Cookie Policy

1. What are cookies?

Cookies are small text files a website stores on your device (computer, tablet, or phone) when you visit. They let the site remember actions or preferences for a period of time.

Similar technologies may also be used, such as browser local storage or session identifiers, for comparable purposes.

2. Types of cookies by purpose

For transparency, we describe cookies that may be used on sites like ours as follows:

• Strictly necessary (essential): required for the site to work, security, or authentication. Under EU rules, these do not require prior consent.
• Functional or preference: remember choices such as language or region to improve your experience.
• Analytics or measurement: help understand aggregated use of the site (pages viewed, errors, performance).
• Marketing or advertising: used to personalise ads or measure campaigns (e.g. Meta Pixel via Google Tag Manager), only if you accept all cookies.

3. Cookies and storage ApplySite uses

Based on the current platform, we use or may use the following. This list may be updated if we add new tools.

• as_lang (HttpOnly cookie): stores your language preference (Spanish or English) on public routes. Duration: up to 12 months. Type: functional / preference.
• sb-token (HttpOnly cookie): keeps you signed in to student or institution areas when you authenticate via Supabase. Duration: per session settings. Type: strictly necessary for the service you request.
• as_cookie_consent (localStorage): records your choice in the cookie notice (accept all or essential only). Type: needed to honour your consent preference.
• as_utm (sessionStorage): stores campaign parameters (utm_*) and click IDs (gclid, fbclid, msclkid) from the landing URL for inquiry attribution. Duration: browser session. Type: analytics / measurement (no third-party cookies).
• Google Tag Manager / Google Analytics 4 cookies: if you accept all cookies, GTM may load GA4 to measure traffic and form conversions in aggregate. Type: analytics.
• Meta Pixel (Facebook) cookies: if you accept all cookies, GTM may load the Meta pixel to measure ad campaigns. Type: marketing.
• Authentication provider cookies: when you sign in with Google or another OAuth provider, that provider may set its own cookies under its policy.

4. Analytics and third-party tracking

ApplySite may load Google Tag Manager (GTM) on public marketing pages. From GTM, and only after your consent (“Accept all”), Google Analytics 4 and Meta Pixel may run to measure visits, campaigns, and form submissions.

If you choose “Essential only”, analytics and marketing cookies stay off (Consent Mode remains denied). You can change your choice by clearing as_cookie_consent in local storage; the notice will appear again.

Campaign identifiers in the URL (utm_source, utm_medium, utm_campaign, etc.) may be stored in sessionStorage (as_utm) and sent with your inquiry to our systems for internal attribution, independent of third-party cookies.

5. Third-party cookies and resources

Some external services may set cookies or process technical data when you interact with the platform:

• Supabase: authentication and database infrastructure; may use cookies or session storage for secure access.
• Google Tag Manager / Google Analytics / Meta: when you consent to analytics or marketing, those providers may set cookies under their policies.
• Google Fonts: fonts are loaded from Google servers; depending on your browser, requests may reach Google domains (see Google’s privacy policy).
• OAuth providers (e.g. Google): when you use “Sign in with Google”, their terms and cookies apply.

6. How to manage or disable cookies

You can change your choice at any time by removing the as_cookie_consent key from your browser’s local storage; the notice will appear again on your next visit.

You can also configure your browser to block or delete cookies. Blocking essential cookies may prevent sign-in or use of parts of the site.

• Chrome: Settings → Privacy and security → Cookies and other site data.
• Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Safari: Preferences → Privacy → Manage Website Data.
• Edge: Settings → Cookies and site permissions.

7. Legal basis and retention

Strictly necessary cookies rely on legitimate interests and on performing the contract or service you request (account access, security).

Non-essential cookies (analytics and marketing via GTM) are used only with your consent, which you may withdraw at any time.

Retention depends on each cookie; session cookies are removed when you close the browser; persistent ones last for the periods in section 3 or until you delete them.

8. Changes to this policy

We may update this Cookie Policy to reflect legal or technical changes. We will publish the revised version on this page with a new “Last updated” date.

If changes are material, we will notify you through a visible notice on the site or by other reasonable means.