Privacy controls
Cookie Policy
Effective from: 12 July 2026
This policy explains the cookies, pixels, browser storage and similar technologies that may operate on peakstreak.app. It should be read with our Privacy Policy.
Current build status: no optional analytics or advertising provider ID is configured. The consent banner is active and ready, but no provider pixel is loaded. We will ask again when a provider is enabled.
1. Your choice comes first
Optional analytics and marketing technologies are off by default. “Accept all” and “Reject all” are offered on the first layer, optional switches are not pre-selected, and refusing does not limit access to the website or app. Google receives Consent Mode v2 signals for analytics_storage, ad_storage, ad_user_data and ad_personalization. Under our strict/basic implementation, the Google library is not fetched until a matching category is accepted.
The Meta and TikTok libraries are not requested before marketing consent. Private /i/… app-link routes never mount website analytics or advertising tags because those URLs may contain invitation tokens.
2. Necessary consent record
| Name | Purpose | Duration |
|---|---|---|
| ps_cookie_consent | Stores the consent revision, accepted categories and consent timestamps locally in the browser. It is not an advertising identifier and is not sent to the pixel providers. | 180 days |
3. Optional providers
“Configured” below means the public provider identifier is present in this exact website build. A configured provider still remains blocked until the visitor grants its category.
Analytics
Google Analytics 4
- Technology
- _ga and _ga_* first-party cookies
- Typical duration
- Up to 2 years, subject to the retention configured in Google Analytics.
- Purpose
- Page, campaign-source, device-category, and engagement measurement.
- Data scope
- Page path, allowlisted campaign parameters, referrer, device/browser information and IP address processed by Google. No Peak Streak account ID or private app-link token.
Marketing
Google Ads
- Technology
- _gcl_* cookies and Google advertising click identifiers
- Typical duration
- Typically up to 90 days, depending on the advertising setting.
- Purpose
- Paid-campaign attribution and configured app-handoff conversion measurement.
- Data scope
- Campaign/click identifiers, public page path, coarse device/browser context and allowlisted conversion context.
Marketing
Meta Pixel
- Technology
- _fbp and _fbc cookies plus the Meta Pixel
- Typical duration
- Typically up to 90 days.
- Purpose
- Campaign attribution, conversion measurement, delivery optimization and audiences.
- Data scope
- Public page visit, campaign/referrer context, browser/device information, IP address and allowlisted conversion events. Advanced matching and Peak Streak account identifiers are not sent by this website.
Marketing
TikTok Pixel
- Technology
- _ttp, ttcsid_*, ttclid and the TikTok Pixel
- Typical duration
- Up to 13 months according to TikTok Pixel documentation.
- Purpose
- Campaign attribution, conversion measurement, delivery optimization and audiences.
- Data scope
- Public page visit, campaign/referrer context, browser/device information, IP address and allowlisted conversion events. Peak Streak account identifiers and private app data are not sent.
Analytics
Vercel Web Analytics / Speed Insights
- Technology
- Browser performance and aggregate visit telemetry
- Typical duration
- Request/session telemetry under the configured Vercel service.
- Purpose
- Aggregate traffic and Core Web Vitals measurement.
- Data scope
- Public page and technical browser/performance information. These modules are injected only after analytics consent.
4. Change or withdraw consent
You can change a category as easily as you granted it. Use the permanent “Cookie settings” control in the footer or the button below. Withdrawing a category updates the provider consent signal, stops future allowlisted website events and removes the first-party cookies that this site can delete. A provider may retain earlier information for the period and lawful purposes explained in its notice.
5. Search Console and necessary delivery
Google Search Console ownership verification does not measure visitors and does not require consent. It uses a DNS record or a verification meta value in the homepage. Standard hosting, TLS, security headers and abuse protection may process IP address and request information as necessary to deliver and protect the site; those operations are not optional advertising pixels.
6. Changes and contact
The deployed provider set is part of the consent revision. Activating a provider automatically invalidates the earlier choice and asks again; material purpose or category changes also require a policy-revision increase. Questions or privacy requests can be sent to hello@peakstreak.app.