Cookies & Tracking
Every tool that runs on this site, named, with what it collects and how to shut it off.
Last updated
August 12, 2026
| Tool | What it is for | What it collects |
|---|---|---|
| Microsoft Clarity | Session replay and heatmaps | Records a playback of the pages you view — mouse movement, scrolling, clicks and taps — plus your approximate location from IP, browser and device type. Text you type into form fields is masked by Clarity before it leaves your browser. |
| Google Tag Manager | Tag container | Loads the measurement and advertising tags listed here, and can be changed without a site update. |
| Google Analytics 4loaded through Tag Manager | Website analytics | Pages viewed, how you arrived, device and browser, approximate location from IP, and whether you called or submitted a form. |
| Google Adsloaded through Tag Manager | Advertising measurement | Records that a call or form submission followed an ad click, so we know which ads produce work. |
| Microsoft Advertising (UET)loaded through Tag Manager | Advertising measurement | The same conversion measurement for ads shown on Bing and its partners. |
| Meta (Facebook and Instagram)loaded through Tag Manager | Advertising measurement and audiences | Where enabled for this brand, records ad-driven visits and conversions and can build audiences for future ads. |
| TikTokloaded through Tag Manager | Advertising measurement | Where enabled for this brand, the same conversion measurement for TikTok ads. |
| Cloudflare | Hosting, security and bot defence | Serves the site and screens form submissions with Cloudflare Turnstile, which checks that a submission came from a person and not a script. |
| Twilio | Calls and text messages | Carries the phone calls and SMS between you and our office. |
What actually runs here
Two things load on every page before anything else: Microsoft Clarity, which records a replay of your visit, and Google Tag Manager, which is a container we use to load measurement and advertising tags without rebuilding the site. Everything in the table below either loads directly or can be loaded through that container. This is the complete list — if something is not here, it is not running.
Session replay, stated plainly
Microsoft Clarity records how you move through the page: mouse movement, scrolling, clicks and taps, which elements you hovered, how far down you read. Combined with your approximate location from your IP address, your browser and your device. It masks the text you type into form fields before it leaves your browser, so we do not see what you typed — but we do see that you typed, and where. We use it to find the places people get stuck. Nothing else.
Cookies we cannot switch off
A small number are needed for the site to work at all: a cookie that remembers your cookie choice so we stop asking, Cloudflare's security cookies that keep the site up and screen automated abuse, and Cloudflare Turnstile, which checks a form submission came from a person. These carry no advertising profile and there is no way to serve the site without them.
How to switch off the rest
The notice on your first visit has a real Decline. Choosing it sets Google Consent Mode to denied for analytics storage, advertising storage, advertising personalisation and advertising user data, and stores that choice on your device. Being straight with you about the default: those categories start granted and flip to denied when you decline, because neither Texas nor federal law requires prior opt-in here. To change a choice you already made, clear this site's data in your browser settings and the notice returns. Your browser's own controls also work — blocking third-party cookies, or private browsing, will stop most of this without needing us.
Opting out at the source
You can also switch these off in ways we do not control, which is often more durable: Google offers a browser add-on that disables Google Analytics everywhere, Microsoft publishes an opt-out for Clarity, and the advertising industry runs opt-out pages at optout.aboutads.info and optout.networkadvertising.org. Turning them off there covers every site, not just ours.
Do Not Track and Global Privacy Control
We do not currently act on the browser Do Not Track header — there is no agreed meaning for it, and an earlier version of our privacy policy wrongly claimed we honoured it. Global Privacy Control does have an agreed meaning and we are working toward honouring it automatically. Until this page says we do, email us and we will apply the opt-out by hand.
If this list changes
Because Tag Manager can load a tag without a code change, this page is reviewed whenever the container changes and the date at the top moves with it. If you find something running here that is not listed, tell us at [email protected] — that is a mistake on our side and we want to know.
Talk to a CSIA-certified expert today.
Free written quote. Same-week scheduling. 24/7 emergency response when you need it.
24/7 Response
Active leak, animal in flue, post-fire damage, or smoke event? Real humans on the line 7 AM to 12 AM every day — replies in under 2 minutes. Tech dispatch within 2 hours during business hours, subject to crew availability after-hours.
Emergency line