FedFinder: Privacy Policy

1. Who we are

FedFinder (“FedFinder,” “we,” “us,” or “our”) is a commercial federal-contract-intelligence platform. FedFinder is a private commercial service and is not a U.S. government website; we are not affiliated with, or endorsed by, the U.S. General Services Administration, SAM.gov, or any government agency. This policy covers our public website at fedfinder.net and www.fedfinder.net (the “Site”) and the FedFinder application available to subscribers (the “Service”).

2. Information we collect

Account information. When you create an account or start a trial we collect your name, work email address, organization details, and a password (stored only as a salted hash: we never store plaintext passwords).
Billing information. Payments are processed by Stripe. Your card number never touches our servers; we retain only subscription status, plan, invoices, and the billing identifiers Stripe provides us.
Content you provide. Saved searches, pipeline targets, notes, and similar content you create inside the Service, stored in your organization's isolated tenant.
Usage and device data. Server logs (IP address, timestamps, requested pages, browser type) for security and operations, and website analytics data described in Section 3.

3. Website analytics and tracking

Our public website pages use three analytics and advertising-measurement services: Microsoft Clarity, Google Analytics, and Microsoft Advertising (UET). These run on marketing pages (such as the home page, pricing, blog, sign-in, and sign-up pages); we do not run session-replay or advertising analytics inside the authenticated application, the billing area, or administrative consoles.

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Clarity records how pages render and how visitors interact with them, including mouse movement, clicks, scrolls, and touch events, and aggregates them into heatmaps and behavioral metrics (for example, “rage clicks” and dead clicks). Text you type into input fields is masked by Clarity and is not captured. Clarity data is processed by Microsoft and stored on Microsoft Azure.

Google Analytics

The Site uses Google Analytics 4, a web analytics service provided by Google LLC (“Google”). Google Analytics uses first-party cookies (including the cookies named _ga and _ga_<container-id>) to distinguish visitors and sessions and to collect information about how the Site is used, such as pages visited, time on page, approximate geographic location (city/region, derived transiently from your IP address), device and browser information, and how you arrived at the Site. Google Analytics does not log or store IP addresses. To learn how Google uses data collected from sites that use its services, visit How Google uses information from sites or apps that use our services. You can opt out of Google Analytics measurement by installing the Google Analytics Opt-out Browser Add-on.

Microsoft Advertising (UET)

The Site uses the Microsoft Advertising Universal Event Tracking (UET) tag, provided by Microsoft, to measure the performance of our Microsoft/Bing advertising campaigns and to understand how visitors move through the Site after clicking one of our ads. The UET tag loads on marketing pages and sets first- and third-party cookies (see the cookie table below) to attribute site visits and conversions back to an ad interaction. When you create an account, we pass your email address to the UET tag in hashed/matched form so that a completed signup can be counted as a conversion for the ad that brought you here (“enhanced conversions”); this identifier is used only for advertising measurement and is processed by Microsoft under the Microsoft Privacy Statement. UET does not run inside the authenticated application.

4. Cookies

When you sign in to the Service, FedFinder sets an essential, secure session cookie that keeps you signed in; it is strictly necessary and is not used for tracking. The analytics services above set the following cookies on the public Site:

Cookie	Service	Party	Purpose	Duration
`_ga`	Google Analytics	First-party	Distinguishes visitors (random client ID).	2 years
`_ga_<id>`	Google Analytics	First-party	Maintains session state for this site.	2 years
`_clck`	Microsoft Clarity	First-party	Persists the Clarity user ID for this site so return visits are recognized.	1 year
`_clsk`	Microsoft Clarity	First-party	Connects multiple page views into a single session recording.	1 day
`CLID`	Microsoft Clarity	Third-party	Identifies the first time Clarity saw this browser on any site using Clarity.	1 year
`ANONCHK`	Microsoft Clarity	Third-party	Indicates whether MUID is transferred to an advertising cookie. Clarity does not use it, so it is always 0.	10 minutes
`MR`	Microsoft Clarity	Third-party	Indicates whether to refresh MUID.	7 days
`MUID`	Microsoft	Third-party	Identifies unique browsers visiting Microsoft sites; used for advertising, site analytics, and operational purposes (shared by Clarity and Microsoft Advertising/UET).	~1 year
`SM`	Microsoft	Third-party	Synchronizes MUID across Microsoft domains.	Session
`_uetsid`	Microsoft Advertising (UET)	First-party	Identifies a single browsing session for ad-conversion measurement.	1 day
`_uetvid`	Microsoft Advertising (UET)	First-party	Identifies a visitor across sessions for ad-conversion measurement.	16 months

You can block or delete cookies at any time through your browser settings; if cookies are disabled, Clarity sets no cookies.

5. How we use information

To provide, operate, and secure the Site and Service, including authentication, tenant isolation, and audit logging.
To process subscriptions, payments, and invoices.
To understand how visitors use the Site so we can improve content, navigation, and product design (the analytics in Section 3).
To detect and prevent fraud, abuse, and security incidents.
To communicate with you about your account, billing, and service changes.

6. How we share information

We do not sell your personal information. We share it only with service providers acting on our behalf:

Stripe: payment processing and subscription billing.
Microsoft: website analytics (Clarity) and advertising-conversion measurement (Microsoft Advertising / UET) as described above.
Google: website analytics (Google Analytics) as described above.
Cloudflare: content delivery, DNS, and security for the Site.

We may also disclose information when required by law or to protect the rights, safety, or property of FedFinder, our customers, or others. The federal contracting intelligence displayed inside the Service is sourced from public government records and is not personal information collected from you.

7. Data retention

Account and tenant data are retained for the life of your subscription and deleted or anonymized after account closure, except where we must keep records (such as invoices) for legal, tax, or accounting purposes. Server and audit logs are retained on a rolling basis. Clarity session recordings are retained by Microsoft for a limited period (approximately 30 days for replay, with associated data deleted within 13 months); Google Analytics event data is retained per our Analytics configuration; Microsoft Advertising (UET) retains conversion-measurement data per Microsoft's own retention schedule.

8. Security

Credentials and sessions are protected with modern, hardened authentication; data is encrypted in transit and at rest; tenants are strictly isolated at the data layer; and sensitive actions are audit-logged. Read more on our Security page.

9. Your choices and rights

Google Analytics opt-out: install the Google Analytics Opt-out Browser Add-on.
Microsoft Clarity opt-out: opt out of Microsoft telemetry by selecting “Microsoft” at the Digital Advertising Alliance opt-out page; the Protect My Choices browser extension preserves that preference. Clarity also honors the Global Privacy Control (GPC) browser signal.
Microsoft Advertising (UET) opt-out: the same “Microsoft” selection at the Digital Advertising Alliance opt-out page also opts you out of Microsoft Advertising conversion tracking.
Browser controls: block or delete cookies in your browser settings at any time.
Access, correction, deletion: email us at [email protected] to request a copy of, correction to, or deletion of your personal information. We will respond consistent with applicable law.

10. International visitors

FedFinder is operated from the United States and information is processed in the United States. If you visit from the European Economic Area, the United Kingdom, or Switzerland, analytics cookies are subject to the consent requirements that apply in those regions, and Google Analytics drops IP addresses from those regions before logging data.

11. Children

The Site and Service are business tools intended for adults. They are not directed to children under 16, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy as the Service evolves. We will post the updated policy here with a new effective date, and for material changes we will notify account holders by email or in-app notice.

13. Contact

Questions about privacy or this policy: [email protected].

Read our Terms of Service →