The short version

SetupBook uses no advertising or tracking cookies. We store what the app needs to work, and two third parties may set cookies through our pages: Google reCAPTCHA, to tell people from bots, and Google Analytics, only after you allow it in the bar at the bottom of the public pages. Saying no is remembered just as well as saying yes, and nothing is measured before you choose.

What we store in your browser

Name Type Purpose How long
Firebase authentication data (firebase:authUser:..., firebaseLocalStorageDb) IndexedDB / local storage Keeps you signed in Until you sign out
theme Local storage Light, dark or system theme Until you clear it
setupbook:last-used Local storage Remembers the account, symbol and other choices you used last on the trade form Until you clear it
setupbook:trades-view Local storage The layout you picked for the trades list Until you clear it
setupbook:just-onboarded and prop firm warning markers Session storage Show a welcome or limit warning once per visit Until you close the tab
setupbook:onboarding-step, setupbook:tutorial-begun:first_run, setupbook:onboarding-next, setupbook:arrive Session storage Keep your place in the first-run introduction if the page reloads, open what you chose at its end and let the app fade in once after it Until you close the tab or finish the introduction
Shared card view marker Session storage Counts your view of a shared trade only once Until you close the tab
setupbook:analytics-consent Local storage Your answer to the analytics question, yes or no Until you clear it
_ga, _ga_<id> (Google Analytics) Cookie, set by Google Tells returning visits apart so we can count visitors and see which pages lead to a sign-up. Set only after you allow analytics 2 years

None of these are used to identify you across websites, and none are sent to advertisers.

Third parties

  • Google reCAPTCHA Enterprise. Protects the sign-up, sign-in and password reset forms, and the app's requests to our database, from automated abuse. It runs invisibly, may set a _GRECAPTCHA cookie on google.com, and processes your IP address and browser details under Google's privacy policy and terms. This is strictly necessary to keep the service running, so it needs no consent.
  • Google Analytics 4. With your consent, measures page views and a short list of actions (creating an account, confirming the address, which introduction screens you saw and whether you skipped them, finishing the first setup, logging or importing a trade, connecting a platform). We never send it symbols, prices, results, notes, tags, your email or any wellbeing rating, and the ids in page addresses are removed before they are sent. With your consent it does receive your account id (a random string, not your email) and, when a platform connection fails, the platform's name and the error, so that a problem you report can be traced to the attempt that failed. IP addresses are not stored by Google Analytics 4, Google signals are off, data is kept for 14 months and is processed in the United States under the EU-US Data Privacy Framework. Withdraw consent by clearing setupbook:analytics-consent from local storage, which brings the bar back.
  • Google sign-in. If you choose "Continue with Google", Google sets its own cookies on its own domain in the sign-in window, under Google's policies.
  • Market data. Chart candles are loaded from the public market data services of Binance, Bybit, Coinbase and Alpaca without cookies.

How to control them

You can delete local and session storage and cookies in your browser settings at any time. If you delete the sign-in data you will be signed out; if you delete preferences they return to their defaults; if you delete the analytics choice the bar asks again. Analytics is the only optional item on this page, and it stays off until you say yes.

More about how we handle personal data is in the privacy policy.