Legal
Cookie statement
Short, and it says what changed.
Last updated 10 August 2026
These are the operator’s own terms for the FundFlow service, written in plain language. They have not yet been reviewed by external counsel, and we will say so here until they have. If you need a signed data-processing agreement or a negotiated contract, write to support@fund-flow.nl.
1.What is strictly necessary
When you sign in to the application, strictly necessary cookies keep you signed in and keep the session secure. They are set by the authentication service, they contain no advertising identifier, and without them you could not stay logged in. Your language choice and your light or dark theme preference are remembered locally in your browser rather than in a cookie sent to us.
2.Analytics, and only with your consent
We measure how the public pages are used with Google Analytics, loaded through Cloudflare Zaraz. It tells us which pages people read before they sign up, where the signup wizard loses them, and whether the Dutch pages work as well as the English ones. It is how we decide what to fix.
That is not strictly necessary, so it is not on until you say so. A banner asks you the first time you arrive, nothing is loaded and no analytics cookie is set before you accept, and declining leaves the site fully working. You can change your answer at any time from the same banner.
This page used to say that any measurement we added would be cookieless. That is no longer what we do, so the commitment has been replaced by a consent gate: the honest version is that we do use a tool that sets a cookie, and it does nothing until you allow it.
3.What we do not do
No advertising cookies, no remarketing, no profiling, no cross-site tracking and nothing sold to anyone. We do not run Google Ads and we do not build audiences. Analytics is sent with Google signals for advertising switched off, and IP addresses are shortened by Google before they are stored.
4.What is never measured
Nothing about the funds you administer. Page addresses inside the application have the organisation, fund and participant identifiers stripped out before anything is sent, so a page is reported as the screen it is rather than the fund it was about. No participant name, no email address, no amount, no balance and no valuation is ever sent to an analytics tool.
5.Managing what is stored
Use the consent banner to withdraw your acceptance, or clear and block cookies in your browser settings at any time. Blocking the strictly necessary ones will stop you being able to sign in to the application; nothing on these public pages depends on them.