later.
• felix_sid — a short-lived session identifier (about 30 minutes, rolling).
• felix_attr — how you arrived (up to 90 days): the referring site, campaign parameters (such as utm_source), advertising click identifiers added to the URL by the platform you clicked the ad on (such as fbclid or gclid), the landing page, and the referring partner, if any.
• felix_consent — a record of your analytics and marketing choices (1 year) so our servers can honor them.

When the marketing category is enabled and a meaningful event happens — for example, you create an account or purchase a subscription — we may report that event from our servers to the advertising platform whose ad you clicked. What we send is strictly limited: hashed identifiers (a one-way cryptographic form of, for example, your email address, phone number, date of birth, or city, state and ZIP code), the event name, the time, the click identifier from the ad, your IP address and browser user-agent (which the advertising platforms require in unhashed form to match and to detect fraud), and — for purchases — the amount paid. We never send your credit information, account balances, debts, tradelines, hardship reasons, settlement amounts, or any details about the accounts you enroll. We do not load any code from advertising platforms on our pages.

Marketing measurement is on by default for visitors in the United States, with notice provided by our consent banner, and can be turned off in one click there or at any time in our preferences center (Section 8) or via the “Your Privacy Choices” link in our website footer or in your account Settings. If your browser sends a Global Privacy Control or Do Not Track signal, marketing measurement is off and stays off regardless of any other setting (Section 10).

5. Cookie Duration

Cookies may be either of the following, based on how long they remain on your device:

• Session cookies, which are temporary and are deleted when you close your browser. We use session cookies for security-sensitive functions such as sign-in flows and embedded widget sessions.
• Persistent cookies, which remain on your device for a set period or until you delete them. We use persistent cookies to keep you signed in between visits and to remember your preferences. Persistent cookies are given expiration dates appropriate to their purpose and are not retained longer than necessary.

6. First-Party and Third-Party Cookies

All cookies used on our Services — including the advertising-attribution cookies described in Section 4.4 — are first-party cookies set by our own platform. We use a privacy-focused third-party analytics service that collects only aggregated, de-identified usage data on our behalf; it does not place cookies on your device or track you across other websites, and it is contractually prohibited from using the data for any purpose other than providing analytics services to us. You can turn analytics off at any time (see Section 8). Our payment processor may set its own cookies during checkout for security and fraud-prevention purposes, subject to its own privacy policy.

7. What We Do Not Use

We do not use any third-party advertising cookies, retargeting cookies, or social media tracking cookies, and no advertising platform can read or set cookies on our Services. We do not permit third parties to collect personal information across our Services for their own purposes. The only advertising-related disclosure we make is the server-side conversion reporting described in Section 4.4, which you can opt out of at any time; our Privacy Policy describes it in detail, including the opt-out mechanics under state privacy laws.

8. Managing Your Cookie Preferences

The easiest way to manage non-essential cookies is through our preferences center, which lets you turn preference cookies, analytics, and marketing measurement on or off at any time. It is offered in the consent banner on your first visit and remains available afterwards from the “Your Privacy Choices” link in our website footer or your account Settings, or right here:

Manage cookie preferences

You can also control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device and delete them individually;
• Block third-party cookies;
• Block cookies from specific websites;
• Block all cookies; or
• Delete all cookies when you close your browser.

Browsers also typically allow you to manage local storage and site data through the same settings interface. For more information about managing cookies in your specific browser, please refer to your browser’s help documentation. Because browser controls differ, you may need to adjust settings separately on each browser and device you use.

9. Consequences of Disabling Cookies

Please note that if you disable or block strictly necessary cookies, you will not be able to sign in to or use our platform. Disabling preference cookies may result in a less personalized experience, and you may need to re-enter settings on each visit. Disabling analytics or marketing cookies will not affect the functionality of the platform in any way.

10. Do Not Track and Opt-Out Preference Signals

Some browsers offer a “Do Not Track” (“DNT”) setting that sends a signal to websites you visit indicating that you do not want to be tracked, and some browsers or extensions transmit opt-out preference signals such as the Global Privacy Control (“GPC”). We honor these signals: when we detect a DNT or GPC signal, we treat it as a valid opt-out of the sale or sharing of personal information. Specifically, we do not load our analytics service (unless you have explicitly turned analytics on in the preferences center), we do not store advertising click identifiers from the URLs you arrive on, and we do not report any conversion data about you to advertising platforms — even if the marketing category was previously enabled. The marketing block applies for as long as your browser sends the signal and cannot be overridden by a preferences-center setting.

11. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, the technologies we use, or for other operational, legal, or regulatory reasons. When we make changes, we will update the “Last updated” date at the top of this policy, and where the changes are material we will provide additional notice through the Services. We encourage you to review this policy periodically.

12. More Information and Contact

For more information about how we handle your personal information, please see our Privacy Policy. If you have questions about our use of cookies or this Cookie Policy, please contact us through the support section of your account dashboard.