Cookies and Storage Policy
This policy explains what the FF Family website (fffam.app) and apps (app.fffam.app: FF Life, FF Business, FF Grows, the Suite, the Academy, the Game and the booking and business pages) store on your device, why, for how long, and how to turn off the part that is optional. It is part of our Privacy Policy.
The short version
- We do not use advertising cookies, trackers or social media plugins, and we never sell data or use it for ads.
- Our own code sets no cookies. The apps keep a few things in your browser's storage so that you stay signed in, your settings stick and nothing you save is lost when the connection drops.
- The website stores only your language choice.
- Life and Business count basic use, to improve the apps. You can turn this off in Settings > Security.
- The apps use one outside security check, Google reCAPTCHA, to keep automated scripts out.
- On a device set to a time zone in Europe, the optional counts are off until you turn them on, and the Google check does not run. For an account whose country in FF Life's Settings is in the EU or EEA, the counts also wait for your yes, and the Google check stops on that device from the next visit after the account signs in to Life or Business.
What we mean by storage
Cookies are small files a website saves in your browser. Browsers also offer other storage that works the same way: local storage, session storage, IndexedDB and a cache. This policy covers all of them. Session storage is deleted when you close the tab. The rest stays until you sign out (where we say so), until it is replaced, or until you clear your browser's data for the site.
The kinds
- Strictly necessary. Signing in and keeping your data safe and in sync. The service cannot work without them.
- Security. Google reCAPTCHA, explained below.
- Your settings. Things you chose, such as the language, dark mode or a closed menu, and small notes such as "this tip was already shown". They exist only because you used that feature.
- Usage counts (optional). Life and Business count basic use, to improve the apps. On by default, off by default in Europe (see "Devices and accounts in Europe"), and you can switch it at any time.
Nothing else: no advertising, no cross-site tracking, no selling of data. The links to Instagram, Facebook, X, LinkedIn, YouTube, TikTok and WhatsApp are plain links, and nothing from those services loads until you click.
The website (fffam.app)
No cookies, no outside scripts, and our fonts come from our own site.
| Name | What it is for | How long | Kind |
|---|---|---|---|
myfin.locale | The language you chose | Until you clear it | Your settings |
myfin.landingWaitlistLastSentMs | A short wait before the access form can be sent again | Session | Strictly necessary |
jexp | Only on fffam.app/v1.html, the first version we ever built: the sample expenses you type there stay in your browser | Until you clear it | Your settings |
The apps: strictly necessary
Most of these are kept by Firebase, Google's platform that runs our sign-in and database for us as our service provider.
| Name | What it is for | How long | Kind |
|---|---|---|---|
firebaseLocalStorageDb (IndexedDB) | Keeps you signed in | Until you sign out | Strictly necessary |
firestore/* (IndexedDB) | Life, Business and Grows: an offline copy of your own records, so nothing you save is lost if the connection drops | Deleted when you sign out | Strictly necessary |
firestore_* | Lets two open tabs share that copy safely | While the app is open | Strictly necessary |
firebase-app-check-database (IndexedDB) | Holds the short-lived pass from the security check below | About an hour, then replaced | Strictly necessary |
firebase-heartbeat-database (IndexedDB) | Firebase's own note of the days it reported which versions of its software the app runs. Nothing about you | Up to 30 days | Strictly necessary |
ff-offline-* (cache) | The "you are offline" page | Until the next version replaces it | Strictly necessary |
myfin.verifyLastSentMs | A short wait before another verification email can be sent | Session | Strictly necessary |
myfin.signinLink | Life: the page a link opened while you were signed out, so it opens once after you sign in | Session, at most 30 minutes | Strictly necessary |
ff_icsmirror_v2_* | The events of outside calendars you subscribed to, kept for this visit so they are not fetched again | Session | Strictly necessary |
ff.school.door.v1 | On a shared class tablet: the school and class codes, never a name or a PIN | Until you clear it | Strictly necessary |
ff.euAccount | Life and Business: an account whose country (FF Life, Settings > Preferences > Country) is in the EU or EEA signed in on this device, so the Google check below stays off here and the optional counts wait for your yes | Until you clear it, or set your own country outside the EU or EEA | Strictly necessary |
ff_nda_stamp | Only on our team's own document-signing pages: the company stamp picture | Until you clear it | Team only |
The apps: your settings
These are written only when you use the feature. Some names end with your account's internal number (shown here as *), so that two people on one device keep separate settings. The number is not your name or email.
| Name | What it is for | How long | Kind |
|---|---|---|---|
myfin.locale, myfinbiz_locale, ff.academy.lang | The language you chose | Until you clear it | Your settings |
myfin.theme | Light or dark mode | Until you clear it | Your settings |
ff_life_nav_collapsed, ff_biz_nav_collapsed, ff_life_cal_nav_optout, lvlSwitcherCollapsed, grows.settingsLastPane, ff.suite.sub:*, calHubLastTab (session), biz_calHubLastTab (session) | Menus you closed and the tab you last opened | Until you clear it, or the session | Your settings |
life.rcp.hiddenCols, biz.cli.hiddenCols, biz.sup.hiddenCols, biz.allstats.hidden, biz.ov.openCards, biz.ov.ownerVatOpen, biz.ov.balChoice.*, plan_view_pref, plan_layers_pref, grows_recent_filter, growsHomeView:*, growsMapLevel:*, *.life.listPresets.* | How you arranged a screen: columns, open cards, views and saved filters | Until you clear it | Your settings |
ff.biz.lastBiz:*, ff.suite.lastBiz:* | The business you had open last | Until you clear it | Your settings |
*.life.mru.* | The accounts and categories you used last, offered first in forms | Until you clear it | Your settings |
*.life.import.mapping.memory.v1, *.biz.import.mapping.memory.v1 | How you matched the columns of a file you imported, so the next import is quicker | Until you clear it | Your settings |
myfin.assistAi.* | Whether you turned AI help off on this device | Until you clear it | Your settings |
ffHelp.v1 (session) | Help: your search, topic and the guide you had open, so Help reopens where you left it | Session | Your settings |
lessonSound, ff.game.feel, ff.game.pace | Sound and pace you chose in lessons and the Game | Until you clear it | Your settings |
firstrun_shown_*, tutorial_shown_*, myfinbiz_welcome_shown_v1, myfin.tours.skipAll, myfin.verifyBannerDismissed.*, myfin.issuerDiscovery.dismissed, myfin.pwaInstallDismissed, myfin.pwaInstallSeenAt, recModalDismissed_*, ffPlanNoticeClosed:*, ff_checkin_*, ff_grows_start_money_off, *.grows.lastSeenLevel.*, ff.game.teenIntro, myfin.gsHiddenSession.* (session), investing_intro_dismissed (session), paycheck_intro_dismissed (session), pension_intro_dismissed (session) | Welcome screens, tips, tours and notices you already saw or closed, so they do not come back | Until you clear it, or the session | Your settings |
lifeHabitSkip:* | Habit days you marked as skipped on this device | Until you clear it | Your settings |
ff.game.season:*, ff.game.toLife, ff.game.toGrows | Your Game save on this device, and a goal the Game hands over to Life or Grows | Until you clear it | Your settings |
ff.learn.v1:*, ff.aa.v1:*, ff.aa.pos.*, ff.aa.act.*, ff.school.learn.v1:*, grows.pages.* | Where you are in a lesson or book, and your answers, so you can go on where you stopped | Until you clear it | Your settings |
myfinance.priceCache.v1, myfinbiz.priceCache.v2, nw_fx_cache, ff_fx_usd_base_cache_v1, ff_cpi_israel_cache_v1 | Public prices, exchange rates and the Israeli price index, kept for a short time so they are not fetched again | Until replaced | Your settings |
myfin.admin.tab (session), ff.aa.preview, reviewStatus_v1, reviewNotes_v1, featureReviewStatus_v1, featureReviewNotes_v1, featureReviewPrefilled_v1, grows.dev, ff_dev_bypass_gate, ff.game.jumpTo (session), ff.game.sandbox (session), ff.appcheckDebug | Tools only our team uses on its own devices, for reviewing and testing | Until cleared, or the session | Team only |
Usage counts (optional)
| Name | What it is for | How long | Kind |
|---|---|---|---|
ff_onb_first_* | Life: a note that your first entry was already counted, so it is counted only once | Until you clear it | Usage counts |
The counts themselves are not kept on your device. While you use Life or Business, the app adds up in memory which days you used it, for roughly how long, on which kind of device and which screens you opened, and sends these totals to our server, where we keep them for 13 months. Never what you type, never amounts. We use them only to improve the apps.
A business's public page counts taps on its buttons (for example "Book"), for the business owner. The count says nothing about who tapped and stores nothing on your device. It is not counted on devices set to a time zone in Europe.
Google reCAPTCHA (security)
To keep automated scripts away from your data, the apps and the booking and business pages use Google reCAPTCHA through Firebase App Check. It checks that requests come from a real browser. For this, Google's script stores the items below in Google's own storage in your browser, and may read cookies Google already placed there. Google receives technical information about your device and browser under Google's own privacy policy (policies.google.com/privacy), and says it does not use it for personalised ads.
| Name | What it is for | How long | Kind |
|---|---|---|---|
_GRECAPTCHA (cookie on google.com) | Google's risk check | Up to 6 months | Security |
rc::a, rc::b, rc::c, rc::d-*, rc::f (Google's storage) | Telling people from scripts | Set by Google, from the session to persistent | Security |
_grecaptcha (local storage on app.fffam.app) | Google's script keeps its own note of the check here | Set by Google, persistent | Security |
On a device set to a time zone in Europe, the check does not start at all, so none of this is stored. The same holds on a device where an account from the EU or EEA has signed in to Life or Business, from that device's next visit on (the check may already have run on the visit of that first sign-in). If you block reCAPTCHA in your browser, the apps keep working.
If you choose "Sign in with Google", Google's sign-in window uses Google's own cookies, under Google's policy.
How to turn things off
- Usage counts: Life or Business, Settings > Security > "Share basic usage statistics". Off means nothing is counted or sent, and our server refuses counts for you too.
- Everything else is either needed for the service or a setting you chose. You can delete all of it at any time by clearing your browser's data for fffam.app and app.fffam.app. This signs you out. Signing out already deletes the offline copy of your records.
- On a shared device, sign out and clear the site's data when you finish.
Devices and accounts in Europe
European rules (the EU ePrivacy Directive and the GDPR) allow strictly necessary storage and the settings you chose without asking, but ask for consent before anything optional. So on a device set to a time zone in Europe (the EU's overseas regions included), the usage counts start only when you turn the switch on, the public page taps are not counted, and Google reCAPTCHA does not run. The same holds for an account whose country is in the EU or EEA, wherever its device's clock is set. The country is the one you choose in FF Life, Settings > Preferences > Country, which lists every EU and EEA country (FF Business uses the same profile and does not ask). Its counts wait for the switch, and the device remembers it (ff.euAccount) so that Google reCAPTCHA does not run there from the next visit after the sign-in. If you later set your own country outside the EU or EEA, the device forgets it from your next visit. We read the time zone on your device and the country in your profile only; we do not look up where you are.
Outside Europe, the usage counts rely on our legitimate interest in improving the apps for the people who use them, and you can turn them off at any time.
Changes and contact
When what we store changes, we update this policy and its version date. Questions: support@fffam.app.