Legal
Cookie and storage policy
QFM keeps essential service storage to a minimum and does not load optional TradingView market content until you choose to allow it.
Last updated: 17 July 20261. Essential technology
Supabase authentication uses secure cookies or equivalent storage to maintain login sessions, protect subscriber access and complete authentication redirects. These functions are necessary to provide the account and paywall service.
2. Privacy preference
QFM stores a first-party preference named qfm_consent_v1 in local storage. It records whether you allowed optional external market content and when the choice was saved. It is not used for advertising.
3. TradingView
The Markets page offers a TradingView widget. It is not loaded until you allow external content. If enabled, TradingView may receive technical information such as IP address, browser data and the page request, and may use its own cookies or similar technologies under its policies.
4. Stripe, Substack and linked services
When you continue to Stripe Checkout or Substack, you leave the QFM site and those providers apply their own cookies and privacy settings. External links do not load their tracking technology on QFM merely because the link is displayed.
5. Changing your choice
Select “Privacy choices” in the footer at any time. Rejecting external content does not block QFM articles, accounts or subscription management; it only prevents the embedded market widget from loading until you choose otherwise. Browser controls can also remove stored preferences and authentication cookies.
6. First-party audience measurement
QFM measures aggregate page views, approximate unique visitors, referral domains and actions such as newsletter, subscription and report-purchase clicks. This measurement is first-party and cookieless: it does not place an analytics cookie, does not create advertising profiles and does not share browsing activity with an advertising platform. Raw IP addresses and full browser identifiers are not stored; they are converted server-side into rotating pseudonymous hashes. Global Privacy Control and Do Not Track signals are respected.