Cookie & Tracking Notice

1. Current position

We use the measurements described below to understand page visits, acquisition, downloads, and browser-to-desktop handoffs. We will update this Notice and provide an additional choice before using a technology where applicable law requires one.

2. Website requests and operational logs

When you request a page, our hosting and security infrastructure receives technical information needed to deliver and protect it. This can include your IP address, user agent, requested URL, referral information sent by your browser, timestamps, and security or error signals. These are server and network logs, not advertising profiles.

We use this information to route traffic, prevent abuse, investigate errors, maintain availability, and comply with legal obligations. We do not use it to follow you across unrelated sites.

3. Public-site product analytics

Avalon records a closed set of events: classified page and path, referring domain, allowlisted UTM campaign values, bounded page-duration range, selected call-to-action class and placement, and whether a browser-to-desktop handoff was presented or attempted successfully. We do not put URL query strings or fragments, handoff tokens, resource identifiers, form values, page content, or source IP addresses in these product events.

Cloudflare's coarse country signal determines the telemetry region without retaining the country or IP address. An affirmative EU-country request stays in Avalon's EU Cloudflare resources and uses no persistent browser analytics identifier. A Global request may store a random first-party anonymous identifier in local storage so separate page visits can form one acquisition funnel; Global events may be processed in Avalon's US PostHog project. The site flow does not identify this browser as an Avalon account or copy names and email addresses into site events.

4. Avalon desktop storage

The Avalon desktop application may store limited preferences on your device, such as interface dimensions and device-level settings, using local storage or equivalent application storage. These preferences are not browser cookies and are not used for cross-site advertising. Authentication secrets and connector credentials use separate protected mechanisms described in our Security Policy.

5. Links and connected services

Avalon links to and can connect with services operated by other companies. Those services may use their own cookies, SDKs, pixels, logs, or similar technologies under their own notices. When you open a provider’s site or authorize a connection, review that provider’s choices and controls. This Notice does not govern their independent tracking.

6. Browser signals and privacy choices

Some browsers send “Do Not Track” or Global Privacy Control signals. Avalon does not sell personal information or share it for cross-context behavioral advertising, so there is no advertising sale or advertising-sharing operation to disable in response. We will honor legally applicable browser signals.

You can clear or block site storage and limit referral information using your browser or device settings. If local storage is unavailable, the site remains usable and product measurement fails independently.

7. Changes and contact

We may update this Notice when our site or desktop storage changes. We will change the effective date and provide a consent control if required. Questions can be sent to privacy@with-avalon.com. For broader data practices, see the Privacy Policy.