Editorial · Data protection
Privacy policy.
FintechPays publishes editorial fintech reviews at fintechpays.com. The site is operated by Stephan Kulik, a private individual based at 111 Chlorakas Avenue, Shop 9, Suite 546, 8220 Chloraka, Paphos, Cyprus. This document describes what data the site collects from you (almost nothing), how we use it (mostly we don't), and your rights under the EU General Data Protection Regulation. It is written in plain language because the underlying answer is simple: we are an editorial publisher, not a data business.
Who we are
Stephan Kulik, a private individual based in Paphos, Cyprus, is the data controller for any personal data this site processes. Our editorial contact is editorial@fintechpays.com. Privacy-specific requests can be sent to the same address with "Privacy" in the subject line.
What we collect
Very little. The site has no contact form, no comment system, no newsletter sign-up, no account creation, and no payment flow. The only measurement tool is Google Analytics 4, and it is strictly consent-gated — see the next section. We do not embed Facebook, session-recording scripts, or any advertising trackers.
Functional storage on your device: the localStorage key fp-theme (your light/dark theme choice) and fp-consent (your analytics-consent choice). Both are functional storage under the EU ePrivacy Directive's "strictly necessary" exemption; they never leave your browser.
Analytics and cookie consent
Since July 2026 the site runs Google Analytics 4 in Consent Mode v2 with every storage type defaulted to denied. Until you accept analytics in the consent banner, GA4 sets no cookies and sends only cookieless, aggregated consent-mode pings. If you accept, GA4 records page views, referrer, device and browser type, approximate (country/region) location, and interaction events such as affiliate-link clicks, with IP anonymisation, and sets its cookies (_ga, _ga_8RSNKGVM68 — see Google's policy for retention). The legal basis is consent under GDPR Art. 6(1)(a).
If you decline, no analytics cookies are ever set. To change or withdraw your choice, clear the fp-consent entry from localStorage (browser developer tools → Application → Local Storage) and reload — the banner will reappear. Google's privacy policy: policies.google.com/privacy.
What our host sees
fintechpays.com is served via Cloudflare. Cloudflare's edge network logs the IP address, user agent, and request path of every visitor — this is standard server-log data, retained by Cloudflare for fraud and DDoS protection per their privacy policy. We do not export, mirror, or analyse those logs. If a security incident requires us to inspect logs, we will do so under EU GDPR Art. 6(1)(f) "legitimate interest" basis and retain only what the incident requires.
We do not enable Cloudflare's Web Analytics product. The first-party request counts shown in our Cloudflare dashboard come from edge logs, not from any cookie or fingerprint on your device.
Affiliate links + third-party sites
FintechPays earns commissions when a reader clicks an affiliate link and completes an action on the partner's site. The compensation arrangement is disclosed above every page via the affiliate disclosure stripe, on every program card via the ¶ affiliate caption, and in detail at /disclosure/.
When you click an affiliate link, you leave fintechpays.com and enter the partner's site, where the partner's own privacy policy and tracking practices apply. We do not control what the partner does. We do not insert tracking pixels on your behalf, and we do not receive personally identifiable information back from the partner — only aggregate, attributed conversion counts under each partner's affiliate-program terms.
Your rights under EU GDPR
You have the following rights regarding any personal data we process about you:
- Right of access — request a copy of any personal data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure ("right to be forgotten") — ask us to delete your data
- Right to restrict processing
- Right to data portability
- Right to object to processing on legitimate-interest grounds
- Right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus), dataprotection.gov.cy, or your member state's data-protection authority if you are located in another EU member state
Because the site does not collect personally identifiable information from you in the ordinary course, most rights requests will reach the same conclusion: we have nothing to access, rectify, erase, or restrict. We will respond to any request within one calendar month of receipt to confirm what we hold (typically none) and explain why.
International transfers
Cloudflare operates a global edge network — your requests are served from whichever data centre is geographically closest. The associated server logs may be transiently stored in any Cloudflare data centre, including outside the UK or EU. Cloudflare's published Data Processing Addendum and Standard Contractual Clauses cover these transfers.
Children
FintechPays publishes content about regulated financial products typically restricted to adults (prop trading, crypto exchanges, business banking, credit cards). We do not knowingly direct any of our content at children under 16 and do not knowingly collect data from anyone under 16. If you believe we have inadvertently received data from a child, contact editorial@fintechpays.com and we will delete it.
Changes to this policy
If we make material changes — for example, if we add a newsletter, a contact form, an analytics platform, or any other system that processes personal data — we will publish a revised policy here with a new "last reviewed" date and a short summary at the top of this section describing what changed.
Dates
- Policy prepared:
- Last reviewed:
- Next scheduled review: , or sooner if data flows change