Draft. These policies were prepared without legal review. They describe how this site actually works, but they are not legal advice.
This policy lists the cookies and similar technologies aboveclicks.com uses, what each one does and how long it lasts. Cookies are small files a website stores in your browser; similar technologies include pixels and local storage.
Your choices
When you first visit, a banner lets you accept, reject or choose which optional cookies to allow. If you’re in the European Economic Area, the UK or Switzerland, optional cookies stay off until you accept them. Elsewhere, you’ll see a notice with an opt-out. We work out your country from our hosting provider’s network (Cloudflare); if it can’t be determined, we treat you as being in the EEA. If your browser sends a Global Privacy Control signal, advertising cookies stay off. You can change your choice at any time with the “Your privacy choices” link in the footer. The tables below list every optional tag. Each one loads only once it is set up on the site and your choice allows it.
You can also block or delete cookies in your browser settings. The site still works without optional cookies.
Strictly necessary
These keep the site working and secure, so they can’t be switched off.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ac_consent |
Above Clicks | Remembers your cookie choices so the banner doesn’t come back on every page | 12 months |
ac_cs |
Above Clicks | A copy, for this browser session, of the cookie choices currently applied (including the opt-out notice’s defaults outside the EEA, the UK and Switzerland), so our server respects them when you send a form | Session |
wordpress_test_cookie, wordpress_logged_in_*, wp-settings-* |
Above Clicks (WordPress) | Only set for our team when they log in to manage the site; visitors don’t get them | Session to 1 year |
Our forms don’t set cookies. Spam protection uses a hidden timestamp in the form, a temporary hash on our server and Cloudflare Turnstile. Turnstile only loads when you start filling in a form, and it checks that the form is being sent by a person. Cloudflare’s own privacy policy applies to it.
Analytics (optional)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Counts visits and shows how people use the site, such as pages viewed and form submissions | Up to 2 years |
_clck, _clsk, CLID |
Microsoft Clarity | Heatmaps and session recordings that show where pages are confusing; form fields are masked | 1 day to 1 year |
ac_attr |
Above Clicks | Remembers how you first and last reached the site (campaign tags in the link, the referring website, the first page you landed on and the date), so that if you send us a form we know which campaign brought you. It holds no identifier, isn’t shared with anyone, and is only read when you submit a form. | 90 days |
Lead attribution isn’t needed for the site to work, so ac_attr follows your Analytics choice. In the EEA, the UK and Switzerland it’s only set after you accept Analytics; elsewhere it’s set unless you opt out. Without it, a form you send only carries how you reached the page you send it from, and nothing is stored in your browser. If you withdraw Analytics consent, the cookie is deleted.
Advertising (optional)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au, _gcl_aw |
Google Ads | Measures which Google ads lead to audit requests | 90 days |
_fbp, _fbc |
Meta Pixel | Measures which Facebook and Instagram ads lead to audit requests, and lets us show ads to past visitors | 90 days |
The site loads these tags itself, without a tag manager, and they follow your consent choices through Google Consent Mode v2.
Other storage in your browser
A few small values are kept in your browser’s local or session storage instead of cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
ac-pop |
Local storage | Remembers when the offer pop-up was last shown, so it appears at most once every 30 days | Until you clear it |
ac-pz |
Local storage | Only with Analytics consent: keeps you in the same group when we test the wording of our audit boxes | Until you clear it |
ac_cc |
Session storage | Your country code from Cloudflare, so the cookie banner doesn’t look it up on every page | This tab |
ac_lead, ac_nl, ac_leid, ac_em, ac_ph |
Session storage | After you send a form, carry the form name and event ID to the thank-you page so each conversion counts once. With advertising consent and Google Ads set up, your email (and phone with a country code) wait here until that page hashes them for enhanced conversions | Cleared on the thank-you page, or when you close the tab |
Embedded and linked services
The WhatsApp button is a plain link: nothing from WhatsApp loads until you click it. After that, WhatsApp’s own privacy policy applies.
More information
See our privacy policy for how we handle personal data, or email [email protected] with questions.