The cookie banner, and your choices
Analytics run only with permission, and how we ask depends on where you are. Outside the United States, a banner appears on your first visit and nothing analytics-related loads until you click Accept. Inside the US, analytics is on by default under the opt-out model US privacy law uses, and there is no banner; you turn it off with the Your Privacy Choices link in the footer, which reopens the banner so you can decline. We honor the Global Privacy Control browser signal, which counts as a decline automatically. If we cannot tell where you are, we treat you as outside the US and ask first.
Your choice is remembered in your browser, and none of this runs on the checkout, result, or report pages.
What actually gets stored
Three things, and only in the situations described.
- Analytics, with consent Google Analytics 4 When you allow it, we load Google Analytics 4 to understand how the site is used in aggregate. It loads only after consent (or, in the US, until you opt out), never on the checkout, result, or report pages, and IP addresses are masked. No advertising or retargeting tags run.
- Strictly necessary Cloudflare Turnstile On pages with a form, we load Cloudflare's Turnstile challenge to keep bots out of the free check. Turnstile is a third party service and it stores what it needs on Cloudflare's own domain to make and remember that judgment for a short period. Blocking it means the free check cannot verify you and will not run.
- Strictly necessary Stripe On the order page for a paid product, Stripe's payment form loads and sets what it needs to process the payment and detect fraud. It is present only on that page, and only because a card is being handled.
- Your browser only Your check result When your free check finishes, we put the result into your browser's session storage so the result page can show it without a second round trip. It is not a cookie, it is never sent to us, and your browser deletes it when you close the tab.
Requests that leave your browser
Separate from storage, loading this site makes requests to a few outside hosts. Those requests reveal your IP address and browser to whoever answers them, which is worth knowing even though no tracking cookie is involved.
- Google Fonts serves the typeface the site is set in.
- Google Maps Places loads on pages with a city field, so the field can suggest cities as you type. What you type there goes to Google.
- Cloudflare hosts and serves everything, so it sees every request by definition.
- Google Analytics 4 records aggregate usage, and only after consent; those requests go to Google with your IP masked.
- Cloudflare Turnstile and Stripe load only where described above.
What we do not use
Analytics is limited to Google Analytics 4, consent-gated as described above. No Meta pixel, no LinkedIn insight tag, no advertising or retargeting pixels of any kind. No session recording or heatmap tools. No fingerprinting. No cross-site tracking. We do not sell or share your browsing data. If any of this changes, this page changes first.
Controlling all of it
Your browser can block or delete cookies and site data at any time in its settings, and most browsers let you do it per site. Blocking storage for this site mostly costs you nothing. The exception is the bot verification on the free check: block that and the check cannot confirm you are a person, so it will not run. If that is where you land and you still want your result, email human@aeoptim.com and we will run the check by hand and send you the answer.
Changes to this policy
If we add anything that stores data in your browser, it gets listed here and the date at the top changes. We are not going to add tracking quietly.
Questions
Write to legal@aeoptim.com or call 646-388-2960. The fuller picture of what we collect and who processes it is in our Privacy Policy.
AEOptim, 675 Purdy St, Birmingham, MI 48009. Related pages: Terms & Conditions, Privacy Policy, Accessibility.