COOKIES + MEASUREMENT · EFFECTIVE SEPTEMBER 27, 2026
Essential delivery and security remain active. Google Analytics and sitewide content-masked Microsoft Clarity experience analytics remain off until you allow their separate categories. THONIS does not use browser fingerprinting.
Control. Use the persistent Privacy choices control to accept, refuse, or withdraw optional measurement. A withdrawal reloads the page so previously loaded optional runtimes are removed.
Current inventory
__cf_bmProvider: Cloudflare. Purpose: distinguish likely automated traffic and protect the public site. Type: strictly necessary security cookie. Cloudflare documents expiration after 30 minutes of continuous inactivity.
Cloudflare cookie documentationStatus: essential infrastructure. Purpose: deliver and protect the public site. THONIS does not currently load a Cloudflare Web Analytics beacon; optional site measurement is provided by the separately consented tools listed below.
Cloudflare privacy documentationStatus: essential. Storage: thonis_privacy_choices_v1 in this browser's local storage. Purpose: remember analytics, experience, and marketing choices. It contains category choices and a timestamp—not an account, identity, or advertising profile.
Status: optional analytics. The Google tag is not requested until analytics consent. THONIS sends page title and origin-plus-path route measurement, keeps Google Signals and advertising personalization off, and configures first-party analytics cookies for 90 days. Full query strings, form text, email content, filenames, and customer evidence are not sent as THONIS events. The inquiry-review event may include the selected product, validated campaign labels and sanitized source path described below.
Google Analytics privacy controlsStatus: optional analytics. With analytics consent, thonis_campaign_context_v1 in this tab's session storage keeps validated source, medium, campaign and optional post/content labels plus a capture time so an inquiry can retain its referral context across pages. Labels expire after 30 minutes and are removed on withdrawal or when the tab closes. No form answers or full URLs are stored. Valid campaign labels on the inquiry URL itself may appear in the message you review without being stored. The selected service offer may also appear in the reviewed message and consented inquiry event.
Status: optional experience analytics. The tag is not requested until experience consent. The public document root carries Microsoft's data-clarity-mask directive for sitewide content masking; advertising storage is denied and no custom visitor identity is supplied. Clarity reconstructs interactions for heatmaps and replay; inquiry, direct demo, deck, and preview routes are excluded.
Status: prepared, not active. The consent architecture includes a separate marketing category, but no advertising pixel loads until an exact provider ID, approved campaign purpose, current account terms, disclosure, and visitor choice are complete. Global Privacy Control keeps this category off.
Analytics event inventory
Consented events identify the page path and which Dextra product page was viewed. They do not include page query strings.
With analytics consent, public marketing pages record when 25%, 50%, 75% and 90% of page depth has been reached and when selected section headings become visible. Each threshold and authored section identifier is recorded once per page visit while consent remains active. These events exclude inquiry, demo and preview pages and contain no text you enter. Reaching a section does not prove comprehension or buyer interest.
Consented events use a bounded CTA identifier, product, placement, and on-site destination so THONIS can see which path is useful.
Consented events record a worksheet download request, the first inquiry-form edit, and fixed synthetic-demo milestones such as parsing the sample request or matching a package digest. They contain authored action names only. A request does not prove a download finished; a demo result is not a customer result; an email handoff does not prove receipt.
When a visitor reaches the final local review step, the site may send the selected product plus sanitized source and campaign labels. This does not establish that an email was sent or that the inquiry is qualified. It does not send the visitor's name, company, email, narrative answers, filenames, or message body.
With analytics consent, selecting a prepared question, opening its source, or adding its topic to the fit review records only the authored topic identifier, the source identifier when applicable, the action and the guide version. Written answers and message bodies are never included. These actions do not establish an inquiry, meeting or customer result.
Reaching review is not an inquiry submission. THONIS receives nothing until the visitor deliberately sends the prepared email.
Measurement gate
Define the exact product, route, usability, or campaign question before collecting more data.
Collect only the event or interaction needed. Never send entered text, sensitive records, credentials, or customer evidence.
Deny optional storage by default, separate categories, honor Global Privacy Control, and make withdrawal persistent and available.
Inspect live requests and storage, review usefulness, and remove a provider or campaign tag when its named decision is complete.
Current categories
Site delivery, abuse protection, and the local record of your privacy choices.
Google Analytics and sitewide content-masked Clarity are independently controlled and do not load before their category is allowed.
No LinkedIn or Google Ads pixel currently loads. The marketing category fails closed until the account and campaign gates are complete.
Cookie or measurement questions: john.mawad@thonissystems.com.