Draft
This text is being finalized. Anything in brackets is a fact we still need to confirm.
Cookie policy
This page lists the cookies and similar tools this site can use, what each one does, and how to change your choice.
Last updated:
The short answer
Before you choose, this site sets no cookies. When you first visit, a banner asks you. Necessary cookies are always on. Advertising tools, and analytics tools that use cookies, load only if you say yes. If you say no, or don’t answer, they never load.
It is the same for every visitor, in the United States and anywhere else: no advertising tool, and no analytics tool that uses cookies, loads before you accept. We don’t load any tool on the page where you manage a booking.
Before a tool loads, we remove every parameter from the web address except campaign parameters, which show which ad or link brought you here: utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id, fbclid, and li_fat_id.
If your browser sends a Global Privacy Control signal, marketing stays off, and the banner tells you so.
Your choices
Accept all: allows every category.
Reject all: allows only the necessary cookie.
Choose: one switch for each category, saved with “Save my choices”.
To change your choice later, use “Your privacy choices” at the bottom of any page. If you withdraw consent, we stop loading the tools and delete the cookies they placed on this site. Cookies a provider places on its own domain, such as linkedin.com or facebook.com, you can remove in your browser or through the links below.
We remember your choice for the time in the table below, and we ask again if our list of tools changes.
What we use
Necessary. The consent cookie remembers your choice. It is always on.
Marketing. Meta Pixel, from Meta Platforms, Inc. Lets Meta measure our ads on Facebook and Instagram and show them to people who visited this site. Meta privacy policy Planned; not active yet.
Marketing. LinkedIn Insight Tag, from LinkedIn Corporation (LinkedIn Ireland Unlimited Company in the EU, the EEA, and Switzerland). Lets LinkedIn measure our ads and show them to people who visited this site. LinkedIn privacy policy Planned; not active yet.
Analytics. Google Analytics 4, from Google LLC. Shows us how the site is used: the pages visited and the devices and browsers. Google privacy policy Not in use.
Cookies and storage
These are the cookies the tools can store, and how long each lasts. Names and durations come from the providers’ own pages.
| Cookie | Tool | What it does | How long |
|---|---|---|---|
| surfside_consent (this site) | Consent cookie | Remembers which categories you allowed and which version of this list you saw, so we ask again if our tools change. | 12 months |
| _fbp (this site) | Meta Pixel Planned; not active yet. | Identifies your browser so Meta can measure our ads and show them to people who visited. | 90 days |
| _fbc (this site) | Meta Pixel | Keeps the ad-click ID (fbclid), only if one is in the web address when you arrive. | 90 days |
| fr (facebook.com) | Meta Pixel | Meta’s own cookie, used to deliver and measure ads and make them more relevant. | 90 days |
| li_fat_id (this site) | LinkedIn Insight Tag Planned; not active yet. | An indirect identifier for conversion tracking, retargeting, and analytics. | 30 days |
| li_giant (this site) | LinkedIn Insight Tag | An indirect identifier for groups of LinkedIn members, for conversion tracking. | 7 days |
| bcookie (linkedin.com) | LinkedIn Insight Tag | Identifies your device for abuse detection and diagnostics. | 1 year |
| lidc (linkedin.com) | LinkedIn Insight Tag | Chooses the LinkedIn data center that serves you. | 24 hours |
| UserMatchHistory (linkedin.com) | LinkedIn Insight Tag | Syncs your LinkedIn Ads ID. | 30 days |
| AnalyticsSyncHistory (linkedin.com) | LinkedIn Insight Tag | Records when LinkedIn last synced analytics for your browser. | 30 days |
| lms_ads (linkedin.com) | LinkedIn Insight Tag | Identifies people away from LinkedIn for advertising. | 30 days |
| lms_analytics (linkedin.com) | LinkedIn Insight Tag | Identifies people away from LinkedIn for analytics. | 30 days |
| li_sugr (linkedin.com) | LinkedIn Insight Tag | Matches your browser to a probable LinkedIn identity. | 90 days |
| _ga (this site) | Google Analytics 4 Not in use. | Tells visitors apart. | 2 years |
| _ga_<container-id> (this site) | Google Analytics 4 | Keeps the state of a visit. | 2 years |
LinkedIn lists these cookies for the sites that use its Insight Tag; you may not get all of them. li_fat_id is set only when you arrive from a LinkedIn ad.
More ways to control them
You can block or delete cookies in your browser’s settings. This site works without the advertising and analytics ones.
The providers’ own pages and opt-out links:
Meta: Meta privacy policy, Meta cookie policy, Meta ad settings.
LinkedIn: LinkedIn privacy policy, LinkedIn cookie policy, LinkedIn ad settings for members, LinkedIn opt-out for visitors.
Google: Google privacy policy, How Google uses cookies, Google Analytics opt-out add-on.
What else is recorded
Our hosting provider, Vercel, keeps standard server logs of each visit: your IP address, your browser, and the pages you request. These logs are not cookies. Our privacy policy explains how we handle information.
If you join a Zoom call, Zoom may set cookies of its own on its site or app. Zoom’s policy covers that, not this one. The same goes for any site you reach through a link from ours.
When you first open the home page, your browser keeps one note in its session storage, surfside-intro, so the opening animation plays only once per visit. It holds nothing about you, and your browser deletes it when you close the tab.
Your browser also keeps two notes in its session storage for the booking form: surfside-origin (the website that sent you, by name only, the first page you saw, the campaign tags in the link, and whether you came from an ad) and surfside-trail (the last two pages you saw on this site). They stay in your browser and reach us only if you book a consultation, with the booking. Your browser deletes them when you close the tab.
To count visits, we use Vercel Web Analytics, from our hosting provider. It sets no cookie and stores nothing on your device, and it runs for every visitor, before and after you choose. It records the page, the site that sent you, your approximate location (country, region, and city), and your device type, operating system, and browser. It tells visits apart with a code made from your request, which Vercel discards after 24 hours, and we see only totals. It never counts the page where you manage a booking, and it drops everything from the web address except campaign parameters.
If you are on our team and sign in to our private admin page, a cookie, surfside_admin, keeps you signed in for 12 hours. Visitors never get it.
When you book a consultation, the form runs a bot check, Cloudflare Turnstile, before it sends. It connects your browser to Cloudflare, which receives technical signals such as your IP address and browser to tell people from automated programs, and it keeps one item in your browser’s storage on Cloudflare’s own domain. It sets no cookie on this site. Cloudflare’s Turnstile privacy addendum explains how Cloudflare handles this information.
Google Search Console shows us how the site appears in Google Search. It is verified through our domain settings and puts nothing on your device. Planned; not active yet.
If this changes
Before we add any other cookie or tool, we will update this page and, where the law requires it, ask for your consent first.
Contact us
For privacy questions or requests, write to info@surfcapadvisors.com with “Privacy request” in the subject line, and tell us which Surfside company you dealt with. We answer within 45 days. If we need more time, we tell you why. You can also write to us at 6 Liberty Square, Suite 2511, Boston, MA 02109, or use the contact form on our home page.
A