Cookie Policy

What These Technologies Are

Cookies are small text files stored on your device that help websites function and provide information to site owners. “Local storage” is similar browser storage we use to remember your work. We also use comparable technologies such as analytics scripts and embedded social content.

What We Use

• Essential: when you sign in, our authentication provider (Supabase) stores a secure session token so you stay logged in. The 3D builder uses your browser's local storage to remember a design you're working on (including for guests, so it can be claimed if you create an account) and whether you've seen the intro.
• Analytics: Google Analytics, Vercel Web Analytics and Umami help us understand how visitors use the site so we can improve it. Google Analytics sets its own cookies (such as _ga) to tell visits apart. Vercel Web Analytics counts page views and Vercel Speed Insights measures how fast pages load; neither sets cookies. Umami, hosted by our web contractor and served from this site, counts page views and site events without cookies, and we never send it your name, email address or phone number. Google Analytics and the Google Ads tag do not run on our staff dashboard or on customer account pages.
• Bot protection: when you start filling in a form or use the chat assistant, we load Cloudflare Turnstile from challenges.cloudflare.com. It runs in the background and reads signals from your browser and connection (such as your IP address and browser characteristics) to tell people from automated spam, and Cloudflare controls any browser storage it uses for that check. See Cloudflare's privacy policy.
• Embedded content: any video you choose to play may set cookies controlled by YouTube. Linked videos load only after you click. The social posts on our home page set no third-party cookies: their images are served from this website, and Instagram, Facebook or YouTube only sees you if you open a post.

Advertising and Ad Measurement

We advertise on Google and measure which ads lead to enquiries. This is what that sets and sends:

• Google Ads tag: set by Google. Google's advertising tag runs on this site and sets Google's own advertising cookies, such as _gcl_au, and _gcl_aw when you arrive from a Google ad. Google uses them to connect an ad click to an enquiry made later on this site. Google controls these cookies and how long they last.
• herauf_ads_click: set by us, kept for 90 days. If you arrive from a Google ad, we store the click ID Google adds to the link (gclid, wbraid or gbraid), the page you landed on, and the time. If you then send us an enquiry, the click ID is saved with it, so we can later tell Google Ads which ad clicks became qualified leads or customers.
• herauf_visit_source: set by us, kept for 90 days. It records how you last reached the site from outside it: the referring website's address, any campaign tags on the link (utm_source, utm_medium, utm_campaign), and the page you landed on. It is saved with any enquiry you send, so we know which channels bring enquiries.
• Enhanced Conversions: when you submit a form, the Google Ads tag sends the email address, phone number and name you entered to Google Ads in hashed (scrambled) form, so Google can match the enquiry to an ad click. For enquiries without an ad click ID, we may send Google Ads your email address and phone number in hashed form for the same purpose.

What We Don't Do

We do not sell your data.

Managing Cookies

You can control or delete cookies and local storage through your browser settings, including the herauf_ads_click and herauf_visit_source cookies and Google's advertising cookies. You can opt out of Google Analytics using Google's browser add-on, and choose how Google uses your information for ads in Google's ad settings. Disabling essential storage may affect sign-in and the 3D builder.

Contact Us

Questions about this policy? Email info@heraufmodular.com. See also our Privacy Policy.