Cookie Policy

1.Your choice, and when anything starts

Measurement and advertising technologies are used only on the basis of your choice. Which form that choice takes depends on where you are:

• In the EEA, the United Kingdom and Switzerland, nothing loads until you opt in. On a first visit we show a consent banner, and no analytics or advertising technology runs, not even to count the page you are on, until you answer it. If we cannot determine your country, we treat you as being in this group.
• Everywhere else, measurement and advertising are on by default and you can opt out at any time using the Cookie settings link in the site footer. If your browser sends a Global Privacy Control signal, advertising stays off.

To decide which of the two applies, we read the two-letter country code our hosting provider resolves from your IP address at the network edge. It is used for that decision only. We do not store the country itself; the record described below keeps only which of the two regimes applied.

The choice is separated into two purposes. You can accept one and refuse the other:

• Measurement: Google Analytics 4 and PostHog, described below.
• Advertising: the Meta Pixel and the LinkedIn Insight Tag described below, and the server-side conversion reporting described under "Information we send to Meta from our servers".

Record of your choice

Each time you make or change a choice, we also record it on our servers so we can show what was agreed and when. The record contains the anonymous identifier held in the consent cookie, your decision for each purpose, whether it was a grant, a change or a withdrawal, the version of this Policy you were shown, which of the two regimes applied, the site you were on, your browser's user-agent string, and your IP address, which is stored only in hashed form. The record is kept as evidence of the choice and is not linked to an account.

2.What we use, and what it does

We use two cookie families on the marketing site (one for measurement and one for advertising), a first-party cookie that records your choice, and a small piece of local storage for your theme preference.

Consent cookie (mariete_consent)

When you answer the banner, or change your mind later, we store the result in a first-party cookie named mariete_consent. It holds an anonymous identifier generated for your browser, the version of this Policy you were shown, your decision for each of the two purposes, and the time you made it. It holds no name, email address or IP address.

• Lifetime: 180 days.
• It is readable by the site itself, because the site has to read it before deciding whether to load a tag at all.
• In production it is set on .mariete.ai, so your choice carries across our sub-sites instead of being asked for again on each one.

We ask again once the 180 days have passed, and when a change to this Policy alters what we ask you to agree to, because a choice made against wording you were never shown is not a choice. A refusal is carried across such a change; an acceptance is not. Where we ask before anything loads, a technology added to this Policy stays off until you make a choice on this site that covers it, even if you accepted the earlier wording.

Measurement cookies (Google Analytics 4)

If you accept measurement, Google Analytics 4 sets two cookies:

• _ga: a randomly generated client identifier that lets us count unique visitors and recognise returning ones. Lifetime: 2 years.
• _ga_KFBNW8B27E: a session identifier and engagement metrics for our specific Analytics property. Lifetime: 2 years.

We use these to understand which pages people visit, how they move through the site, and which content is useful, so we can improve it. The data is aggregated and used for statistical analysis. If you refuse measurement, neither cookie is set and the Analytics tag is never loaded.

Measurement (PostHog)

If you accept measurement, we also load PostHog, a product analytics service, through our own domain at mariete.ai/ingest. It stores one randomly generated identifier, in a first-party cookie and in local storage, named ph_ followed by our project key and _posthog. Lifetime: 1 year.

On our campaign pages we also test two versions of the same page against each other. If you accept measurement, a first-party cookie named mariete_join_test remembers which version you saw, so you see the same one when you come back. Lifetime: 30 days.

PostHog records the pages you visit, the buttons and links you click, the campaign that brought you to the site, and a replay of how each page was used: scrolling, mouse movement and clicks. Everything you type into a form is masked in the replay and never sent, and our contact forms are left out of the replay entirely. Advertising click identifiers and other sensitive values are removed from the page addresses PostHog stores. Visits stay anonymous unless you sign in to a Mariete account. We use this to see where the site is unclear and to compare our campaigns. PostHog stores and processes this data for us in the United States. If you refuse measurement, PostHog is never loaded and nothing is stored.

Advertising cookies (Meta Pixel)

If you accept advertising, we load the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to understand the actions people take on the site after seeing an ad. It sets:

• _fbp: a browser identifier Meta uses to attribute site actions (such as visiting a page or requesting a demo) to our ad campaigns and, where applicable, to build audiences for future campaigns. Lifetime: up to 90 days.

The Pixel reports events (for example a page view, a completed contact form or a click through to sign up) back to Meta so we can measure conversions. It may also receive the _fbc cookie if you reach the site by clicking one of our ads. If you refuse advertising, the Pixel is never loaded and neither cookie is set.

Advertising cookies (LinkedIn Insight Tag)

If you accept advertising, we also load the LinkedIn Insight Tag to measure the effectiveness of our advertising on LinkedIn and to understand which actions people take on the site after seeing a campaign. It sets cookies including:

• li_sugr, lidc and bcookie: browser and routing identifiers LinkedIn uses to recognise your browser and attribute site actions to our campaigns. Lifetime: up to 2 years.
• UserMatchHistory and AnalyticsSyncHistory: used to sync conversion and audience data with LinkedIn. Lifetime: up to 30 days.

Where you are a LinkedIn member, LinkedIn may associate this activity with your account. LinkedIn only shares aggregated, de-identified reporting with us. You can control this in your LinkedIn account settings under Advertising data.

Theme preference

We store your theme preference (system, light or dark) under mariete-theme in local storage so the site can render in your chosen mode without a flash. This is purely functional; no analytics value.

3.Information we send to Meta from our servers

Separately from the cookies above, we report a completed contact form to Meta directly from our servers, using the Meta Conversions API. This happens only where you have accepted the advertising purpose, and only once the form has actually been delivered to us. Our server reads the same consent cookie your browser reads, and sends nothing if advertising is not granted.

Where it does happen, we send Meta:

• A SHA-256 hash of the email address you entered, and hashes of your first and last name where the form asked for a name. The values are trimmed and lower-cased before hashing; the plain values are not sent.
• The _fbp and _fbc cookies described above, where your browser holds them. These are sent as they are, because hashing them would make them useless for matching.
• The IP address the submission came from and your browser user-agent string.
• The form you submitted, the page you submitted it from, the time, and an identifier for the submission that lets Meta recognise the browser event and the server event as one conversion rather than two.

Nothing else you typed is sent: not your message, your company, your role, or any other field on the form.

The hash cannot be reversed to recover your email address, but it is a stable identifier: Meta can compare it against the same hash computed from an address it already holds, which is why it is sent.

Deleting or blocking the advertising cookies described above does not stop this, and neither does a content blocker or your browser tracking protection, because the request is made by our servers rather than by your browser. What stops it is refusing the advertising purpose, which you can do at any time from Cookie settings in the footer.

4.What we do not use

The marketing site does not use affiliate or attribution cookies set by third parties other than those named above, and it does not tailor what you see to your browsing.

5.How to change or revoke your choice

Your choice is not final. You can change or withdraw it at any time:

• Use the Cookie settings link in the footer of any page. It reopens the consent panel, where you can accept or refuse each purpose separately, or reject everything in one click. This is the opt-out for regions where measurement and advertising are on by default.
• Withdrawing reloads the page. Removing a tag from the page does not unload vendor code that has already run in the tab, so we reload to make the withdrawal take effect for the rest of your visit.
• Clear cookies and site data for mariete.ai from your browser settings. This removes the cookies described above, including the record of your choice, so you will be asked again on your next visit.

Withdrawing stops further collection. It does not reverse what was collected, or sent, while your consent was in place. To ask us to delete information we hold about you, write to hello@mariete.ai.

You can opt out of Google Analytics across the entire web by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

You can manage how Meta uses your activity for advertising in your Facebook or Instagram ad preferences, and how LinkedIn uses it in your LinkedIn account settings under Advertising data. You can also adjust interest-based advertising more broadly through the tools at the Digital Advertising Alliance (https://optout.aboutads.info) and the European Interactive Digital Advertising Alliance (https://www.youronlinechoices.eu). These control what those platforms do with the data; they do not replace the choice you make here.

6.Changes to this Policy

We may update this Cookie Policy from time to time, particularly if we introduce new technologies or our use of measurement and advertising changes. The "last updated" date at the top of this page reflects the most recent revision.

Where a change affects what we are asking you to agree to, an acceptance given under the earlier wording is not carried forward onto the new wording: either we ask again, or the new technology stays off until you have made a choice that covers it. A refusal stays in place.

7.Contact

Questions about this Cookie Policy or how we handle your data? Reach us at hello@mariete.ai.

Questions about this document? Write to hello@mariete.ai.