Privacy Policy
This Privacy Policy describes how Best FDE Programs ("we", "us") handles information when you visit bestfdeprograms.com (the "Site").
What we collect
- Request data. Our hosting provider processes standard request data, including IP address, browser type, the page requested and the referring address, to deliver and secure the Site.
- Approximate location. Our hosting provider tells our server the country, region and city your connection appears to come from. We record that approximate location, not your IP address.
- First-party analytics. A small script of our own on each page reports to our own server the pages you view, the page address (including campaign tags such as utm_source) and the page you came from, your screen and window size, how far down a page you scroll, how long a page is in view, whether a recommendation on a page comes into view, and the links and buttons you click: their text, their address and where on the page you clicked. The script loads nothing from other companies, sets no cookies itself and stores nothing in your browser.
- Browser and device type. Our server reads the browser name and version, the operating system and the device type (desktop, mobile or tablet) from the user agent your browser sends. We do not record the user agent itself.
Our analytics processor
Our server sends the analytics events described above, with the visitor ID, the device key and the approximate location, to PostHog, Inc., which stores and processes them for us in the United States. We never send it your IP address, your user agent, your name or your email address.
The company we recommend as our top pick uses the same analytics account for its own website: our analytics account is shared with it, and it can see the events described here.
The device key
With each event our server computes a device key: a keyed one-way hash (HMAC-SHA256) of your IP address and user agent, shortened to 32 characters. The same browser on the same connection gives the same key, so it can link visits that probably come from one device, on this Site and on other websites that share our analytics. The key cannot be turned back into your IP address or user agent, and neither of those is stored or sent to our analytics provider. Many people can share one connection, for example in an office or on a mobile network, so the key is an approximate signal, not an identity.
Following a link to a company we recommend
Links to a company we recommend, which some articles name as our top pick, go first to an address on this Site. Our server notes the click (which page it was on, where the link sat and which of that company's pages it points to) and then passes you on to that company's website. The address you land on carries a one-time click ID, your visitor ID, the name of this Site, the page you came from and a signature proving the link came from this Site, so the company can tie your visit to its website to your visits here. No visitor ID is passed when the rules under Choices and rights apply to you. How we are funded identifies the company and our connection to it.
The visitor cookie
We use one first-party cookie, set by our own server on bestfdeprograms.com. It contains a random visitor ID, how many visits you have made, when you last visited and a check code proving our server set it. That lets us count visits and tell new visitors from returning ones. Page scripts cannot read it, it goes only to this Site over secure connections, and it expires 400 days after your last visit. You can remove it in your browser settings whenever you like.
Contact form messages
The contact form asks for your email address and your message, and for your name only if you want to give it. Along with those, our server records the approximate country your connection appears to come from, as our hosting provider reports it. Your IP address and user agent are not stored with the message. We use what you send only to read it and to reply to you. We store it with a database service provider in the United States, keep it for up to 12 months and then delete it. We never use it for marketing, and we share it with no one except the service providers that store and deliver it for us.
You can ask for a message to be deleted sooner through the same contact form; tell us the email address you used.
Disclosure
We do not sell personal information. Our hosting provider processes request data and our analytics provider processes analytics events, both on our behalf as described above. We disclose information when the law requires it. Messages sent through the contact form are stored by our database provider, also on our behalf.
Choices and rights
- Global Privacy Control. We honor the Global Privacy Control signal. When your browser sends it, we set no cookie (and delete an earlier one), compute no device key, include no visitor ID in links to a company we recommend, and count your page views only under an anonymous ID that changes daily and is different on every site, so your visits are not followed.
- Visitors in Europe, the UK and Switzerland. The same rules apply automatically when your connection appears to come from the European Union, the European Economic Area, the United Kingdom or Switzerland, or when we cannot tell where it comes from.
- Your rights. Laws such as the California Consumer Privacy Act and the GDPR may give you rights of access, correction and deletion, depending on where you live.
Children
The Site is meant for adults, and we do not knowingly collect information from children under 13.
Contact
For privacy requests, such as having a message you sent us deleted, use the form on our contact page.