Cookies, session keys and what your browser stores

No tracking

Finmind sets no analytics, advertising or tracking cookies and runs no tag script in the browser. What it stores, it stores to make the site work, and the cookie policy names every item. The sign-in itself is not a cookie: your session tokens live in the browser's storage.

Cookies

• fm_locale keeps your language for one year.
• fm_returning remembers that this browser has signed in before, for one year when you ticked Remember me on this device, otherwise until the browser closes.
• fm_trusted_device marks a device you chose to trust for two-factor sign-in, for 30 days, and cannot be read by page scripts.
• Staff-only cookies exist for the administration area and are not set for other people.

Local storage (stays until you sign out or clear it)

• ef-auth holds your session: a 30-minute access token, and a refresh token that lasts 30 days when you ticked Remember me on this device.
• ef-theme, ef-sidebar-collapsed, ef-nav-recent and ef-terminal-watchlist remember how the app looks and your recent pages.
• ef-hide-balances remembers that you hid balances; see Read your dashboard and hide your balances.
• ef-org-context, ef-onboarding-surface, ef.dismissedAnnouncements, fm_cookie_notice, fm_last_signin_provider and fm_pending_ref remember a choice you made or a link you used. The Mini App adds a few of its own.

Session storage (stays until the tab closes)

ef-auth also lives here when you did not tick Remember me on this device, with a refresh token that lasts 24 hours. The other keys, such as fm.seenPages, fm.essentialsGrace and fm.emailChallenge, hold short-lived state: which intro already played, whether you hid the Essentials notice, or an unfinished email confirmation step.

Clear it

Sign out from the menu under your avatar: it removes the session keys. To remove the rest, clear this site's data in your browser's settings. Finmind then forgets your language and your layout choices, not your Finmind account.

Source: the cookie policy and the privacy policy of 8 November 2026, and the code that sets each key.