Cookie policy

1What are cookies?

Cookies and similar technologies, such as localStorage and sessionStorage keys and tracking pixels, are small pieces of data stored on or read from your device when you visit a website. They help the site work and show how it is used.

This policy covers leopol.ai. What the app does on iOS and Android, and the web app at app.trapspotter.com, is described in section 11 of our privacy policy; you control it in the app under Settings → Analytics & Tracking.

2Which cookies and trackers do we use?

Strictly necessary

leopol_cookie_consent stores your choice in the cookie banner for 6 months, on leopol.ai and www.leopol.ai. It needs no consent. Our host, Vercel, may also set a short-lived security cookie when it checks that a visit comes from a browser rather than a bot.

Analytics, advertising measurement and ad personalisation — only if you accept

Google Analytics 4 (Google Ireland Limited; our own property for leopol.ai) is loaded only after you accept. Until you choose, and if you reject, it is not on the page and nothing is sent to Google.

If you accept, it sets _ga and _ga_1J1H9BZFSQ (13 months) and Google’s ad-measurement cookies such as _gcl_au (also 13 months). If you accept, Google may also use your visit to personalise ads (ad personalisation), for example to show our ads to people who visited this site. It records the pages you view, taps on the store buttons and completed forms — never what you typed. Email addresses and sign-in and unsubscribe tokens in page addresses are removed before they reach Google.

Microsoft Clarity (Microsoft Ireland Operations Limited; our own project for leopol.ai) shows us how the site is used — heatmaps of where people click and scroll, and session recordings — so that we can improve it. It is loaded only after you accept: before that, and if you reject, its script is not on the page at all. It records page addresses, clicks, scrolling, mouse movement and how the page looked. Everything you type into a field is masked in your browser, as are numbers and email addresses, and the forms are masked completely, so their content is never sent. Clarity does not load on the pages you open from a link in an email (unsubscribe and confirmations). It sets _clck (1 year) and _clsk (1 day) on leopol.ai and the sessionStorage key _cltk (deleted when you close the tab). Microsoft may also set its own cookies on its own domains (clarity.ms, bing.com), such as MUID, CLID, ANONCHK, MR and SM. We do not use Clarity for advertising and tell Clarity so, and we do not sell this data.

Cookieless statistics

Our own statistics are counted on our server as the pages are requested, as totals per page, day, language, referring domain, country, device type and campaign: no script, no cookie, no browser storage, no identifier, and no IP address stored. Only after Accept does the site also report which buttons you tap, without an identifier, and do two sessionStorage keys carry the campaign of this visit from page to page to the store links and the forms: lp_utm and lp_campaign, deleted when you close the tab or reject. No cookie is set.

Store links

When you tap an App Store or Google Play button, the link passes the campaign of your visit (utm_* parameters and, if present, the ad click id) to Apple or Google — or, with no campaign, that you came from leopol.ai — so that installs can be attributed to campaigns.

Not on this website

No Meta Pixel, no Google Tag Manager and no advertising pixel.

3Consent and controls

Non-essential cookies are set only after you consent. You can change your choice at any time.

• This website: the cookie banner. Accept allows the Google Analytics cookies, Google’s ad-measurement cookies, ad personalisation by Google, Microsoft Clarity, our own count of the buttons you tap and keeping the campaign of the visit in the tab; Reject keeps Google Analytics and Clarity off. You can change or withdraw your choice at any time with the Cookies link at the bottom of every page or the Cookie settings button at the top of this cookie policy: both reopen the banner, and rejecting there after an earlier Accept also stops Clarity and deletes those cookies from your browser (except Microsoft’s cookies on its own domains, which only your browser settings can remove). You can also delete the cookies for leopol.ai in your browser, and the banner will ask again
• Your choice on leopol.ai applies here only. Our other website and the web app have their own choice, and the app has its own switches under Settings → Analytics & Tracking

Browser settings

You can also manage cookies through your browser. Blocking strictly necessary cookies may affect website functionality.

4Third-party trackers

• Google Analytics 4 — Google Ireland Limited, our own property for leopol.ai, behind the cookie banner. Google may process data in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. Policy: https://policies.google.com/privacy
• Microsoft Clarity — Microsoft Ireland Operations Limited, our own project for leopol.ai: heatmaps and masked session recordings, loaded only after you accept in the cookie banner. Microsoft is an independent controller of this data and may process it in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. Cookies on Microsoft’s own domains cannot be deleted from our website; your browser settings can. Policy: https://www.microsoft.com/privacy/privacystatement

5Retention

• leopol_cookie_consent: 6 months
• Google Analytics cookies _ga and _ga_1J1H9BZFSQ: 13 months; Google’s ad-measurement cookies such as _gcl_au: 13 months
• Microsoft Clarity cookies: _clck 1 year, _clsk 1 day; sessionStorage key _cltk: deleted when you close the tab. Microsoft’s own cookies on its domains, as Microsoft sets them today: MUID about 1 year, CLID 1 year, MR 7 days, ANONCHK 10 minutes, SM for the session
• sessionStorage keys lp_utm and lp_campaign: only after Accept; deleted when you close the tab or reject
• Google Analytics data: 14 months, the retention we set in our property
• Microsoft Clarity data: recordings 30 days (a random sample, and recordings we mark, up to 9 months); heatmap and click data 9 months — Microsoft’s retention

6Contact

Privacy / GDPR: privacy@trapspotter.com

Address: TrapSpotter BV · Trekschurenstraat 245, 3500 Hasselt, Belgium