Cookies

Purposes and current activation

Necessary

Necessary storage supports authentication, security and remembering your cookie choice, including a first-party HttpOnly consent capability that starts denied. It is always active and is not an optional consent category.

Analytics

Optional analytics helps us understand use of public pages through the configured Google Analytics destination. It requires analytics permission and does not include private learning, messages or account content.

Marketing

Optional marketing measures advertising activity on reviewed public pages and the join page through the configured Meta and Google Ads destinations: page views, join-page views and, with current marketing permission and no Global Privacy Control, checkout starts, verified initial purchases and confirmed free sign-ups sent to Meta from our server. A confirmed free sign-up is sent once, when a free account first enters the club after confirming its email in a browser with this permission. Outside the EEA, the United Kingdom and Switzerland this measurement is on by default with a visible notice and an opt-out; in those regions, and where your location is unknown, it stays off until you accept. Matching may include the normalized SHA-256 hashed email of your checkout or free account (pseudonymous, not anonymous), validated Meta click/browser identifiers and a bounded request user agent. No renewals, historical imports or private-page activity. Opting out or withdrawing stops future delivery and clears pending matching data; already sent events cannot be recalled. Server consent lasts at most 90 days, pending events at most 24 hours, and operational records become eligible for cleanup after 90 days. Actual deletion requires a verified cleanup schedule.

Where you are decides how optional cookies start

If your visit reaches us from outside the EEA, the United Kingdom and Switzerland, analytics and ad measurement are on by default and a short notice at the bottom of the page says so. To opt out, press Opt out in that notice, or open Cookie settings and choose Necessary only or Withdraw optional consent. This records a rejection and stops tracking from the next page. Visitors in the EEA, the United Kingdom and Switzerland, and visitors whose country we cannot read, see the cookie banner and nothing optional runs until they accept. The country comes from our hosting provider's edge network and is not stored with your choice. Global Privacy Control turns marketing off everywhere, and the default never replaces a choice you have already made.

Google Analytics is the intended analytics recipient; Google Ads and Meta are intended marketing recipients. No optional vendor runs merely because you save a choice. Activation also requires the exact theleverageclub.ai host, an explicit enable flag, validated destination IDs, and verified provider terms, transfer safeguards and retention settings. Missing or invalid configuration leaves integrations off.

Browser measurement is limited to the home page, the join page and five reviewed public course syllabuses and their index. On the join page Meta receives a page view and a ViewContent event for the membership offer; nothing about your account, email or payment is sent from the browser. Private lessons, notes, messages and account content are excluded. With marketing permission and separately verified activation, our server can send Meta a checkout-start event, a verified initial purchase, including the actual paid amount and currency, and a free sign-up event the first time a confirmed free account enters the club. Renewals and activity from before consent are excluded. Cookie choices are separate from email preferences; optional email dispatch remains paused. Server event delivery and record cleanup are separate operations: enabling advertising measurement does not enable automatic record deletion. The cleanup limits and current scheduling status are explained below and in our Privacy policy.

Meta matching can use the verified email of your checkout or free account normalized and hashed with SHA-256, your request's browser information, and valid Meta click/browser identifiers (_fbc and _fbp). Hashing is pseudonymisation, not anonymisation: Meta may match it to a person. We collect these identifiers only after recorded marketing permission. No email matching runs in the browser. We do not add names, phone numbers, addresses, card details, client IP addresses or private content to server advertising events. Browser connections to Meta necessarily disclose connection metadata, including the IP address, to Meta.

Necessary browser storage

Sign-in storage keeps your authenticated session between visits and is cleared on sign-out. Display and learning preferences support the member experience. Consent storage records your independent preferences: the primary key is tlc.consent.v1, with consent-owned receipt, retry and revocation keys under tlc.consent.v1. We do not clear unrelated browser storage when you withdraw.

A Secure, HttpOnly, first-party cookie (__Host-tlc-marketing) allows our server to apply your current permission or refusal to this browser. It starts denied, expires after at most 90 days and is not itself advertising permission. With marketing permission, its separate server session can be associated with your owned checkout. The raw capability is unavailable to browser scripts; only its hash is stored in our database.

Your browser choice lasts 90 days. Missing, invalid, expired or outdated evidence leaves optional integrations off. Superseded consent evidence is removed in bounded batches while the site is active. This is not a promise that every old key disappears immediately. You can also remove site storage through your browser.

On /preview and on local or editor hosts, choices are clearly labeled as a preview, remain in memory and reset on reload. They send no receipt or measurement requests and do not read or change your saved live-site choice.

Choice receipts and retention

On the live domain, saving or withdrawing sends a first-party request to /api/consent. It contains the policy version, purpose choices, action and a random request identifier. A receipt adds a random receipt identifier and recording and expiry timestamps. It contains no email, account ID, browsing history, raw page URL or referrer, or private content. This describes the receipt body, not the separate consent-session and checkout association used for marketing measurement.

ANDERSSEN processes these records through the site server and Supabase database to remember choices and document consent and withdrawal. The endpoint does not require sign-in. Hosting infrastructure necessarily handles connection metadata such as IP addresses; this is distinct from the receipt body.

Browser choices last 90 days. First-party receipts become eligible for cleanup after 180 days. Receipt cleanup is not scheduled: actual deletion requires an operator to run and verify the cleanup command. These are product retention policies, not statutory guarantees. Meta's Business Tools Terms allow event-data retention for up to two years; this is separate from our first-party storage. Other provider log and optional Google retention settings have not yet been verified.

Marketing permission expires after at most 90 days. Revocation or observed expiry suppresses undelivered events and clears associated matching data. Pending conversion events are limited to 24 hours; completed or terminal events retain only operational identifiers and status, eligible for cleanup after 90 days. A cleanup schedule must be installed and verified before we can promise a deletion time. Provider retention settings are separate and remain an activation check.

If recording fails, settings show an error. New optional grants stay off until recorded. Necessary only turns optional cookies off immediately; a recording failure does not ask you to consent again. You can review your choices and retry. A locally effective refusal is not a successful server receipt. If the service is unreachable, a local refusal cannot immediately update the server; retry in Cookie settings. Failed browser storage may prevent it surviving a reload. Browsers without supported cross-tab locking cannot enable new optional grants, but Necessary only remains available.

Changing your mind and Global Privacy Control

Open Cookie settings from the public footer, any legal page, the regional notice or account email preferences. Save either purpose independently, reject both, or use “Withdraw optional consent”. Close or Escape leaves unsaved changes unapplied.

Outside the EEA, the United Kingdom and Switzerland, optional analytics and marketing start on by default with a visible notice. Opting out at any time records a rejection and stops future tracking. The default never applies with Global Privacy Control, where your location is unknown, or after you make your own choice.

Global Privacy Control blocks marketing, including an earlier marketing grant, and preserves your analytics choice without enabling it. A new explicit choice is required to enable marketing after the signal disappears.

Withdraw optional analytics and marketing permission to stop future tracking. This does not delete data already sent to a provider. Withdrawal stops future optional use; it cannot undo completed requests, delete a provider's existing records or guarantee removal of every third-party cookie. Use browser site-data controls and provider privacy tools, or contact us about deletion. Failed browser storage can prevent choices surviving a reload or reaching another tab.

External video players

YouTube, Vimeo and Loom embeds start as a local explanation and “Load this video” button. No provider iframe, thumbnail or preconnection is created before that action. After loading, the provider receives your IP address, browser details and site origin and may store cookies. The explicit iframe referrer policy shares the origin, without a private lesson path or query.

Requesting a player is independent of analytics and marketing consent. Switching lessons resets the player request. Videos do not autoplay. Relative first-party videos use the browser's native controls with preload disabled. Other HTTPS video addresses open through a labeled external link under that site's own policy.

The actual lesson video host, its legal entity, processing locations and retention terms remain to be confirmed. This page does not certify provider playback or promise that a privacy-enhanced player makes no requests after loading.

Contact and outstanding provider checks

ANDERSSEN, organisation number 936 664 792. Business address: Nedre Åsvei 36, 1341 Slependen, Norway.

Privacy requests: privacy@theleverageclub.ai. Member support: support@theleverageclub.ai.

Meta dataset 2241123776677595 and its processing and transfer terms were reviewed on 15 September 2026. Automatic matching, automatic events and extra page/product collection are off. Google destinations remain unconfigured; other outstanding provider checks are listed in the Privacy policy. No optional vendor activation is authorized by this page.