Privacy Policy
This policy describes what this website itself does with technical data. It is the English source text. It does not describe Google’s own settings beyond what this site’s implementation establishes.
Who this site is
The public service is FxConverter / FxConverter Systems, Rosengarten, 8037 Zürich, Switzerland. The public email address is contact@fxconverter.ch.
Google Analytics and Google Tag Manager
FXConverter uses Google Analytics to obtain information about how the website is used and Google Tag Manager to manage website tags.
Google Analytics is loaded directly. There is no consent banner and no control on this site that blocks those scripts from loading.
FXConverter does not intentionally configure Google Analytics to send names, email addresses, account IDs, session IDs, or other direct user identifiers. The page address can still identify what you opened. A currency pair is part of that address. If you submit the converter, the amount can be part of the page address as well.
When this policy was written, the published Google Tag Manager container contained no tags. The container is still loaded. Tags inside it are managed by Google Tag Manager and can change without a change to the currency calculator.
What Google then does with a request — including any cookies Google sets, how long Google keeps data, enhanced measurement, Google signals, advertising features, and IP handling — is Google’s processing under Google’s own services and settings. This site does not publish those Google-side details, because they are not set in the FXConverter configuration.
Application cookies
FXConverter uses more than one application cookie. These are separate from any cookies Google may set.
PHPSESSID
PHPSESSID is the PHP session cookie. Its value is an opaque session identifier. It does not itself contain your profile. The cookie lifetime is a browser session, so the browser drops it when the browsing session ends. On HTTPS it is marked Secure. It is HttpOnly. SameSite is Lax.
On the server, a session is treated as idle after 8 hours without activity. That idle lifetime applies to sessions in general. It is not a 30-minute anonymous-only rule. Some anonymous currency-pair pages can be served without starting a session when the browser does not already send PHPSESSID. Other public pages start a session.
Keeping session data on the server does not, by itself, make that data anonymous or place it outside privacy law.
fsc16_cw
fsc16_cw stores a currency watch list in the browser. The value is a list of currency codes, not an account identifier. It is set for one year (Max-Age 31536000). SameSite is Lax. On HTTPS it is marked Secure. It is not HttpOnly, because the page script reads and writes it.
Accounts
If you create an account, FXConverter stores the account fields that registration and profile forms collect, such as name, email address, and a password hash, and any contact or address details you choose to save. Those records are for the account. They are not added to the Google Analytics configuration described above.
Contact
The contact form collects your name, email address, an optional phone number, a subject, and a message. The message is sent to the department you choose. FXConverter does not store that message in its database. The PHP session is used for the form’s security check and for the arithmetic anti-spam question.
Questions about this policy can be sent to <a href="mailto:contact@fxconverter.ch">contact@fxconverter.ch</a>.