Cookie Policy.
This policy explains the cookies and similar storage technologies that ComplyRUO uses across its marketing site (complyruo.com), the merchant portal (app.complyruo.com), the affiliate portal (affiliates.complyruo.com), and the operator console. “ComplyRUO,” the “Service,” the “Company,” “we,” “us,” or “our” means Cevgate LLC, an Arizona limited liability company, doing business as ComplyRUO. It forms part of our Privacy Policy.
Contents
1.What cookies and local storage are
Cookies are small text files a website stores on your device. “Local storage” and “session storage” are similar browser features that let a web application keep small pieces of data on your device. ComplyRUO relies mainly on browser local storage and session storage rather than traditional cookies. We group these by purpose: essential (required for the service to work and to keep you signed in), functional (remember a preference or a referral), and security (set by our infrastructure provider to protect the service).
2.What we use and why
The table below lists the storage set on our sites. The portal items are first-party and are not used for advertising; the Google items run on the public marketing site, and at the single moment you finish sign-up, and are described in Section 4.
| Name | Where | Type | Purpose | Retention |
|---|---|---|---|---|
| cruo_session | Merchant portal | Essential (local storage) | Holds your merchant portal session token so you stay signed in. It is a bearer token, not a cookie, so it is never sent automatically to other sites. | Until sign-out or expiry |
| cruo_aff_session | Affiliate portal | Essential (local storage) | Holds your affiliate portal session token. Kept separate from the merchant session so the two portals sign in independently. | Until sign-out or expiry |
| cruo_admin_token | Operator console | Essential (session storage) | Holds the operator token for the internal admin console. Cleared automatically when the browser tab closes. | End of session |
| cruo_ref, cruo_ref_at | Sites and portals | Functional (local storage) | Remembers an affiliate referral code from a ?ref= link, first-touch, so a referral is correctly attributed at signup. | Approximately 90 days |
| _ga, _ga_* | Marketing site only | Analytics (Google Analytics) | Distinguishes visitors to measure site and campaign performance. Not set in the portals or at checkout. | Up to 2 years |
| _gcl_au, _gcl_aw | Marketing site and the sign-up step | Advertising (Google Ads) | Lets Google Ads measure ad-click conversions and build remarketing audiences. Turned off when you opt out (Section 4) or send a Global Privacy Control signal. Google may also set its own cookies on its domains under its policy. | Up to 90 days |
3.Third-party and security cookies
Our infrastructure provider, Cloudflare, may set strictly necessary security cookies (for example a bot-management cookie) to protect the sites from abuse and to keep them available. Payment pages are served by Stripe; when you reach a checkout, Stripe may set its own cookies under its own privacy policy to process the payment and prevent fraud. We do not control these providers’ cookies beyond choosing to use their services. See our Subprocessors list.
4.Advertising and analytics, and your opt-out
On our public marketing site (complyruo.com), we use Google Analytics and the Google Ads tag (the Google “global site tag,” gtag.js) to understand how visitors find and use the site, to measure which ads lead to sign-ups, and to show our ads to people who have already visited (remarketing). Separately, at the single moment you finish creating an account in the merchant portal, we load the Google Ads tag once to record an “account created” conversion, so we can tell which ads led to a sign-up. These tags may set the cookies listed in Section 2 and may send online identifiers (such as a cookie ID, device and browser information, and the pages you view) to Google, which processes that data under its own privacy and advertising policies. Apart from that one conversion at sign-up, we do not run these tags in the merchant portal, the affiliate portal, the operator console, or at checkout.
Under the California Consumer Privacy Act as amended and other United States state privacy laws, using these advertising tags can be treated as “sharing” personal information for cross-context behavioral advertising. We do not sell personal information for money. You can opt this browser out at any time, and we honor an enabled Global Privacy Control (GPC) signal automatically as an opt-out. We use Google Consent Mode to turn the advertising signals off when you opt out.
Do Not Sell or Share My Personal Information. Use the control below to opt this browser out of the Google advertising tags. Your choice is saved on this device, so repeat it on other browsers or devices, or enable Global Privacy Control to opt out everywhere automatically.
5.Do Not Track and Global Privacy Control
Some browsers and extensions can send a “Do Not Track” (DNT) signal or a Global Privacy Control (GPC) signal that tells a website you do not want your personal information sold or shared. As described in Section 4, our marketing site uses Google advertising tags that can amount to “sharing” personal information for cross-context behavioral advertising. We honor an enabled GPC signal as a valid opt-out of that sharing: when GPC is present, we automatically turn the Google advertising signals off for that browser, the same as if you used the opt-out control in Section 4. Because there is no industry-wide standard for interpreting DNT signals, we treat an enabled GPC signal as the controlling opt-out, and the portals and operator console stay limited to essential, functional, and security storage regardless of whether any such signal is present.
6.Consent and legal basis
For the signed-in portals and the operator console, the storage in Section 2 needs no separate consent: essential and security storage is strictly necessary to provide the Service you requested, including signing you in, keeping you signed in, and protecting the Service from abuse, and functional storage (the referral item) is set on our legitimate interest in correctly attributing referrals. The Google advertising and analytics tags on our public marketing site operate on a United States opt-out basis: they run by default, and you may opt this browser out at any time using the control in Section 4 or by enabling Global Privacy Control, which we honor automatically. By continuing to use the marketing site without opting out, you consent to those tags. We will add a prior opt-in consent mechanism for advertising cookies if and where one is legally required for the visitors we serve. By continuing to use the sites and portals, you accept this Cookie Policy and the storage described in it.
7.How to control cookies
You can clear or block cookies and clear local storage through your browser settings, and you can use private or incognito mode. Because the items in Section 2 are essential to signing in, clearing them will sign you out, and blocking them may prevent the portals from working. Clearing the referral item before you sign up may mean a referral is not attributed.
8.Changes and contact
We may update this Cookie Policy from time to time and will revise the date above. Questions can be sent to support@complyruo.com.