Cookie Policy

We store rgv_cookie_consent in local storage to remember whether you allowed analytics, the policy version, when the choice changed, and a random consent identifier. This prevents the panel from asking on every page.

A matching pseudonymous consent event is stored in Supabase for accountability. It contains the random identifier, analytics choice, action, policy version, and server timestamp, without intentionally including your form data, name, email, or raw IP address.

Google Analytics 4 loads with analytics storage denied by default. Before you choose, or if you reject or withdraw consent, Google may receive limited cookieless pings. These may include consent status, page activity, timestamp, browser-supplied user agent, referrer, and a random value generated for that page load. They do not use Google Analytics cookies or persistent Analytics device identifiers.

Google may use these limited signals for aggregate or modeled reporting. If you accept, Google Analytics may set first-party analytics cookies and collect fuller visit and interaction information. Advertising storage, ad user data, and ad personalization remain denied. If you later withdraw consent, the site attempts to remove Google Analytics cookies created on this domain.

Lovable hosts this website and may process limited technical request data and operational telemetry to deliver, secure, diagnose, and measure the performance of the hosted service. This platform-level processing is separate from the optional Google Analytics setting in our cookie panel.

To protect the consent audit endpoint from automated abuse, our server checks that submissions come from this website and applies short-term request limits. It uses one-way security tokens derived from request information and the random consent identifier. Network-based tokens rotate daily, and rate-limit rows are removed after two days. Raw network addresses are not stored in the consent audit or rate-limit tables. Consent audit events are retained for up to 24 months and then deleted on a daily rolling schedule. These controls are not used for advertising or analytics.