Legal
Cookie Policy
Summary
The short version
We use Google Analytics to see which pages people read and how they find the site. It sets cookies only if you press Accept. Until then, and if you decline, it counts page views without them.
- Cookies
- Two from Google Analytics, set only if you accept, and two small ones of ours that remember a refusal or an opt-out. No advertising cookies.
- Everything listed
- 19 items in all: 4 cookies and 15 browser storage keys, 11 of them used only by Crypto Bargains and the Momentum Scanner.
- Your choice
- Accept or Decline on the bar at the bottom of the page, Cookie settings in the footer to change it, and a switch below that stops Google Analytics loading at all.
1. How Google Analytics works here
Google Analytics 4 loads on the first page you open and on every public page after that. It doesn't run on the contact form, the newsletter and waitlist sign-up pages, the thank-you page you see after a form, or test copies of the site.
Before you choose, and if you decline
Until you press Accept, the page tells Google Analytics that analytics and advertising storage are refused, so no cookies are read or set. Google still gets a basic request for each page you open, with:
- the page address, with anything after a
?removed apart from campaign tags; - the site you came from, without its query;
- your browser type, screen size and language, the time, and a random number for that page view.
Your IP address reaches Google too, as with any web request. With no cookie, nothing links one of these requests to your next visit. When it has enough of them, Google may pool them to estimate visits it can't measure directly. We rely on legitimate interests for this (UK GDPR Article 6(1)(f)). We want to know which pages people find useful and how they got here, search engines included. You can object at any time with Don't count my visits.
If you accept
Google Analytics then also sets the _ga and _ga_2X4453Q6DD cookies, so it can tell when the same browser comes back. UK law says analytics cookies need your consent first. We wait for Accept wherever you're visiting from, and that consent is our lawful basis for this part (Article 6(1)(a)).
Settings we chose
- Advertising storage, ad personalisation and Google signals stay off whatever you choose. There are no adverts on the site.
- All the data-sharing switches in our Google Analytics account are off, so Google can't use our data for its own products, benchmarking, technical support or business recommendations.
- We set event data retention to 2 months, the lowest Google allows, and user data retention to 14 months with "Reset on new user activity" on. In practice the random ID in a
_gacookie, and what Google links to it, goes 14 months after that browser's last visit. Report totals name nobody and stay. - Google handles some of the data in the US, relying on the UK Extension to the EU-U.S. Data Privacy Framework and on standard contractual clauses (see section 5 of the privacy policy).
2. What we store in your browser
These are the only cookies and storage keys that the site, its tools and Google Analytics on it can place in your browser. localStorage and sessionStorage stay on your device and are never sent to us; cookies go back to the site with each request. Most items appear only after you press something.
Google Analytics, only if you accept
| Name | What it holds | When it is written | How long it stays |
|---|---|---|---|
_gaCookie | A random number that tells one browser apart from another, so a return visit can be counted as the same visitor. | Only after you press Accept on the cookie bar. | Up to 2 years, renewed on each visit, unless you decline or delete it |
_ga_2X4453Q6DDCookie | The current visit number and its start time, so the pages you open in one visit are grouped together. | Only after you press Accept on the cookie bar. | Up to 2 years, renewed on each visit, unless you decline or delete it |
Across the site
| Name | What it holds | When it is written | How long it stays |
|---|---|---|---|
om_analytics_declinedCookie | The version number of the cookie question you declined. | When you press Decline on the cookie bar. It keeps Google Analytics cookie-free even if your browser drops localStorage. | 6 months, or until you accept or delete it |
om_no_countCookie | The number 1. | Only when you turn on "Don't count my visits" on this page. Google Analytics then does not load at all. | 1 year, or until you turn the switch off or delete it |
om-analytics-consentlocalStorage | Whether you accepted or declined, when, and the version of the question. | When you press Accept or Decline on the cookie bar. | We ask again after 6 months, or sooner if the question changes. The key stays until replaced or cleared |
om-analytics-bar-hiddensessionStorage | The version number of the question. It records no choice. | Only if the cookie bar hides itself, or you press Escape, before you choose. | Deleted when you close the tab |
om-themelocalStorage | "light" or "dark". | Only when you press the theme button in the header. Until then the site follows your device setting and stores nothing. | Until you clear this site's data |
om-lenslocalStorage | Which returns view you picked: nominal dollars, nominal pounds, real (US CPI), real (UK CPI) or against M2. | Only when you change the "Show returns in" setting on a real-returns, inflation or money-supply page. Until then the pages show real returns in dollars and store nothing. | Until you clear this site's data |
Crypto Bargains
| Name | What it holds | When it is written | How long it stays |
|---|---|---|---|
bargain-crypto-viewlocalStorage | "simple" or "pro". | When you switch between Simple and Pro. | Until you clear this site's data |
outsmartmoney-bargains-watchlist-v1localStorage | The CoinGecko IDs of coins you added from search or removed from the list. | When you add a coin, remove one or press Undo. | Until you clear this site's data |
om-crypto-bargains-research-acklocalStorage | The date and time you accepted the "research tool, not advice" notice. | When you press Continue on My Plan. | Until you clear this site's data |
om-crypto-bargains-plan-v2localStorage | Your plan: the coins you chose, your budget, split rule and weights, the zones you last saw and were alerted about, and your alert settings. If you set up alerts, this includes your Discord webhook address, Telegram bot token and Telegram chat ID, in plain text. | When you save a plan or change an alert setting. | Until you use "Clear and rebuild", or clear site data |
bargain-crypto-plan-v1localStorage | A plan saved on the old Crypto Bargains site, in its old format. | Only if you import an export file from the old site. My Plan reads it once and copies it into the key above. | Until you clear this site's data |
bargain-crypto-coinstats-keylocalStorage | Your CoinStats API key, in plain text. | When you sync a CoinStats portfolio. | Until you press Disconnect, or clear site data |
bargain-crypto-coinstats-tokenlocalStorage | Your CoinStats portfolio share token, in plain text. | When you sync a CoinStats portfolio. | Until you press Disconnect, or clear site data |
bargain-crypto-coinstats-portfoliolocalStorage | A copy of the holdings and totals CoinStats last sent back. | When you sync or refresh the portfolio. | Until you press Disconnect, or clear site data |
Momentum Scanner
| Name | What it holds | When it is written | How long it stays |
|---|---|---|---|
pulseboard-journal-v1localStorage | The practice trades you log: symbol, entry, stop, target, size, risk, note and outcome. | When you save, mark or delete a practice trade, or import a file. | Until you clear this site's data |
pulseboard-no-trade-days-v1localStorage | The dates you marked as no-trade days. | When you mark a no-trade day or import a file. | Until you clear this site's data |
pulseboard-prefs-v1localStorage | Simple or Pro view, sort order, the crypto activity window, chime on or off, your default risk per trade and daily loss limit. | When you change one of those settings. | Until you clear this site's data |
If you pressed OK on the privacy notice we used before Google Analytics, your browser may still hold om-privacy-notice in localStorage, but nothing reads it any more and the site deletes it the next time you visit. Google explains its own cookies in its guide to Google Analytics cookies, and your browser may keep them for less time than it says.
3. Change your analytics choice
The bar at the bottom of the page asks whether Google Analytics may set cookies, with Accept and Decline buttons of the same size, and the site works the same whichever one you press.
If you don't choose, the bar hides itself after 15 seconds on screen or once you've scrolled two-thirds of the way down a page, and pressing Escape hides it too, but hiding it is not consent and records no choice: cookies stay off, Google Analytics carries on without them and the bar comes back on your next visit. You can open cookie settings now, or use Cookie settings in the footer of any page.
We ask again after six months, or sooner if we change the question. Withdrawing is as easy as agreeing: press Decline. The page tells Google Analytics that storage is refused, deletes the Google Analytics cookies it can reach and reloads, and from then on measurement works without cookies again.
Declining doesn't remove what Google already holds from earlier visits. To have that deleted, email us before you decline with the value of your _ga cookie, which your browser shows in the site data for outsmartmoney.ai, and we'll ask Google to delete the data linked to it. Once the cookie has gone we can't match earlier visits to you, and aggregated reports can't be changed.
4. Don't count my visits
Declining stops the cookies, but not the basic measurement requests described in section 1. To object to those as well, turn this switch on. It stores one cookie, om_no_count, for a year, and from the next page you open Google Analytics does not load at all: no Google script and no measurement requests, with or without cookies. Press it again to be counted again. Clearing this site's cookies turns it off too.
If your browser sends Global Privacy Control, we treat it the same way, with no cookie needed. If you accepted cookies before, turning the switch on also removes the Google Analytics cookies this page can reach.
5. API keys, tokens and webhook addresses
A CoinStats API key, a Telegram bot token and a Discord webhook address all work like passwords for the account they belong to, so you should know exactly where they go. When you enter one, it is saved in your browser in plain text, unencrypted, in the keys listed above.
Anyone with access to this browser profile, or any browser extension allowed to read this site's pages, could read it. For that reason we would only enter them on a device you trust, and not on a shared computer.
They leave your browser only when you use the feature they belong to.
- A portfolio sync or refresh sends the CoinStats key and share token to our server in the body of a POST request (never in the web address), and the server passes them straight to CoinStats.
- A Telegram alert or test sends the bot token, chat ID and alert text to our server the same way, and it passes them to Telegram.
Our code does not save these values or write them to a log, and the responses are marked not to be cached. Discord alerts go from your browser directly to the webhook address you entered, without passing through our server. Exports from My Plan leave keys and tokens out unless you tick the box to include them.
6. Which items need your consent
Only the two Google Analytics cookies. Under the Privacy and Electronic Communications Regulations (PECR), storage that is strictly necessary to provide something you asked for doesn't need consent, and every other item above falls into that category.
- The refusal cookie, the opt-out cookie and the consent key record your answer about analytics, so the site respects it on every page.
- The theme and returns-view keys remember a setting you picked, so the site doesn't ask again on every page.
- The tool keys hold the plan, watchlist, journal and settings you chose to keep. We have no accounts and store none of it on our side, so the tools can't keep them for you any other way.
7. Third-party requests
Some things on the site load straight from another company's servers, which then receive your IP address and browser details. When we checked on 12 October 2026, the only cookies these requests set were Google Analytics ones (after you accept) and a Coinbase security cookie on the Momentum Scanner, described below. The privacy policy explains each one in more detail.
- Every public page: the Google tag from www.googletagmanager.com, which sends the measurement requests in section 1 to google-analytics.com, unless you've turned on Don't count my visits or your browser sends Global Privacy Control.
- Homepage: some news thumbnails, from the publishers' image servers.
- Crypto Bargains: coin logos from CoinGecko's image servers (coin-images.coingecko.com, and assets.coingecko.com for search thumbnails), and your Discord webhook, if you set up Discord alerts.
- Momentum Scanner: live crypto prices over WebSocket connections to Binance (data-stream.binance.vision, with stream.binance.com as a fallback) and Coinbase (advanced-trade-ws.coinbase.com), and price candles and order-book depth from data-api.binance.vision. Coinbase's network sets its own bot-protection cookie,
__cf_bm, on coinbase.com when the scanner connects. It lasts about 30 minutes, we can't read or control it, and it's covered by Coinbase's cookie policy.
Browser alerts from My Plan use your browser's own notification feature, and nothing about them leaves your device.
8. Controlling cookies and site data
You can see, block and delete cookies and stored site data, including every item above, in your browser settings. These guides explain how:
Clearing this site's data removes your cookie choice and any opt-out, brings the cookie bar back and resets the theme to follow your device. It also deletes your Crypto Bargains plan, watchlist and CoinStats details, and your Momentum Scanner journal and settings, and we hold no copy to restore them from.
If you want to keep them, use the export button in each tool first. To remove only the CoinStats details, press Disconnect on the portfolio panel.
9. Contact
Questions about cookies, storage or Google Analytics: info@outsmartmoney.ai.
On this page
Questions about cookies or storage
info@outsmartmoney.ai