Cookie notice
What we store in your browser
This notice is written from an audit of what this site actually loads — not from a template. Two analytics tools are installed, Google Analytics 4 and Microsoft Clarity, and one advertising tool, Meta Pixel. They run by default and stop when you opt out. No visitor-identification tool is installed.
Your choice
Analytics and marketing cookies are on unless you opt out. When you first arrive a notice explains this, with OK, Opt out and Customize, where you can turn each purpose off separately. Opting out is a single click, exactly like OK. Your choice is saved in your browser and kept until you change it; you can change it at any time from Cookie settings in the footer.
If your browser sends a Global Privacy Control signal we treat it as an opt-out of sharing your visit for targeted marketing, and the marketing purpose stays off: no Meta Pixel and no server-side Meta records. We do not read it as a decision about analytics, and we make no claim of certification under any particular law here — this notice describes what the site does.
Strictly necessary — always on
These are needed for sign-in, form submission, security and to remember your cookie choice. The site cannot work without them, so they are not optional.
summit_consent
Records your cookie choice, when you made it and which version of this notice it was made against. Contains no personal data.
Set by Summit Studio (first party) · Kept for 180 days
sb-…-auth-token
Keeps you signed in to the client portal and lets the server confirm your account when you load a page or submit a form. Set only if you sign in.
Set by Summit Studio, via our hosting and database provider · Kept for Until you sign out or the session expires
sidebar_state
Remembers whether a navigation panel is expanded inside signed-in screens. Interface state only.
Set by Summit Studio (first party) · Kept for 7 days
Optional purposes
Analytics — on unless you opt out
Lets us measure which pages are read and where people get stuck. Two tools are used for this purpose: Google Analytics 4 (page views and site usage) and Microsoft Clarity (aggregated interaction and scroll behaviour, with page content masked). Neither is used for advertising. Both run by default and stop when you opt out of this purpose. If we add another, this notice and its version will be updated first.
This purpose also covers two values we store ourselves, in your browser's local storage, if you arrive from one of our adverts or campaign links: summit_first_touch and summit_last_touch. They hold the campaign details that were already in the link you clicked — such as the campaign name and the advert reference — the page you landed on and the time, so that if you later create an account we can tell which campaign brought you. They contain no name, email address or identifier we set. They are kept for a maximum of 30 days, older records are deleted, and they are not written, and are removed, if you opt out of analytics.
If you opt out of analytics, campaign details in the link you clicked may still travel in the web address itself and be submitted with an account you create or a request you deliberately send us. Nothing is stored in your browser to do that.
Marketing — on unless you opt out
Would let advertising or visitor-intelligence tools recognise your visit. Meta Pixel (Facebook/Instagram) runs unless you opt out of marketing. It measures ad performance and builds ad audiences, sets the _fbp and _fbc cookies, and records page views, signup-button clicks and plan-details requests in your browser. When you send us a consultation request or book a call, we also tell Meta about it from our server (plan, campaign source, browser type and any Facebook click ID; never your name or email). Browsers sending Global Privacy Control are treated as a marketing opt-out. Opting out of marketing stops both. Summit Signal visitor intelligence is in development and no visitor-identification script is installed here.
Every optional tool must be registered in one central place in our code and can only be loaded through the consent check, so a tag cannot be added to a page and quietly bypass your choice. Optional tools never load on the client portal, admin screens or sign-in pages at all. The Cal.com booking calendar is a functional tool, not an optional one: it loads so you can book a call and may set its own cookies. Our tracking of bookings follows your choice above.
Third party: Cal.com
Cal.com (booking calendar on /book and after the contact form). It loads only when you choose to see available times, and it sets its own functional and security cookies, such as Cloudflare's bot-protection cookie. See Cal.com's privacy policy.
Changing your mind, and what we cannot do
Use Cookie settings in the footer at any time. Opting out stops further optional activity, removes the cookies and stored values we control — including the two campaign attribution values above — and removes the tool's script from the page.
Honestly stated limits: a third party cannot be made to delete data it already holds, or cookies it set on its own domain, from this page — that is done through their own controls or a request to them. When you opt out after a tool has already run, the page reloads once so nothing optional keeps running.
Other requests your browser makes
Our typefaces are served by Google Fonts, so your browser requests those font files from Google and Google receives the request. This is needed to display the site as designed and sets no cookie for us. Everything else — pages, forms and sign-in — is served from our own domain and database provider.