COOKIES + MEASUREMENT · EFFECTIVE SEPTEMBER 8, 2026
Essential delivery and security remain active. Google Analytics and sitewide content-masked Microsoft Clarity experience analytics remain off until you allow their separate categories. THONIS does not use browser fingerprinting.
Control. Use the persistent Privacy choices control to accept, refuse, or withdraw optional measurement. A withdrawal reloads the page so previously loaded optional runtimes are removed.
Current inventory
__cf_bmProvider: Cloudflare. Purpose: distinguish likely automated traffic and protect the public site. Type: strictly necessary security cookie. Cloudflare documents expiration after 30 minutes of continuous inactivity.
Cloudflare cookie documentationStatus: essential infrastructure. Purpose: deliver and protect the public site. THONIS does not currently load a Cloudflare Web Analytics beacon; optional site measurement is provided by the separately consented tools listed below.
Cloudflare privacy documentationStatus: essential. Storage: thonis_privacy_choices_v1 in this browser's local storage. Purpose: remember analytics, experience, and marketing choices. It contains category choices and a timestamp—not an account, identity, or advertising profile.
Status: optional analytics. The Google tag is not requested until analytics consent. THONIS sends page title and origin-plus-path route measurement, keeps Google Signals and advertising personalization off, and configures first-party analytics cookies for 90 days. Full query strings, form text, email content, filenames, and customer evidence are not sent as THONIS events. The inquiry-review event may include the selected product, validated campaign labels and sanitized source path described below.
Google Analytics privacy controlsStatus: optional analytics. With analytics consent, thonis_campaign_context_v1 in this tab's session storage keeps three validated campaign labels and a capture time so an inquiry can retain its referral context across pages. Labels expire after 30 minutes and are removed on withdrawal or when the tab closes. No form answers or full URLs are stored. Valid campaign labels on the inquiry URL itself may appear in the message you review without being stored.
Status: optional experience analytics. The tag is not requested until experience consent. The public document root carries Microsoft's data-clarity-mask directive for sitewide content masking; advertising storage is denied and no custom visitor identity is supplied. Clarity reconstructs interactions for heatmaps and replay; direct demo, deck, and preview routes are excluded.
Status: prepared, not active. The consent architecture includes a separate marketing category, but no advertising pixel loads until an exact provider ID, approved campaign purpose, current account terms, disclosure, and visitor choice are complete. Global Privacy Control keeps this category off.
Analytics event inventory
Consented events identify the page path and which Dextra product page was viewed. They do not include page query strings.
Consented events use a bounded CTA identifier, product, placement, and on-site destination so THONIS can see which path is useful.
When a visitor reaches the final local review step, the site may send the selected product plus sanitized source and campaign labels. It does not send the visitor's name, company, email, narrative answers, filenames, or message body.
Reaching review is not an inquiry submission. THONIS receives nothing until the visitor deliberately sends the prepared email.
Measurement gate
Define the exact product, route, usability, or campaign question before collecting more data.
Collect only the event or interaction needed. Never send entered text, sensitive records, credentials, or customer evidence.
Deny optional storage by default, separate categories, honor Global Privacy Control, and make withdrawal persistent and available.
Inspect live requests and storage, review usefulness, and remove a provider or campaign tag when its named decision is complete.
Current categories
Site delivery, abuse protection, and the local record of your privacy choices.
Google Analytics and sitewide content-masked Clarity are independently controlled and do not load before their category is allowed.
No LinkedIn or Google Ads pixel currently loads. The marketing category fails closed until the account and campaign gates are complete.
Cookie or measurement questions: john.mawad@thonissystems.com.