account.cuesoft.io: Account Site

Analytics and advertising tags: opt-in only

This site uses analytics and advertising tags on its live address, gated behind a consent banner. None of them loads, and none of their cookies is set, until you press Accept (the cookieless Cloudflare measurement described in what every site collects and the performance and error monitoring below are separate and run either way):

• What they receive: a cookie or device identifier, your IP address, the page URLs you visit on this site and the referring URL, plus basic device and browser metadata and the page-view events themselves. Google Analytics uses the IP address in passing to derive an approximate location and then discards it: the address itself is not stored, and the location is what is kept. Google Analytics keeps this for 14 months: see retention. We do not send what you type on this site to any of them.
• Page views only: this site sends no conversion events. The platforms are told which pages are viewed and nothing about what you do on them.
• Matching switched off: we turn off Meta’s automatic matching and automatic event detection and X’s automatic advanced matching, so those platforms do not read details from the page to identify you.
• If you are signed in to Google: we have Google signals switched on, so where you are signed in to a Google account that has Ads Personalisation enabled, Google may connect this visit to that account and combine it with what Google already holds there: location, search history, YouTube history and activity on sites that partner with Google. What that does, precisely: it lets us see age, gender and interest summaries, and it lets Google build advertising audiences that can reach you across your devices. It does not merge your devices together in our own reports (since February 2024 Google signals is not part of how Analytics counts users), so we do not see your phone and your laptop as one person. And Google uses the visit for its own ads personalisation as well as for our measurement. You control it on Google’s side, independently of us, at myadcenter.google.com and Google’s activity controls: switching Ads Personalisation off there stops it for every site, not just ours. Declining our banner prevents it entirely.
• Decline and none of them load. The site works identically either way.
• Withdraw any time via the site’s Cookie preferences link. Withdrawal stops the tags loading from that point on; it does not delete cookies already set (you can clear those in your browser). What happens to data already collected differs by provider: Google Analytics holds it as our processor, on our instructions, so the rights page reaches it. The exception is what Google signals feeds into Google’s own ads personalisation, which Google controls rather than us: manage that in your Google account. The four advertising platforms hold what they collected as independent businesses under their own policies: see processors and platforms.
• An opt-out preference signal (Global Privacy Control) overrides a stored opt-in for as long as your browser sends it.
• Legal basis: consent (GDPR Art. 6(1)(a)); California treatment is on the United States page.

Performance and error monitoring

This site loads Datadog’s browser monitoring. It is operational telemetry, so it does not wait for the consent banner, and declining the banner does not stop it: it measures how quickly a page loads and records the errors it hits, so that we can keep the pages working.

• What Datadog receives: the page addresses you visit and the page that referred you, load and resource timings, your clicks (which element, never anything you type), script errors and failed requests, your browser, device and operating system, and your IP address, from which it derives an approximate location. Nothing links a session to your name or email. No session is recorded as a replay, with one exception: if a page fails to render correctly, Datadog records that session as a replay so we can see what went wrong. A replay shows the page as it appeared to you, and the contents of form fields are masked.
• Cookie: one first-party session cookie, _dd_s_v2, holding a random session identifier that lapses after 15 minutes of inactivity (4 hours at most).
• Role and retention: Datadog acts as our processor, on our instructions, and keeps the data in the United States for no more than 30 days, under the safeguards on the transfers page; see processors and platforms and retention.
• Legal basis: our legitimate interest in keeping the pages working (GDPR Art. 6(1)(f)); you may object at any time.

What this site does not do

No payment data is ever requested: see the Terms of Service. Apart from the performance and error monitoring above, nothing loads before you accept, and the cookieless Cloudflare measurement described in what every site collects stays outside the consent gate because it sets no cookie.