Banking processes account and banking data to provide the service. Bank authorization is handled by your bank and our banking provider.

Website analytics: Cloudflare measures aggregate page loads without our visitor identifiers. Public-site requests from identifiable crawlers are classified using user-agent claims, available verified identity or published provider IP ranges. These observations include sanitized paths, status, timing, country and network ASN; no raw IP address is retained by our analytics collector.

Optional analytics: Only after you accept, Banking uses random first-party visitor and session identifiers to connect page views, marked conversion and outbound clicks, scroll depth, and active foreground time across bankmcp.app and app.bankmcp.app. We record browser/OS versions, device class, language, viewport, acquisition source and allowlisted campaign fields, plus network-derived country, region, city, timezone and network organization. Location is approximate network location, not your precise physical location. Signed-in portal milestones can be associated with your account. We do not record session replay, banking values, form content, passwords, arbitrary page text, raw query strings, persistent raw IPs or fingerprint-derived identifiers.

The visitor identifier expires after a fixed 90 days; sessions end after 30 minutes of inactivity. Detailed analytics are retained for up to 90 days; anonymous daily totals for up to one year. Analytics is optional and refusing does not affect the service. Accept or reject in the analytics notice, or change your choice through Analytics preferences in the footer. Withdrawal stops optional collection, clears analytics identifiers and removes the retained journeys associated with the current browser identifier. We honor Global Privacy Control as an opt-out. Your signed analytics preference is retained for six months.