Effective: September 22, 2026
This Cookie Policy describes the cookies and similar technologies used by the Tech Pathway Scorecard and related products operated by Real Kube LLC. It complements our Privacy Policy.
Analytics and advertising scripts are consent-gated. They do not load until you grant consent via the consent banner. If you reject all optional consent, no analytics or advertising cookies are set and no tracking scripts are loaded. You can change your preferences at any time using the consent banner.
The following cookies are set on the app's own domain by third-party scripts (Google Analytics, Meta Pixel) only after you grant consent. The scripts themselves are loaded from third-party CDNs (googletagmanager.com, connect.facebook.net), but the cookies they create are first-party cookies on this app's domain — they are not set on Google or Meta domains. If you do not consent, these scripts never load and these cookies are never set.
The SameSite, Secure, and HttpOnly attributes shown are typical defaults for these cookies. Actual attributes should be verified by inspecting cookies in your browser's developer tools on a page where the scripts have loaded after granting consent.
| Name | Provider | Purpose | Category | Duration | Domain / Origin |
|---|---|---|---|---|---|
| _ga | Google Analytics | Client identification — distinguishes unique visitors. Set on the app's own domain by the GA4 script (loaded from googletagmanager.com) running in the page context. | Analytics | 2 years | First-party (app domain) |
| _ga_<measurementId> | Google Analytics | Session state — maintains session state across pages. Set on the app's own domain by the GA4 script. | Analytics | Session | First-party (app domain) |
| _fbp | Meta / Facebook | Browser ID — identifies your browser for ad attribution. Set on the app's own domain by the Meta Pixel script (loaded from connect.facebook.net) running in the page context. | Advertising | 90 days | First-party (app domain) |
| _fbc | Meta / Facebook | Click ID — stores the fbclid parameter from Meta ad clicks. Set on the app's own domain by the Meta Pixel script. | Advertising | 90 days | First-party (app domain) |
Note: The fr cookie (Meta retargeting) is not listed because it has not been observed on this app's domain. It may appear on Meta's own domain when retargeting is active. Verify by inspecting cookies in your browser if needed.
The Service uses browser local storage and session storage (not cookies) to remember your preferences and assessment progress. These items are stored on your device and are not sent to third parties:
| Name | Type | Purpose | Category | Duration | Origin |
|---|---|---|---|---|---|
| tp_consent | localStorage | Stores your consent choices (analytics, advertising, functional). NOT a cookie — browser local storage on the app domain. | Consent | Until withdrawn or cleared | First-party (app domain) |
| theme | localStorage | Stores your dark/light mode preference | Functional | Persistent | First-party |
| sidebar-collapsed | localStorage | Stores whether the app sidebar is collapsed | Functional | Persistent | First-party |
| tp_anon_answers | localStorage | Stores anonymous assessment answers before account creation. 7-day TTL — automatically cleared after 7 days. | Functional | 7 days (TTL) | First-party |
| tp_anon_quick_answers | localStorage | Stores anonymous Quick Scorecard answers before account creation. 7-day TTL. | Functional | 7 days (TTL) | First-party |
| tp_anon_insight_seen | localStorage | Tracks whether the preliminary insight has been shown. 7-day TTL. | Functional | 7 days (TTL) | First-party |
| tp_pending_name | localStorage | Stores the name entered during the scorecard before registration. 7-day TTL. | Functional | 7 days (TTL) | First-party |
| tp_attribution | sessionStorage | Stores UTM params, landing page, referrer, and (with consent) _fbp, _fbc, and GA client ID for purchase attribution | Analytics / Advertising | Session | First-party |
| tp_purchase_fired | sessionStorage | Prevents duplicate purchase events for the same transaction | Functional | Session | First-party |
| tur_test_access_active | sessionStorage | Admin-only test-access mode flag | Functional | Session | First-party |
In addition to browser cookies, we send server-side events to Google Analytics 4 (Measurement Protocol) and Meta (Conversions API) after verified purchases. These events include transaction IDs, product keys, purchase amounts, and (for Meta) hashed email addresses and advertising identifiers.
Server-side events are consent-gated. Your consent choice is captured as an immutable snapshot on your payment record at checkout time. Server-side GA4 events are sent only when you granted analytics consent. Server-side Meta CAPI events are sent only when you granted advertising consent. A retry never overrides a denial or withdrawal, and events are never sent retroactively after consent is later granted.
To change your server-side tracking preferences, withdraw consent using the consent banner or submit a request on our Privacy Request page.
The following consent-related records are stored in the server database (Base44):
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ConsentRecord | Server database | Immutable append-only audit trail — one record per consent action (grant or withdrawal). Preserved indefinitely. | Indefinite |
| UserConsent | Server database | Current-state consent record — the effective consent settings used for enforcement. One record per user. | Until updated |
| PaymentRecord (consent snapshot) | Server database | Immutable checkout-time consent snapshot stored on each payment record. Used to gate server-side analytics events. | Retained with payment record |
The following data is transmitted to external APIs after a verified purchase, subject to your consent choices:
| Name | Purpose | Consent Required |
|---|---|---|
| GA4 Measurement Protocol | Server-side purchase events sent to Google Analytics 4. Sent only when analytics_consent=true. | Analytics |
| Meta Conversions API | Server-side purchase events sent to Meta. Sent only when advertising_consent=true. Includes hashed email and _fbp/_fbc only with advertising consent. | Advertising |
| CCM / GoHighLevel | Contact synchronization and workflow triggering after purchase. Required-service data syncs without marketing consent; marketing workflows require marketing consent. | CRM |
Browser settings: You can block or delete cookies in your browser settings:
Ad blockers: Browser extensions like uBlock Origin or Privacy Badger can block the Google Analytics and Meta Pixel scripts.
Meta ad preferences: Manage how Meta uses your data for ads at facebook.com/ads/preferences.
Google Ads settings: Manage ad personalization at ads.google.com/optout.
Opt-out request: Submit a request on our Privacy Request page to opt out of targeted advertising and server-side tracking.
Questions about this Cookie Policy? Contact info@theuntaughtrules.com.
We use cookies for strictly necessary functions (authentication, checkout, security), and — only with your permission — for analytics and advertising. You can change your choices anytime. See our Cookie Policy.