Cookies and privacy

Necessary storage

c2e.consent saves your chosen categories and an expiry day for up to 180 days. It has no personal identifier. Invalid or expired choices leave optional features off and ask again.

c2e.sid supports sign-in/session security and request protection where enabled features require it. The configured session lifetime is 14 days, renewed with use. It is HttpOnly and Secure on the live HTTPS site. Rejecting optional categories does not sign you out.

The site's network/security services may also process technical requests to deliver and protect the website. These controls do not disable necessary hosting/security.

Checkout and payment records

When checkout is active, the necessary c2e.sid session also protects checkout requests and access to your payment attempt. Payment details are entered on Stripe’s hosted checkout after you choose to continue. The checkout page and its availability check do not enable optional site analytics or inquiry forms.

C2E Studio’s payment ledger records provider identifiers, amounts, currency, payment status and evidence hashes, with approved customer or service references where needed. It does not store card details or raw webhook payloads. Payment is separate from consent and does not activate a service or set a hosting start date. Payment ledger records currently have no automatic deletion schedule.

Optional site analytics

If allowed, our own system records successful public HTML visits, offer clicks and native form submission acknowledgments. It records fixed page paths and timestamps; page visits also include a referring hostname, broad browser/device categories and a daily pseudonymous visitor key derived from IP address, browser information, date and the site secret. These analytics do not include your form name, email, website or message. There is no third-party site analytics service added for this feature.

Accounts, admin traffic and API/assets are excluded from pageview counts. Acknowledgments do not establish that HubSpot accepted a lead. Existing analytics records have no automatic deletion schedule; dashboard date ranges are reporting windows, not retention limits. Rejecting or withdrawing analytics stops future collection after reloading, without deleting historical records. Request security and hosting logs are separate from optional site analytics.

Hosted starter page counts

Hosted starter pages use the same optional analytics choice. Only consent-eligible successful HTML page requests are counted, with known bots, prefetches, assets and downloads excluded. These pages store a starter identifier, UTC date and daily count, plus the collection start; no visitor hash, IP, browser profile, referrer or query string is stored for these counts. Repeated navigations and successful cache revalidations can count again. Counts are consent-limited, best-effort page requests, not unique visitors, impressions or Facebook clicks. Historical traffic before collection started is unknown. Accepting analytics affects subsequent page requests and does not replay earlier activity. Global Privacy Control and Do Not Track leave starter counting off. Portable offline ZIP copies have no analytics dependency. Reporting date ranges are not deletion schedules.

Optional game activity counts

If you allow site analytics, sharing controls can count successful link copies, embed-code copies, completed native shares and genuine game starts. External embedded games ask separately for this document only; that choice is not saved as a cookie. Games remain playable when you decline, and Global Privacy Control leaves this collection off.

Game counts use fixed game IDs, UTC dates, event totals and a public referring hostname when available. Query strings, full referring URLs, raw IP addresses and persistent player identifiers are not stored in this game report. Short-lived signed contexts and hashed receipts prevent duplicate load/start counts. Game aggregates are retained for 90 days; receipts expire shortly after their 15-minute contexts. Hosting and security logs are separate and may contain technical request information.

Consent withdrawal stops future game events. Activity before consent is not replayed. Long sessions stop reporting when their context expires; historical activity before instrumentation is unavailable rather than reported as zero.

Optional HubSpot inquiry forms

If allowed, the form loads automatically without another load button. The entire external embed is gated: its scripts, frames, provider cookies, Free branding and technical telemetry. Choosing forms does not enable our site analytics. No marketing subscription is requested by this form.

HubSpot receives details you submit and technical submission information, and applies its own filtering. During testing the embed contacted hsforms.net, hsforms.com, hsappstatic.net and hubspot.com subdomains for forms, assets, branding and telemetry. Secure HttpOnly __cf_bm cookies were observed on provider domains; Cloudflare describes them as bot-protection cookies that expire after 30 minutes of inactivity. These are part of the optional external service, not a reason to load the whole embed without your choice. Provider behavior may vary by browser/configuration.

HubSpot's cookie information · Cloudflare's cookie information

If you reject forms, the site and playground remain usable. The hosted form link is a deliberate navigation to HubSpot, where its own cookies and privacy terms apply; it is not a cookieless alternative.

Changing your choices

When you withdraw an optional category, we remove its embedded form where applicable and reload the page to stop previously loaded scripts and future site events. Requests already in flight may complete. We cannot remove HttpOnly or third-party provider cookies from this site, or delete historical HubSpot/analytics records through the preference control. Your browser settings can remove stored cookies.

This notice describes this site's observed implementation. It is not a certification of legal compliance. Retention and provider settings should be reviewed as the business evolves.