Privacy.
Last updated 3 July 2026
The short version
Feefee is a comparison tool. We don’t sell your data. We don’t set marketing cookies. The fees and rates calculation runs in your browser — your holdings never leave your device unless you choose to email them to us.
If you sign up for the monthly digest, your email is sent to our email service provider (Resend) for a double-opt-in confirmation and is then held there only if you click the confirmation link in the email we send you.
Who we are (data controller)
Feefee is operated by Feefee Money Ltd, a company registered in England & Wales.
Feefee is registered with the UK Information Commissioner’s Office (ICO) as a data controller, registration reference ZC138289; the registration appears on the public ICO register. For data-protection questions, write to woof@feefee.money.
What data we hold and why
Holdings you enter (sniff inputs)
Stored in your browser’s local storage only. Never transmitted to Feefee servers. Clearing your browser data wipes it.
Email address (monthly digest)
When you submit the signup form, your email address is sent over HTTPS to our endpoint and forwarded to Resend (the email service provider) where it is stored as an unconfirmedcontact. We then send you a single confirmation email; the address remains in the “unconfirmed” state and will receive nothing else unless you click the confirmation link within 7 days. If you do not confirm, the unconfirmed contact remains in Resend per their audience retention; you can request deletion at any time via woof@feefee.money.
Lawful basis: your explicit consent (UK GDPR Article 6(1)(a)). You can withdraw consent at any time, no account required — email woof@feefee.money and we’ll remove your address. Once digest emails start sending, every digest will also carry an unsubscribe link.
Frequency. At signup you pick monthly (default) or quarterly. No digest has been sent yet — the first goes out after launch. From the first send, every digest email will include an unsubscribe link and a link to switch between monthly and quarterly without unsubscribing entirely. Until then, you can unsubscribe or change cadence at any time by emailing woof@feefee.money.
Affiliate links in the digest.The digest may contain affiliate links — links to third-party providers where Feefee earns a referral fee if you sign up. Every individual affiliate link is tagged inline (matching the “Affiliate” badge we use on the website) so you can tell which is which. Affiliate relationships never determine which products are featured — editorial picks are picks first, affiliate is a funding mechanism second. Full breakdown at /about.
Affiliate click-tracking
When you click through to a provider, the destination (Trading 212, etc.) sets its own cookies and may share with us an aggregated commission report. We never receive your individual account details from the provider.
Server logs
Our hosting provider (Vercel) logs IP addresses and request paths for 30 days for security and abuse prevention (lawful basis: legitimate interest).
Cookies
Feefee itself sets no marketing cookies and no analytics cookies. We use only essential storage required for the tool to work (your holdings in local storage; an opt-in flag if you dismiss banners). Third-party affiliate links go to providers who set their own cookies — those are governed by the destination’s privacy policy, not ours.
What we measure
No tracking of you — two aggregate counters only. There is no Google Analytics, Mixpanel, Hotjar, Facebook Pixel, Segment, or any third-party tracker. The comparison engine runs entirely in your browser; your balances and holdings never leave your device, and we hold no record of them.
Two anonymous, aggregate measurements exist. First: when you click out to a provider’s site, we count the click — which provider, which product, which day, and which page the link was on. Nothing about who clicked: no account, no cookie, no device identifier, no IP retention in the counter. Second: we may run Cloudflare Web Analytics, a cookieless page-view counter that reports aggregate visits and referrers without profiling individual visitors. Neither measurement can be traced back to you.
How long we keep email addresses
- Until you unsubscribe — email woof@feefee.money at any time, or use the unsubscribe link in any digest email once digests start sending.
- We auto-purge addresses that haven’t opened any email in 24 months.
- We may keep an unsubscribe suppression list indefinitely so we don’t accidentally re-add you. This is required by best practice and contains only the hash of your email.
Who else processes your data
- Vercel — hosting (US-based, Standard Contractual Clauses for transfers).
- Resend — email service provider for the monthly digest (US-based with EU region option).
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or port your data, and to object to processing. To exercise any of these, email woof@feefee.money with the address you signed up with. We may need to confirm your identity first — normally just confirming the email address the data is held against — so we never disclose data to the wrong person.
We respond within one month, as UK GDPR requires. For complex or repeated requests we may extend this by up to two further months; if we do, we’ll tell you within the first month and explain why. There’s no fee. The only personal data we hold is the email address you gave for the digest, so most requests are quick to action.
If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
International transfers
Vercel and Resend are US-based. Where personal data leaves the UK (limited to your email address and aggregated server logs), we rely on the UK’s adequacy regulations and Standard Contractual Clauses (SCCs). Resend offers an EU-region option we may move to in future. We do not transfer personal data outside the UK / EEA / US.
Security
We protect your data with industry-standard measures:
- HTTPS-only — all traffic encrypted in transit (TLS 1.3).
- Strict Content Security Policy headers — limits what code can run in your browser.
- Holdings data sanitised on read — protects against prototype-pollution and stale-schema attacks.
- Email submissions rate-limited per IP (sliding window, 5 attempts per 15 minutes) plus a hidden honeypot field that bots fill in but humans don’t see.
- No payment data is held — there is no payment flow.
Children
Feefee is aimed at adults (18+) managing UK personal finances. We don’t knowingly collect data from anyone under 18. If you’re a parent and believe your child has signed up, email woof@feefee.moneyand we’ll delete the record.
Automated decisions
The Feefee comparison engine produces illustrative scenarios from the data you enter. It does NOT make automated decisions that have a legal or similarly significant effect on you within the meaning of UK GDPR Article 22 — it doesn’t accept, reject, or score anyone for any product. The output is reference information; the decision to act on it is always yours.
Marketing communications
The only marketing email Feefee sends is the monthly digest you explicitly opted in to. We don’t share your email with advertisers, partners, or third parties. We don’t do list-rental or co-registration. To unsubscribe, email woof@feefee.money and we’ll remove your address promptly. Once digests start sending, every digest email will also carry an unsubscribe link in the footer.
Changes
We’ll update this page when anything material changes and bump the date at the top. If we add a new processor or change the lawful basis for anything, current subscribers will get a heads-up email.
Back to home.
