Cookies and local storage

In the app

• Session cookies: they carry your identity after you sign in. They are written by our authentication provider, Supabase, and stop working when you sign out or the session expires.
• Security cookies: they protect form submissions and session refreshes against forgery.
• Nothing else. There is no ad pixel, no tracking script, no heat map and no third-party analytics in the app, so there is no optional cookie category and no consent banner.

On your own website: the lead-touch script

If you use our web form integration, you place a small script on your own site. It runs on your domain, under your privacy notice and your consent manager, and getting consent from your visitors is your responsibility.

• It does nothing at all until consent is granted — add data-consent="granted" to the script tag or call leadTouch.consent(true) from your consent tool.
• After consent it reads utm_* parameters and the Meta click id from the page address, and keeps the first and the last such touch plus an anonymous visit key in your site's localStorage.
• It also reads the _fbc and _fbp cookies if your own Meta pixel has set them. It does not create them and it does not set any cookie of its own.
• It records the browser's user agent and the page address without its query string.
• It never reads your form fields — no name, email or phone is collected while someone is typing.
• It makes no network request of any kind. Everything it captured is added to your form as hidden fields, and only your server decides whether to forward it to us.
• leadTouch.consent(false) erases what it stored.

Controlling this in your browser

You can block or clear cookies and local storage in your browser settings. If session cookies are blocked you cannot sign in — the app cannot work without them.

Changes

If an analytics or similar tool is ever added, this page is updated in the same release with the tool's name, purpose and retention, and a consent mechanism is put in place where one is required.

Contact

Please contact the business that gave you access to this service.