20+ trackers on a financial platform. DND override in the policy. Visit recording active.
Company name withheld. Sector context preserved. Identifiers removed.
Executive summary
We visited an investment and trading platform. Over 20 trackers loaded — including visit recording, identity matching tools, and more than a dozen advertising networks. The privacy policy explicitly reserves the right to call or text users even if they are registered on DND.
Evidence snapshot
What trackers we found
Microsoft Clarity recorded screen behavior. Identity resolution tools that can link anonymous browsing to real people were present. Criteo, Meta Pixel, Google Ads, and more than a dozen other advertising trackers loaded. Marketing automation and campaign attribution tools were also active.
What the privacy policy says
The policy reserves the right to call or text users even if they are registered on DND. It shares data with unnamed third-party service providers for advertising. Policy changes can happen without telling you. The user is "liable for data privacy violations from your misuse of the platform." The company is "not responsible for damages from unauthorized access or loss of your personal data."
What the product flow showed
On pages where users research stocks, explore mutual funds, and manage investments, visit recording and identity matching were active alongside advertising networks. Which stocks you look at, how much money you consider investing — all of this was visible to outside companies.
Why this matters
Your financial browsing reveals what you want to invest in, how much, and when. When a financial platform figures out who you are, records your visits, and keeps the right to call you despite DND — the gap between what they promise and what they do is wide. Evidence exists. Company name withheld.