Cookie Policy

Google Analytics runs here only with your consent. Outside the United States we ask before it loads; inside the US it is on by default and you can turn it off any time under Your Privacy Choices. Cloudflare Web Analytics is the exception to the asking: our host inserts it into the HTML of pages on this domain, the order and result pages included, and the banner does not gate it. Beyond analytics, the storage in play is one entry that remembers your choice, what Cloudflare Turnstile needs to tell a person from a bot, what Stripe needs to process a payment, one entry your browser keeps so your check result survives the next page, and a login cookie if you use the Growth Department. No advertising or retargeting anywhere.

Last updated August 7, 2026.

The cookie banner, and your choices

Google Analytics runs only with permission, and how we ask depends on where you are. Outside the United States, a banner appears on your first visit and Google Analytics does not load until you click Accept. Inside the US, analytics is on by default under the opt-out model US privacy law uses, and there is no banner; you turn it off with the Your Privacy Choices link in the footer, which reopens the banner so you can decline. We honor the Global Privacy Control browser signal, which counts as a decline automatically. If we cannot tell where you are, we treat you as outside the US and ask first.

Your choice is remembered in your browser, in the single local storage entry listed below. Google Analytics never runs on the order, result, or report pages, whichever way you choose. Cloudflare Web Analytics does run there, because our host puts it on every page.

What actually gets stored

Six things, and only in the situations described. The last two only happen if you log in or run the free check.

  • Analytics, with consent Google Analytics 4 When you allow it, we load Google Analytics 4 to understand how the site is used in aggregate. It loads only after consent (or, in the US, until you opt out), never on the checkout, result, or report pages, and IP addresses are masked. No advertising or retargeting tags run.
  • Your browser only Your analytics choice The banner writes one entry into your browser's local storage, named aeo_consent, holding a single word: granted or denied. It is how we avoid asking again on the next page. It is never sent to us, clearing your site data forgets it, and if your browser sends the Global Privacy Control signal we treat that as denied whatever the entry says.
  • Strictly necessary Cloudflare Turnstile On pages with a form, we load Cloudflare's Turnstile challenge to keep bots out of the free check. Turnstile is a third party service and it stores what it needs on Cloudflare's own domain to make and remember that judgment for a short period. Blocking it means the free check cannot verify you and will not run.
  • Strictly necessary Stripe On the order page for a paid product, Stripe's payment form loads and sets what it needs to process the payment and detect fraud. It is present only on that page, and only because a card is being handled.
  • Strictly necessary Growth Department login Logging in to the Growth Department at growth.aeoptim.com sets one cookie, named kg_sess, so the app knows it is still you on the next page. It holds a random token and nothing about you, the page's JavaScript cannot read it, it travels only over HTTPS, and it expires after thirty days or the moment you log out. Nothing sets it unless you log in.
  • Your browser only Your check result When your free check finishes, we put the result into your browser's session storage so the result page can show it without a second round trip. It is not a cookie, it is never sent to us, and your browser deletes it when you close the tab.

Requests that leave your browser

Separate from storage, loading this site makes requests to a few outside hosts. Those requests reveal your IP address and browser to whoever answers them, which is worth knowing even though no tracking cookie is involved.

  • Google Fonts serves the typeface on the order pages and on a report we deliver. The public pages here self-host it, so reading them makes no font request to Google.
  • Google Maps Places loads on pages with a city field, so the field can suggest cities as you type. What you type there goes to Google.
  • Cloudflare hosts and serves everything, so it sees every request by definition.
  • Google Analytics 4 records aggregate usage, and only after consent; those requests go to Google with your IP masked.
  • Cloudflare Web Analytics loads a small script from static.cloudflareinsights.com on pages of this domain, the order and result pages included. Cloudflare's edge inserts it, our own code does not, and the consent banner does not gate it. It reports page views and load timing to Cloudflare, and Cloudflare states that it uses no cookies and does not fingerprint visitors.
  • Cloudflare Turnstile and Stripe load only where described above.

What we do not use

Analytics is two things and nothing else: Google Analytics 4, gated by consent as described above, and Cloudflare Web Analytics, which our host inserts into the pages of this domain and which the banner does not gate. No Meta pixel, no LinkedIn insight tag, no advertising or retargeting pixels of any kind. No session recording or heatmap tools. No fingerprinting. No cross-site tracking. We do not sell or share your browsing data. If any of this changes, this page changes first.

Controlling all of it

Your browser can block or delete cookies and site data at any time in its settings, and most browsers let you do it per site. Blocking storage for this site mostly costs you nothing. The exception is the bot verification on the free check: block that and the check cannot confirm you are a person, so it will not run. If that is where you land and you still want your result, email human@aeoptim.com and we will run the check by hand and send you the answer.

Changes to this policy

If we add anything that stores data in your browser, it gets listed here and the date at the top changes. We are not going to add tracking quietly.

Questions

Write to legal@aeoptim.com or call 646-388-2960. The fuller picture of what we collect and who processes it is in our Privacy Policy.

AEOptim, 675 Purdy St, Birmingham, MI 48009. Related pages: Terms & Conditions, Privacy Policy, Accessibility.