Privacy

Who we are. Munkey Finance, at munkeyfinance.com: lectures, notes, practice questions and a community for people preparing for FRM. This page says what we keep about you, why, and how to have it removed.

If you only signed up for early bird. We keep the email and phone number you gave us, when you pressed the button, which page you were on, the link that brought you if it named one (for example a post on Instagram), and the one line your browser sends to name itself. We use them to tell you when early bird opens and to count sign-ups. Nothing else.

If you sign up. Signing up is verifying your email, by a link we send or through Google. Once you have, we keep an account for that email with no access yet: you can sign in, but only to finish signing up. It keeps your email, when you signed in, and which device you used, as any account does. If we do not let you in, the account stays without access; write to hello@munkeyfinance.com to have it closed.

If you apply to join. We keep what you put on the form: your email, your phone number, your name, your LinkedIn if you gave it, the line you wrote, a hash of your address for an hour's limit, and our decision with the line we wrote back. An application we decline is kept, so we do not ask you twice.

If you apply as a mentor or a community member. We also keep your name as it appears with GARP and the year you cleared; we use them, with your LinkedIn, to check with GARP that you cleared, and access may be withdrawn if they do not check out. Applications made before 29 September 2026 may also carry a GARP ID, a GARP email, a result and uploaded files; those sit in our storage and only we open them.

If you enter as a recruiter. Your company email and company name; the domain of your address, which we register by hand and keep as registered, asked-for or declined, with the address that asked; and, from before 30 September 2026, any entry code we sent you, kept as a hash. A recruiter signs up only with that company email, verified by a link, and on a registered domain enters at once, without a review. Everything we send you goes to that address.

If you have an account. Your email is your account. We keep:

What other members see. Any member may view profiles and send messages, but only as far as the other member allows: each of us chooses in Settings who can reach us, and on our profile whether progress, time and the rest are visible. Your alias, your profile, your progress and your time on the site, plus anything you post. Not your email, legal name or GARP ID. On your profile you can switch progress, time, saved items and community counts to "Hidden from members", and then other members do not see them. Mentors also see a list of students with those figures — practice, lectures, time on the site, mocks — to find who needs help; a student who has hidden their stats is not on it.

Signing in. There are no passwords. We email you a link, or you sign in with Google, easiest. When you ask for a link we keep, for fifteen minutes, a hash of it, your email, the time, your IP address and your browser's name line. When you use Google, Google tells us your email and a Google account number; we keep those. Google's own use of that sign-in is under Google's privacy policy.

Your devices. A member may use three devices — a laptop, a phone, an iPad — and one is signed in at a time. To recognise a device we keep a hash of a cookie in that browser and a hash of some things about the machine: its operating system, screen size, processor cores, memory, graphics name, time zone and whether it has touch. We keep only the hash, and we use it for nothing but recognising your device. You can name, change and remove your devices in Settings.

Cookies. Two, both ours: one that keeps you signed in for thirty days, one that names your device for a year. No advertising, no tracking across other sites. A few settings, such as dark mode, stay in your browser only.

Who else touches your data. Cloudflare hosts the site, the database (region: Asia-Pacific) and your files. Resend sends the sign-in emails (Tokyo region). Google, if you sign in with Google. The notes canvas loads a small mark from tldraw's server. LiveKit carries the sound and video of lives, of the study room and of one-on-one sessions while they run. GIFs you pick come from GIPHY: we send it your search words, never who you are, but the GIFs load from GIPHY's servers, so it sees your device's address as any website would. Cloudflare Web Analytics counts visits to our pages — which page, where the visit came from, the kind of device and country — with no cookies and nothing that names you. Nobody else, and we never sell or share it.

Why we may keep it. To give you what you signed up for (the account, the community, your progress), and, for the early-bird message and for time on the site, because you agreed by signing up. You can turn time on the site to "Only you"; we still count it for your own profile.

How long. Early-bird details: until we have told you, or until we decide not to go ahead, then deleted. An account: for as long as it is open, and 360 days after it closes, then deleted. Sign-in links: fifteen minutes. Deleted doubts and answers are hidden at once and removed with the account.

Your rights. To see everything we hold about you, to have it corrected, to have a copy, and to have it deleted. Write to hello@munkeyfinance.com from the email on your account and we do it within thirty days. Deleting your account deletes your posts too; credits are not paid out in cash.

Where the law is. India's Digital Personal Data Protection Act 2023 for visitors in India; the UK GDPR and the EU GDPR for visitors there. If you think we have got something wrong, tell us first; you may also complain to your local data-protection authority.

Changes. When this page changes we say so here, with the date. This version: 11 October 2026 (visits counted by Cloudflare Web Analytics; the link that brought an early-bird sign-up). Before that: 10 October 2026 (your phone number on your account; refusals by the community policy counted; an answer's role). Before that: 8 October 2026 (the study room's cameras and microphones). Before that: 5 October 2026 (the tag on a Discussion post). Before that: 28 September 2026 (files, then reports, then feedback and mentor review, comments, how lectures are watched, the shop, jobs and emailing a recruiter — all added the same day).

Trademarks. GARP® does not endorse, promote, review, or warrant the accuracy of the products or services offered by Munkey Finance of FRM®-related information, nor does it endorse any pass rates claimed by the provider. Further, GARP® is not responsible for any fees or costs paid by the user to Munkey Finance. FRM®, GARP® and Global Association of Risk Professionals™ are trademarks owned by the Global Association of Risk Professionals, Inc.

See also our terms and the licences of the software we use.

← back