Cookie Policy
What this site stores in your browser, why, and how to change your mind at any time.
Last updated
The short version
This site loads no third-party analytics until you accept. If you decline, or simply never choose, Google Analytics is never requested and no analytics cookie is set. The only thing stored in that case is the record of your choice itself.
Our own server counts page views for everyone, without cookies — seeVisit counting below.
Strictly necessary
These are set regardless of choice, because the site cannot do its job without them. They are not used to build a profile of you.
| What | Why | How long |
|---|---|---|
unheld.analytics-consent | Remembers whether you accepted or declined analytics, so you are not asked on every page. Stored in your browser's local storage, not sent to us. | Until you clear it or change your choice |
unheld_consent | A copy of that same choice, readable by our registration page on app.unheld.io, so the choice you made here applies there too. | 1 year |
unheld_internal | Set only in our own staff's browsers when they sign in to our admin console, so our own visits are left out of our visitor counts. | 1 year |
| Cloudflare Turnstile | Loaded on the dashboard's sign-in, registration and contact-support forms (app.unheld.io), to tell a person from an automated submission. It runs in a frame served by Cloudflare. Without it those forms would be a way to send us unlimited automated traffic. | Controlled by Cloudflare |
Visit counting — without cookies
Every page view is recorded by our own server: the page, its language, the site that linked to it, any campaign tags in the link (such as utm_source), a coarse device type, the country Cloudflare reports, whether you interacted with the page (a click, key press, touch, scroll or mouse movement — nothing about what you did), and a random id for that one page view that is never stored in your browser. To count how many people visit each day, the server combines your IP address and browser identifier with a secret that is deleted at the end of each day (UTC), and keeps only the result. Your IP address and browser identifier are never stored, and once the secret is gone the result cannot be traced back to you or linked to another day. Nothing is stored in your browser for this.
Analytics — only if you accept
We use Google Analytics 4 to see which pages help merchants and which do not: how many people arrive, where from, which pages they read, and which buttons they press. We do this to decide what to write next, not to identify you.
| What | Why | How long |
|---|---|---|
_ga, _ga_<id> | Distinguishes one browser from another so a returning visit is not counted twice. | Up to 2 years |
unheld_vid | Our own random identifier, set only if you accept. We use it to recognise our own staff's browsers and leave them out of our visitor counts; it is not used to count you. Never shared with anyone. | 1 year |
What we never send to analytics
Wallet addresses, recovery phrases, API keys, transaction hashes, invoice details, customer names or email addresses are never sent to Google Analytics or any third party. The only event this site records beyond a page view is which call to action was clicked, along with the page path and its language.
Changing your mind
Use Cookie settings — also linked in the footer of every page — to bring the choice back and change it. Declining after having accepted stops any further analytics from loading; you can also clear cookies in your browser to remove what was already set.
Who else is involved
Google LLC provides Analytics and Cloudflare, Inc. provides Turnstile; each processes data under its own terms. We do not use advertising cookies, cross-site tracking, or any personalisation or profiling service.
Questions
Write to support@unheld.io and we will answer.