Cookie Policy
We keep optional analytics off until you choose to allow it. This page explains each category and how to change your choice.
Effective and last updated: September 3, 2026
What cookies and browser storage are
Cookies are small data files stored by a website in your browser. Websites can also use local storage to remember a setting. Some storage supports a requested feature; other storage helps measure how a website is used.
Necessary preference storage
Always activeWe store rgv_cookie_consent in local storage to remember whether you allowed analytics, the policy version, when the choice changed, and a random consent identifier. This prevents the panel from asking on every page.
A matching pseudonymous consent event is stored in Supabase for accountability. It contains the random identifier, analytics choice, action, policy version, and server timestamp, without intentionally including your form data, name, email, or raw IP address.
Google Analytics
Optional — off by defaultIf you accept analytics, Google Analytics 4 may set first-party analytics cookies and collect information about visits and interactions so we can understand site performance and improve pages. Our setup keeps advertising storage, ad user data, and ad personalization denied.
If you reject or later withdraw consent, we update Google Consent Mode, disable measurement, and attempt to remove Google Analytics cookies created on this domain.
Hosting and operational telemetry
Platform-level processingLovable hosts this website and may process limited technical request data and operational telemetry to deliver, secure, diagnose, and measure the performance of the hosted service. This platform-level processing is separate from the optional Google Analytics setting in our cookie panel.
Consent audit security
Security onlyTo protect the consent audit endpoint from automated abuse, our server checks that submissions come from this website and applies short-term request limits. It uses one-way security tokens derived from request information and the random consent identifier. Network-based tokens rotate daily, and rate-limit rows are removed after two days. Raw network addresses are not stored in the consent audit or rate-limit tables. Consent audit events are retained for up to 24 months and then deleted on a daily rolling schedule. These controls are not used for advertising or analytics.
Manage your choice
You can change your analytics preference at any time. You can also delete cookies and local storage through your browser settings; the preference panel will appear again on your next visit.
Questions
For questions about cookies or personal information, email james@rgv-websites.com. You can also read our Privacy Policy.
