Privacy Policy

FXNewsBias respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using FXNewsBias, you agree to this Privacy Policy.

1. Information We Collect

Information you provide directly:

• Email address (when you register, subscribe to the newsletter, or contact us)
• Display name and password (managed via Firebase Authentication; passwords are never stored on our servers in plain text)
• Profile information (country, trading experience, all optional)
• Telegram chat ID (only if you opt in to Telegram alerts)
• Payment details (collected and stored by Stripe, we never see or store your full card number)
• Community posts and comments you publish
• Messages you send through contact forms

Information collected automatically:

• IP address and approximate location (city / country level)
• Device type, browser, operating system, screen size
• Pages visited, time spent, click and scroll patterns
• Referring website (how you found us)
• Date and time of visits
• Subscription tier (Free / Pro) for feature gating
• Payment card fingerprint. When you start a free trial, Stripe gives us a non-reversible fingerprint of the card used. We store that fingerprint, not the card number, purely to enforce the one trial per person rule. It cannot be turned back into a card number and is never used for marketing.
• IP address for abuse limits. When you register or request an API key we record a counter against your IP address for that day, so a single address cannot open unlimited accounts or keys. These counters are aggregate and are not used to profile you.
• API key fingerprint and usage counts. If you use the Developer API we store a hash of your key, never the key itself, and a per-day count of requests made by your account.
• Web push subscription. If you allow browser notifications we store the push endpoint your browser issues, so we can deliver them. Revoking the permission in your browser ends this

2. How We Use Your Information

• Provide our service, display the sentiment dashboard, Market Pulse, Divergence detector, Streaks, news feed, calendar, and community.
• Account management, login, password reset, subscription status, profile features.
• Send alerts, deliver email digests and Telegram notifications you opt in to.
• Process payments, handle Pro subscription billing through Stripe.
• Communication, respond to inquiries, send service-related and (if subscribed) marketing emails.
• Improve the platform, analyze aggregated usage to refine features.
• Display ads, show advertisements on the free tier through Google Campaign Manager and affiliate partners. Ads are not shown to Pro subscribers.
• Security, detect fraud, abuse, automated scraping, and unauthorized access.
• Legal compliance, comply with applicable laws and respond to lawful requests.

3. Cookies & Local Storage

We use a small number of cookies and browser localStorage entries:

• Essential, fxnb_logged_in (login state flag), cookie-consent decision, and Firebase Authentication session tokens. Required for the site to function.
• Analytics, Google Analytics 4 (_ga, _ga_*) to measure aggregated traffic.
• Advertising, Our advertising partners set cookies to serve ads on the free tier. Ads are delivered through Google Campaign Manager, and the current advertiser is Pepperstone, an affiliate partner. Disabled for Pro subscribers.
• Preference, UI choices (e.g. tab selection, dismissed banners) stored in localStorage on your device only.

You can decline non-essential cookies via the consent banner shown on your first visit, and you can clear cookies at any time through your browser settings. Declining analytics/advertising cookies does not affect the core dashboard functionality.

4. Third-Party Services

We use a small set of vendors to operate FXNewsBias. Each receives only the data needed for their specific role:

• Cloudflare Pages & Workers, static hosting, CDN, DDoS protection, and the scheduled jobs that refresh sentiment, prices, and news.
• Firebase Authentication (Google), secure email/password and social login; receives your email and a hashed password.
• Supabase, Postgres database that stores sentiment scores, prices, news headlines, community posts, and your profile/subscription metadata.
• Anthropic Claude, AI engine that scores news sentiment. Public news headlines (no personal data) are sent for analysis.
• TwelveData, provides live and historical forex price quotes.
• Stripe, processes Pro subscription payments. Card data is collected on Stripe's servers; we receive only a customer ID and subscription status.
• Resend, sends transactional emails (verification, password reset, Daily Brief, alerts). Receives your email address and message contents.
• Telegram Bot API, delivers Telegram alerts to users who opt in. Receives your Telegram chat ID and the alert message.
• Google Analytics 4, anonymized traffic and behaviour analytics.
• Google Campaign Manager and affiliate partners (currently Pepperstone), display advertising on the free tier (disabled for Pro subscribers).
• Google Favicon Service (s2/favicons), when news cards render, your browser fetches each publisher's favicon from google.com/s2/favicons. This is a passive request to Google and may be logged by Google per their own privacy policy.
• Investing.com Calendar widget, embedded as an iframe on the calendar page; subject to Investing.com's own cookie and tracking policies.

5. Data Sharing

• With service providers, companies that help us operate
• For legal reasons, when required by law or court order
• To protect rights, to prevent fraud or abuse
• With your consent, if you specifically authorize sharing

We will never sell your personal data to advertisers or data brokers.

6. Data Security

• HTTPS / TLS encryption for all data transmission.
• Passwords are hashed and managed by Firebase Authentication, we never see them in plain text.
• Payment details are tokenised by Stripe and never stored on our servers.
• Database access (Supabase) is restricted by row-level security and service-role keys held only by the backend worker.
• Cloudflare DDoS protection, WAF, and bot mitigation in front of the entire platform.
• Limited internal access to personal data on a need-to-know basis.
• Regular dependency and security reviews.

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users and the relevant authorities as required by applicable law.

6.1 Data Retention

• Account data, kept for as long as your account is active. Deleted within 30 days of account closure (some records may be retained longer for legal, tax, or fraud-prevention reasons).
• Sentiment, price, and news data, public market data, retained indefinitely for historical charts.
• Payment records, retained by Stripe and by us for at least 7 years to meet financial record-keeping obligations.
• Analytics, Google Analytics retains aggregated data for up to 14 months by default.
• Email logs, Resend retains delivery metadata for up to 90 days.
• Trial card fingerprints, kept for as long as the one trial per person rule needs to be enforceable. Deleting your account does not remove the fingerprint, because doing so would defeat the rule it exists to enforce. It is not linked to anything but the trial check.
• API key hashes and usage counters, kept while the key is active and for a short period afterwards for abuse investigation. Daily request counters are aggregate.
• Abuse counters against IP addresses, kept for the day they apply to and then superseded.

7. Your Rights

• Access, request a copy of your personal data
• Correction, fix inaccurate data
• Deletion, request removal of your data
• Portability, receive your data in portable format
• Withdraw consent, for processing based on consent

Contact us through our contact page to exercise these rights.

8. Children's Privacy

FXNewsBias is not intended for users under 18 years old. We do not knowingly collect data from children.

9. Policy Changes

We may update this Privacy Policy from time to time. We'll update the "Last updated" date and notify registered users via email for significant changes.

10. Contact Us

If you have questions about this Privacy Policy, or you want to exercise any of the rights in section 7, email admin@fxnewsbias.com or use our contact page and choose "Privacy or Legal". We aim to respond to data access, correction and deletion requests within 30 days.