Cookie Policy

1. What are cookies

Cookies are small text files placed on your device by a website. Similar technologies include local storage and session storage.

Cookies may be first-party (set by aureum-eo.ai) or third-party (set by another domain such as Google). They may be session cookies or persistent cookies.

2. Legal basis

Under the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, strictly necessary cookies do not require consent.

Analytics cookies, the OpenAI Ads Measurement Pixel, the Reddit Ads Pixel / Conversions API, and the Meta Pixel / Conversions API are non-essential. We set Consent Mode defaults to denied and only enable measurement after you click Accept all on our cookie banner.

3. Cookies and storage we use

The following describes cookies and browser storage used on the Aureum marketing site.

• aureum_cookie_consent_v1 (first-party cookie, preference): Stores your Accept or Decline choice for up to 365 days so we do not re-prompt every visit. Set when you use the cookie banner.
• Vercel / Cloudflare infrastructure cookies (first-party or edge, strictly necessary): Used for security, load balancing, and delivering the site. Essential to operate the service.
• Google Analytics 4 cookies (third-party / Google, analytics — consent required): Set only after Accept. Used for anonymous measurement of page views and how visitors find Aureum. Measurement ID G-LNL9FT2169.
• aureum_utm (first-party cookie, analytics, consent required): Last-touch UTM parameters from the landing URL, set only after Accept. Attached to form submissions so we can attribute lead sources.
• __oppref (first-party cookie, advertising attribution): Set by the OpenAI Ads Measurement Pixel when you arrive from a ChatGPT ad so later conversions can be attributed. Measurement event pings to OpenAI are sent only after Accept.
• aureum_rdt_cid (first-party cookie, advertising attribution): Stores the Reddit click id (rdt_cid) from a Reddit ad landing URL so later conversions can be attributed. Reddit Pixel init, PageVisit, and conversion events (browser + Conversions API) run only after Accept.
• Reddit Pixel cookies (third-party / Reddit, advertising, consent required): Set by Reddit's pixel.js after Accept (for example _rdt_uuid). Used with our Conversions API events and a shared conversion id so Reddit can attribute contact messages, briefing unlocks, and accounts created from an ad click.
• aureum_fbclid (first-party cookie, advertising attribution): Stores the Meta click id (fbclid) from a Meta ad landing URL so later conversions can be attributed. Meta Pixel init, PageView, and conversion events (browser + Conversions API) run only after Accept.
• Meta Pixel cookies (third-party / Meta, advertising, consent required): Set by Meta's fbevents.js after Accept (for example _fbp and _fbc). Used with our Conversions API events and a shared event id so Meta can attribute contact messages, briefing unlocks, and accounts created from an ad click. The click id is also carried on the sign-up link so a completed account can be matched to the ad.
• Session storage used by the site UI (strictly necessary): Temporary state for the current tab. Cleared when the tab closes.

4. Consent Mode and the banner

We load Google’s gtag.js with Consent Mode v2 defaults set to denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage.

Until you accept, Google may receive cookieless pings only (no analytics cookies, no advertising identifiers). After Accept, we update consent to granted and analytics may store cookies. After Decline, we keep consent denied and remember that choice.

The OpenAI Ads Measurement Pixel (oaiq) loads with measurement consent denied until Accept. After Accept, we send conversion events such as lead_created when you submit a contact form. We respect Do Not Track and Global Privacy Control for these events as well.

The Reddit Ads Pixel stub may load early so we can queue calls and store rdt_cid, but we do not initialise the pixel or send Reddit conversion events until Accept. After Accept, we may send Lead and ViewContent via the pixel and the server-side Conversions API (with hashed email and technical match keys). We respect Do Not Track and Global Privacy Control for these events as well.

The Meta Pixel stub may load early so we can store fbclid and initialise the pixel under Meta Consent Mode (consent revoked), which queues PageView without setting advertising cookies or sending events until Accept. After Accept, we grant consent so queued PageView and later Lead, ViewContent, Contact, and CompleteRegistration events may send via the pixel and the server-side Conversions API (with hashed email and technical match keys). We respect Do Not Track and Global Privacy Control for these events as well.

5. What we do not use

• We do not use Google Ads or other social media advertising pixels on the marketing site beyond the OpenAI, Reddit, and Meta measurement tools described above, unless and until we enable them behind the same consent controls.
• We do not use Mixpanel on the marketing site. Website measurement is Google Analytics.
• We do not sell cookie data to data brokers.

6. Managing cookies

Use Accept all or Decline on the banner. To reset your choice, clear cookies for aureum-eo.ai (including aureum_cookie_consent_v1) and reload the page.

You can also block or delete cookies in your browser settings. Blocking essential cookies may affect site reliability.

7. Changes

We may update this Cookie Policy when our stack changes. The "Last updated" date will reflect revisions. Material changes to non-essential cookies will keep the consent banner in place.

8. Contact

Questions: contact@aureum-eo.ai. Aureum EO Ltd, 167–169 Great Portland Street, London, England W1W 5PF.

Your privacy choices

Analytics and advertising cookies are off until you accept the cookie banner.