Legal · version 3.0 · last updated 19 August 2026

Cookie and on-device storage policy

This policy covers cookies, local storage, session storage and similar technologies used on firstpersonmarketing.com by Lanex Group, LLC, a Delaware limited liability company. We run a deliberately small footprint: strictly necessary storage only by default, no advertising pixels, no cross-site trackers and no data broker tags. Where a non-essential technology is ever introduced, it loads only after you consent and you can withdraw that consent at any time without losing access to any part of the site.

  • No advertising or cross-site tracking pixels on this site
  • Named inventory with purpose, category and duration below
  • Refusing non-essential storage never breaks the site
  • Consent, where required, is opt-in and withdrawable

Inventory of cookies and storage keys

Every named item below is set by this site, its infrastructure or its payment processor. Category follows the standard classification: strictly necessary, functional, analytics or advertising.

fp_audit_draft — local storage — strictly necessary
Saves your progress through the multi-step audit so a refresh or a dropped connection does not lose your answers. Stays on your device, is not transmitted until you submit, and is cleared on submission or by clearing site data.
fp_signup_draft — local storage — strictly necessary
The same autosave behaviour for the subscription signup flow. Cleared on submission.
fp_ref — local storage — strictly necessary
Stores the 10 digit reference issued to your submission so your status page loads without you retyping it. Duration: until cleared.
sb-* auth token — local storage — strictly necessary
Set by our managed authentication infrastructure to keep a signed-in session valid and to enforce record-level access controls. Duration: session lifetime plus refresh window.
fp_theme — local storage — functional
Remembers a light or dark interface preference. Optional; absence simply falls back to the system setting.
fp_consent — local storage — strictly necessary
Records your consent choice so we do not ask again on every visit. Duration: 12 months, after which we ask again.
__stripe_mid, __stripe_sid — cookies set by Stripe — strictly necessary
Set only on checkout pages, for fraud prevention and payment session integrity. Durations: 12 months and 30 minutes respectively. Governed by Stripe's own privacy notice as an independent controller.
Edge and security logs — server-side, not on your device
Truncated IP, user agent and request path retained for a maximum of 14 months for security, abuse prevention and uptime diagnostics. Not linked to marketing profiles.

Categories, consent and control

01Strictly necessary storage

These items are required for the site to function, to keep your form progress, to maintain a secure session and to process a payment. Under GDPR Article 5(3) of the ePrivacy Directive and equivalent state law, they do not require consent, but they are listed above so you can see exactly what exists.

02Functional storage

Functional items only remember a preference you set, such as interface theme. Refusing or clearing them causes no loss of functionality beyond having to set the preference again.

03Analytics

We do not currently run third-party analytics tags on this site. Any aggregate page-view counting we perform is server-side, does not set an identifier on your device, and cannot be used to recognise you across sites or sessions. If we ever add a client-side analytics tool, it will appear in the inventory above with its provider and duration and will load only after opt-in consent.

04Advertising and cross-site tracking

None. There is no Meta pixel, no Google Ads remarketing tag, no TikTok pixel, no LinkedIn insight tag and no data broker script on this site. We do not build remarketing audiences from visitors, and we do not sell or share personal information for cross-context behavioural advertising. This is a deliberate choice, not an oversight: we advertise for clients, not to our own site visitors.

05How to refuse or remove storage

You are in full control at the browser level and nothing on this site depends on being tracked.

  • Clear site data for this domain in your browser's privacy settings to remove every item above, including form drafts.
  • Block or restrict cookies in Chrome, Safari, Firefox, Edge or Brave settings; the site continues to work, though form autosave and sign-in will not persist.
  • Use private or incognito browsing so all storage is discarded when the window closes.
  • Withdraw a previously given consent by clearing fp_consent, which causes the choice to be requested again.
  • Enable Global Privacy Control in a supporting browser; we treat a GPC signal as a valid opt-out of any sale or sharing, which in our case is already none.

06Client campaign tracking is separate

As part of the services we implement measurement on client websites: consent management platforms, server-side tagging, conversion APIs and analytics configuration. That work is governed by each client's own cookie notice and consent setup, and by the data processing agreement in our service terms. It has no bearing on this site and never routes visitor data from client sites to us for our own marketing.

07Do Not Track and browser signals

There is no universal industry standard for DNT, but because we set no advertising or cross-site technologies, a DNT signal makes no practical difference here: there is nothing to disable.

08Changes to this policy

Any new cookie or storage key is added to the inventory above before it is deployed, with its category and duration, and the version and date at the top of the page are updated. Where a new item requires consent, it will not load until consent is given.

09Questions

Email privacy@firstpersonmarketing.com and a director will answer in writing, normally within two Working Days. If you believe an item is set that is not listed above, tell us and we will investigate and publish a correction.

Small footprint, on purpose

No pixels, no brokers, no remarketing of the people reading our own policies. If that is how you want your own measurement built, the audit is the fastest way to see what it would take.

Lanex Group, LLC, State of Delaware, United States. Read alongside the privacy policy and the terms of service.