AI Gateway HQ
Public website privacy

Cookies and Storage Notice

Optional Google Analytics is off until you allow it. AI Gateway HQ does not use advertising cookies on the public website, and the customer and staff consoles never load the public analytics tag.

EffectiveSeptember 11, 2026 · analytics-2026-09-11-v1

1. Your choice

The public website asks before loading optional Google Analytics. Allow analytics and Keep disabled are presented together. Declining does not block the website, sign-up, documentation, pricing, or contact forms.

The Privacy choices link in the footer reopens the control at any time. Withdrawing permission disables further measurement, removes Google Analytics cookies that the site can access, and clears campaign attribution from the current browser tab. A Global Privacy Control or Do Not Track signal keeps analytics disabled and is not overridden.

2. Essential preference storage

  • aighq.analytics-consent.v1 stores only granted or denied in this browser so the site can honor the choice.
  • aighq.analytics-consent-evidence.v1 stores the notice version, choice, decision time, and expiry time in this browser. It contains no name, email, account, organization, IP address, prompt, model response, or customer identifier.
  • aighq_analytics_consent mirrors only granted or denied in a first-party SameSite=Lax cookie. The preference expires after 180 days, after which the site asks again before enabling analytics.

3. Optional analytics storage

If you allow analytics, the public site loads Google Analytics and may set _ga and _ga_<measurement-id> first-party cookies. Google documents these cookies as distinguishing visitors and preserving session state, normally for up to two years. AI Gateway HQ configures advertising storage, ad user data, ad personalization, Google signals, and ad-personalization signals as denied or disabled.

aighq.campaign-attribution.v1 may temporarily retain an allowlisted campaign name and source in the current browser tab after analytics is allowed. It expires when that tab session ends and does not contain a visitor, account, customer, organization, payment, prompt, request, or provider identifier.

4. Separate service and sign-in storage

Security, load-delivery, sign-in, payment, and authenticated service storage is necessary to provide an action a user requests and is not used for public advertising measurement. Identity providers, payment processors, and customer-selected model providers can operate their own domains under their own notices.

The public Google Analytics tag is disabled on customer, staff, and partner console paths. Authenticated operational telemetry is kept separate from the public analytics stream.

5. Questions and requests

AI Gateway HQ LLC controls the optional public-site analytics described here. Use the secure privacy request form linked below to ask about access, correction, deletion, restriction, portability, objection, consent withdrawal, or another applicable privacy right. Do not include passwords, authentication codes, provider credentials, payment-card data, prompts, or model responses.