Skip to main content
Filoah
Start free

Filoah Cookie and Analytics Notice

Last Updated: November 3, 2026 (America/New_York)

Effective: October 16, 2026 (America/New_York)

Version: v2026.11.03

Operator: Filoah LLC, a New York limited liability company (from October 14, 2026; before that date, an individual doing business as Filoah). Contact: support@filoah.com.

Change of operator. Before October 14, 2026, Filoah’s sites and apps were operated by an individual doing business as Filoah. From that date, Filoah LLC operates them, is responsible for this Notice, and is responsible for the account data and other data held for them before that date. Filoah LLC’s limited-liability protection applies only from that date. It does not apply retroactively to anything that happened before it.

Related: Privacy Policy (/privacy). Terms of Service (/terms).

What we use

Essential technologies

Filoah uses essential technologies to run the site and sign you in, including authentication via Amazon Cognito (session / auth tokens and related browser storage needed for login). Disabling these may break sign-in. Essential technologies are not Google Analytics, and they do not wait on the cookie banner.

Display settings

Your browser keeps display settings, such as a collapsed sidebar or the columns you choose, in its local storage on your device only. Filoah does not receive them, and they are not cookies.

First-party product counters

For product telemetry we use first-party Cloudflare Workers Analytics Engine counters (for example signup events; dataset example acs_demo_events). These counters are configured without advertising cookies and without storing user ids for advertising or cross-site tracking. They are separate from Google Analytics 4 and are not gated on the cookie banner.

Google Analytics 4 (measurement only, after a choice)

On our production sites (https://filoah.com, https://www.filoah.com, and https://app.filoah.com) we use Google Analytics 4 for measurement only.

  • This property is for those production sites only. We do not load it on development or staging hosts, including workers.dev hosts and app-dev hosts.
  • Admin hosts do not get the Google Analytics tag and do not get the cookie banner.
  • We do not connect a Google ads account. We do not enable remarketing. We do not enable Google signals. We do not use this tag to show ads. We do not use Google AdSense or another display-ad network, and we do not use session-replay SDKs.
  • Google Analytics uses cookies and similar storage in your browser. When your browser contacts Google, Google also sees your IP address and browser details (such as the browser type, which your browser sends with every web request), as it does for any site that uses Google Analytics. This happens only if you accept.

Cookie banner

Where the banner is shown, a short bar at the bottom of the page asks about cookies before any Google script loads. It has three buttons: Reject all, Accept all, and Cookie choices. Reject all is as easy as Accept all. Both buttons are on the bar itself, and they are the same size and weight. If you choose Reject all, we do not load the Google script and we do not send the events below. Until you choose, nothing optional loads, and the bar asks again the next time you visit. If your browser sends Global Privacy Control, the bar does not show, because the signal already says no (see Global Privacy Control below).

Cookie choices opens the Cookie choices window, with one row for each kind of cookie:

  • Needed to work is always on. It covers sign-in, which uses your browser's storage, and the cookie that remembers your choice here. It does not wait on the bar, and it has no switch.
  • Analytics is a switch that starts Off. It controls Google Analytics 4 only. It shows On or Off in words. Press Accept all, or turn the switch On and press Save choices, to allow Google Analytics. Press Reject all, or leave the switch Off and press Save choices, to refuse it.

Closing the Cookie choices window with Escape, with its close button, or with a link saves nothing. Only Reject all, Accept all, and Save choices save a choice. The window says that Filoah also counts sign-ups with its hosting provider, Cloudflare, with no cookies, and that this choice does not change it (see First-party product counters above).

You can change your choice at any time. The Cookie choices link in the footer of every page opens the same Cookie choices window and shows the choice you saved. So does the Cookie choices card under Your data on your Account page. Saving says Saved. Turning Analytics Off stops Google Analytics in that tab at once and clears its cookies from your browser. Other tabs that are already open keep working as they were until you load another page in them.

We store your choice in a first-party cookie named filoah_analytics on the .filoah.com domain, so filoah.com, www.filoah.com, and app.filoah.com share one answer. It holds only your choice (accepted or rejected) and lasts 180 days. It is not a sign-in and does not identify you. Deleting it means the bar asks again.

If you accept, your browser also keeps a small note in its local storage, on your device only, for each one-time event already sent (first_projection, cf_ready, and chat_start), so each is sent once. Filoah does not receive these notes. Choosing Reject all later does not remove them. You can clear them in your browser's site data.

Global Privacy Control

Some browsers and browser add-ons can send a signal called Global Privacy Control (GPC). It tells the sites you visit that you do not want your personal information sold or shared, including for tracking you across sites. We honor it. When your browser sends it, Filoah treats it the same as pressing Reject all:

  • We do not load the Google script and we do not send the events below. This is true on filoah.com, www.filoah.com, and app.filoah.com, from the first page you open.
  • The cookie bar does not show. The Cookie choices window shows Analytics as Off, says that your browser sent the signal, and has no switch and no Accept all while the signal is on. Your Account page says the same.
  • The signal wins even if you accepted before. Google Analytics stays off, and its cookies are cleared from your browser, as they are when you choose Reject all.
  • We do not save the signal in a cookie, in your browser's storage, or in your account. The choice you saved before stays as it is. If you turn the signal off later, your own saved choice applies again.
  • The signal does not change Filoah's own sign-up count with Cloudflare, which uses no cookies and no user ID (see First-party product counters above).
  • The signal stops Google Analytics only. It does not change what Filoah keeps to run the Service, such as the per-user usage described in the Privacy Policy (Section 2.5), or what Filoah staff can see (Privacy Policy Section 4.6).

Events that may be sent (only after accept)

Only if you accept (Accept all, or Analytics On and Save choices), only while your browser does not send Global Privacy Control, and only to our Google Analytics 4 property on those production sites, we may send:

  • page_view
  • sign_up (method Cognito only, no user id)
  • first_projection
  • cf_ready
  • chat_start

Never sent to Google

From our sites and apps, we never send these to Google: email, name, phone, Cognito sub (user id), balances, ages, account names, chat text, or your plan / Financial Planning Data. Email you choose to send us is different: it is kept in Gmail (Privacy Policy Section 2.7). An AI app you connect to your account is different too, even if Google makes it: it gets what our tools send it (Privacy Policy Section 4.5).

Details, your rights, and the processor list are in the Privacy Policy (/privacy).

We use your browser's storage to keep you signed in, one first-party cookie that remembers your choice, and Cloudflare Analytics Engine. On filoah.com, www.filoah.com, and app.filoah.com, Google Analytics 4 (measurement only) loads only after you choose Accept all, or turn Analytics On and press Save choices. Reject all is as easy as Accept all, and choosing Reject all means no Google script is requested. If your browser sends Global Privacy Control, we treat it as Reject all. You can change your choice any time with Cookie choices. See Privacy.

Google Analytics cookies count visits and stay off unless you say yes. See Privacy.