Skip to main content
Find an advisor

Privacy

Read this page as a data sheet for Stratum Finance. It lists the inputs, the outputs, the limits and the known constraints of the request form, the calculators and the advisor sign-up. The one output that matters is a request sent to three licensed advisors at most, who may pay for it.

  1. Inputs: form fields, cookie choice, privacy signal
  2. Output: one request, three advisors at most
  3. Calculator values stay in your browser
  4. Not rated for users under 16

Inputs, outputs, limits

  1. Data in: the form

    Four steps: situation, finances, goals, contact. Required: full name, email, phone. Also asked: location (state or region), help needed, net worth range, income range, investable-assets range, main goal, timeline, current advisor yes or no, contact preference, consent checkbox. No exact balances are requested.

  2. Data in: passive

    Cloudflare fronts all traffic and sees each request and its IP address. Calculators execute in your browser; their inputs are not sent to us or tied to an identity, so stress-test them as you like.

  3. Data out: the match

    Sequence: a member of our team reviews the request and makes contact to confirm the need; an advisor whose specialty is this site's subject area is then matched to you; the request goes to three advisors at most, and advisors may pay for the introduction. Pre-purchase, an advisor gets an anonymous summary (region, ranges, need). Name and contact details are released after purchase, not before.

  4. Instrumentation

    Before consent: Google Analytics in denied, cookieless mode; no ads and no other analytics. After consent: Google AdSense, the Meta Pixel and Google Analytics (advertising and social measurement, which may pass visit information to those companies), plus Yandex Metrica (page-visit counts so Yandex Search can find the pages). Session recording: off. Metrica with Global Privacy Control on: never loads.

  5. Override signals

    Global Privacy Control: honoured as an opt-out of sale or sharing. Records for a request submitted with the signal on carry a do-not-sell flag. Manual controls are on the Do not sell or share my personal information page. Choices are stored in the browser only, so a new browser starts at defaults.

  6. Storage, retention, safeguards

    Storage: our cloud infrastructure. Notification: the request is emailed to us through an email-delivery provider. Retention: kept while needed to make the match or to meet legal record-keeping needs. Form controls: rate limiting, a hidden honeypot field, and Cloudflare Turnstile as the bot check.

  7. Change requests

    Route: the contact page. Available: access to what is held, correction, deletion, and stopping sale or sharing. Basis: the CCPA and CPRA for California residents; other states' residents may have equivalents. Deletion proceeds unless the law requires the record to stay. Non-discrimination: using a right does not change how you are treated.

  8. Known constraints

    Not for children, and no data is knowingly taken from users under 16. Declining cookies keeps the consent-based tools from loading. Calculator output is only as good as the assumptions stated beside it.

  9. Advisor sign-up data

    Input: name; work email; CRD number. Sign-up check: the CRD must exist in the SEC's public IAPD record with a current registration, and the name must match. Personal email or reported disclosure events: routed to manual review. Stored: those fields and the check result. Billing: a payment provider handles cards; the site stores no card numbers.