Skip to main content
Account Bag (0)
Legal

Cookie Policy.

Effective July 21, 2026. This page describes the cookies and similar technologies Get Aplomb (“Aplomb,” “we,” or “us”) uses on getaplomb.com, why we use them, and how you can refuse or remove them. For broader information about personal data, see our Privacy Policy.

What is a cookie?

A cookie is a small text file that a website asks your browser to store on your device. Cookies remember preferences (your cart, that you have signed in) and let us understand how the site is used. Some “cookies” on modern sites are actually localStorage entries or pixel tags rather than literal cookies; this policy uses the word loosely to cover all of them.

Cookies we use

We group cookies and similar technologies into three categories.

1. Strictly necessary (cannot be turned off)

These keep the site running. Without them the cart, checkout, and your account would not work.

  • Cart state, your in-progress order, kept in your browser's localStorage. Cleared when you complete checkout or manually empty the cart.
  • Stripe, payment processor cookies used to detect fraud and process card payments. Set when you reach the checkout page. See Stripe's cookie notice.
  • Cloudflare Turnstile, a no-cookie CAPTCHA that protects checkout from automated abuse. Loads only on the checkout page.
  • Supabase auth, a session token set after you click a magic-link to sign into your account. Removed when you sign out or after it expires.
  • Sentry, error monitoring. Loads a minimal script that reports JavaScript exceptions back to us so we can fix them. Sentry does not set tracking cookies in our configuration.
  • Cookie-consent state, a versioned localStorage entry (aplomb-cookie-consent-2026-07-21) that records whether you accepted the current optional-tools notice, so we do not show you the banner on every visit. We require a fresh choice when the notice materially expands.
  • First-party campaign attribution, the first valid campaign source and campaign name in a landing URL, kept only in sessionStorage for the current browser tab and copied to the order record if you check out. We use it to compare campaign spend with paid orders. It is not sent to Google, does not contain a Google click ID, and disappears from the browser when that tab closes.

2. Analytics, privacy-friendly, always on

We use Plausible Analytics without cookies or persistent identifiers to measure aggregate page views and controlled product-page interactions: scroll milestones; stable section reach; capped 10-second active-tab section-attention intervals; gallery, purchase-option, call-to-action, accordion, and video actions; and a best-effort last-observed lifecycle checkpoint. Event properties are limited to authored slugs, bounded ordinals, milestones, and coarse action categories. We do not send authored page copy, form or quiz values, query strings, pointer coordinates, names, contact details, order details, or payment data through this path. Plausible does not fingerprint visitors in this configuration. See Plausible's data policy.

3. Optional analytics & marketing (your consent required)

If you click “Accept all” on the cookie banner, we may load or use the following. If you click “Essential only,” we do not load or use any of them.

  • Meta Pixel (Facebook / Instagram), measures conversions from Meta-platform ads and lets us show ads to people who have visited the site. Sets first- and third-party cookies. Meta privacy policy.
  • Microsoft Clarity, anonymous session replay and heatmaps that help us understand where users click, scroll, and get stuck. Sets cookies for session identification. Clarity terms.
  • Server-side Google Analytics purchase measurement, used only after Stripe confirms a checkout made under the current “Accept all” choice as paid. Our server sends an order-scoped synthetic client identifier, an order-scoped transaction identifier, the amount charged, USD currency, the event time, and one generic “APLOMB order” marker. We do not send automatic subscription-renewal charges. This measurement does not install a Google tag or Google cookie in your browser, and it does not send Google your name, email, phone, address, card data, product or SKU, symptom or quiz response, page or landing-page history, browser or device identifier, Google click ID, advertising session, or user ID. Ad-user-data use and ads personalization are denied. The property’s user- and event-level retention is two months. Google Analytics data safeguards.
  • First-party order-linked product behavior, a coarse same-tab summary of the controlled product-page interactions described above. Only after the current “Accept all” choice do we keep this summary in sessionStorage and, if you check out from that product page, copy it into our Supabase order record. The summary contains only the exact page path, product/page type, deepest scroll milestone, reached-section slugs, capped attention seconds by section, CTA placements, gallery slides/methods, video milestones, and last stable section/action. It does not contain authored copy, form or quiz values, query strings, coordinates, or contact/payment data. Because it is stored beside an order, we treat it as personal data. It is not added to Stripe metadata or sent to Meta, Google Analytics, or Clarity as purchase metadata.

Meta Pixel and Microsoft Clarity load in your browser only if you click “Accept all” on the cookie banner. The server-side Google Analytics purchase event and first-party order-linked product-behavior summary are likewise used only when that current optional consent is present at checkout. Choosing “Essential only,” turning on Global Privacy Control, having Do Not Track enabled, or being marked as an internal user prevents all four optional uses. These choices never prevent checkout. How purchase data may additionally be shared with Meta for advertising measurement, and how to opt out, is described under Do Not Sell or Share My Personal Information below.

How to refuse or remove cookies

From this banner: when you arrive, the cookie banner gives you “Accept all” or “Essential only.” You can change your mind at any time by clearing your browser's localStorage for getaplomb.com (the banner will re-appear on next visit). The choice present when you submit checkout governs optional measurement and order-linked behavior for that checkout; a later change governs later checkouts and cannot retract an event already sent or an order record already created. To request deletion of a past Google Analytics purchase event or an order-linked behavior summary, email [email protected] with the order date and transaction identifier, if available.

From your browser: every modern browser lets you block or delete cookies in Settings. For details: Chrome, Safari, Firefox, Edge. Blocking strictly-necessary cookies may break checkout.

Do Not Track: We honor browser-level Do Not Track signals. When DNT is on, optional analytics & marketing technologies will not load even if you previously accepted them.

Do Not Sell or Share My Personal Information (California)

Get Aplomb does not sell personal information for money. When you have opted in, you clicked “Accept all” and have no Global Privacy Control or Do Not Track signal, we share limited information with Meta for advertising measurement: a one-way hashed email and the products in a completed order. This is sent both from your browser (the Meta Pixel) and from our server (the Meta Conversions API). California law treats this as a “share” for cross-context behavioral advertising. If you opt out by any method below, both the browser and the server-side sharing stop:

  • click “Essential only” on the cookie banner (no browser or server-side sharing occurs); or
  • email [email protected] with the subject line “CCPA opt-out”; or
  • turn on Global Privacy Control (GPC) in a supported browser. We honor GPC site-wide.

Changes

If we add or remove a tool, we update this page and bump the effective date. If a material change expands optional processing, we require a fresh choice before using it for you. We may also communicate significant changes by email.

Contact

Questions: [email protected].