Cookie Policy

1. Operator and scope

Tap Media Group, CVR 43474030 (VAT DK43474030), Poul Hartlings Gade 7, st. th., 2300 København S, Denmark operates fixerai.app. Contact: info@tapmediagroup.com. This notice concerns the website. App permissions, AI processing and lead disclosures are covered in our Privacy Policy; accepting website statistics does not authorise those separate activities.

2. Your choice

Necessary only and Accept all are offered together. Optional statistics and advertising both start off. Customise choices lets you choose them independently. Browsing, closing preferences or selecting statistics alone is not advertising consent. Rejecting optional collection does not prevent using this website.

Use Cookie settings in the footer at any time to change or withdraw permission. A change to an optional purpose reloads the page and applies a consent-dependent browser security policy. Withdrawal stops future optional collection and removes recognised first-party advertising cookies where the browser allows it. We cannot delete cookies on a vendor’s own domain or automatically erase data already received by that vendor. Use browser controls and contact us or the relevant provider about deletion.

We remember acceptance and rejection for 180 days. Missing, expired, invalid or superseded choices deny optional collection. This updated provider list requires a new choice from visitors with an older choice version. If saving fails, optional measurement stays off; a failed withdrawal uses a deny-only page reload. New purposes or materially different providers require updated information and a new informed choice.

3. Necessary storage and security

fixer_cookie_choice is a first-party cookie set by fixerai.app after your choice. It stores the policy version, necessary/statistics/advertising decisions, choice time and expiry, without a unique visitor identifier. Duration: 180 days from saving; path: /; SameSite=Lax; Secure on HTTPS. Purpose: respect your choice and enforce optional measurement. It is used under the necessary-storage exception, rather than statistics consent.

Cloudflare delivers and protects the website. Its security features may set necessary challenge or anti-abuse cookies when triggered; these are separate from Web Analytics. Ordinary homepage checks did not show a Cloudflare response setting a cookie. This is not evidence that no security cookie can ever be set. If a challenge sets cf_clearance, its lifetime follows the challenge configuration; __cf_bm, where enabled, expires after 30 minutes of inactivity. Necessary request/security logs can be processed without analytics permission.

fixer_language is a first-party preference cookie set when you choose a language in the menu. Values: da or en; duration: 365 days; path: /; SameSite=Lax; Secure on HTTPS. It remembers your requested language without a visitor identifier. Without a saved choice, Cloudflare’s country code selects Danish in Denmark and English elsewhere; unknown locations use English. Explicit language links retain their language. We do not request precise device location. The same country code, without a cookie or other storage, sets the currency (kroner in Denmark, dollars in the United States, euros elsewhere), units and example cities on the page; search engine crawlers get the market of the page language. The meeting form reads your browser's time zone locally to show times in your time; the time zone is not stored.

4. Optional statistics

Google Analytics 4 is configured in a dedicated Fixer property and web stream for fixerai.app, separately from other Tap Media Group websites. Only statistics permission loads it on public pages, including both policy languages and the partner directory. It measures page visits and sessions, app-download link clicks and enquiry starts, confirmed submission and technical failure. Google receives technical connection/browser/device information, approximate location and pseudonymous browser/session references. This is not anonymous measurement. We supply fixed page categories and language, remove URL queries and fragments from event page information, reduce referrers to origins, and exclude private bearer-share links and form contents. No manual User-ID, Google Signals, advertising personalisation, automatic form detection or cross-domain tracking is configured. Google is the provider. First-party cookies _ga and _ga_5K12WHQD7Q distinguish browsers and sessions; Fixer sets a 180-day maximum without extending it on every page load. Browser controls can shorten this. Withdrawal disables GA4, removes recognised first-party analytics cookies where possible and reloads with collection blocked. The property uses two-month user/event-level retention without resetting user retention on new activity; standard aggregated reports are outside that setting. See Google’s privacy notice: Google Privacy Policy . Cookie storage and server retention are separate.

Cloudflare Web Analytics is configured for this domain. It measures page views, referring pages, browser/device characteristics and performance using a JavaScript beacon, without analytics cookies or a persistent cross-site identifier. This website only permits its beacon script and collection endpoint after statistics permission, and blocks it on bearer-share URLs to avoid disclosing the share capability to an external measurement provider. Cloudflare may also exclude EU visits under its configured automatic-install mode; permission does not override that exclusion. Duration on your device: no Web Analytics cookie; the permission record lasts 180 days.

Fixer uses consent-gated first-party requests to measure public tradesperson profile and shared-link visits. Records can include the profile/link reference, visit time, referring origin and shortened campaign source/medium/name. Supabase stores these records; Cloudflare delivers the request. No measurement cookie or extra visitor identifier is set. The underlying service receives ordinary connection metadata, including IP address, even where it is not retained in the visit record.

These activities use your consent for optional statistics. Server record retention is governed by the Privacy Policy purpose and retention criteria; the 180-day choice cookie does not automatically determine how long every statistics record is kept. Operational delivery, fraud prevention and security are separate purposes.

When configured, Fixer also uses Cloudflare Workers Analytics Engine to count marketing-page visits, app-download link clicks and website enquiry starts, completion and technical failure. The records contain only a fixed event, page category, interface language, broad device type, button area and a fixed outcome. We send no form contents, contact details, visitor ID, full URL, query string, shared-link code or referrer to this event dataset. It is not used on policy pages, shared links or individual tradesperson profiles. Collection requires statistics permission and is disabled if the dataset binding is unavailable. Cloudflare retains this event dataset for three months. This is separate from Web Analytics, whose dashboard shows up to six months of history. Infrastructure providers still handle request metadata needed to deliver and secure the service.

5. Optional advertising and tag management

Only separate advertising consent enables Meta Pixel, TikTok Pixel, Microsoft Advertising/Bing UET, X Ads, OpenAI’s ChatGPT Ads Measurement Pixel and Google Tag Manager. They measure public page visits and attribution to ads. They can receive IP address, browser/device characteristics, page information, referring information, timestamps, cookie/browser references and ad-click identifiers. Providers can associate these data with advertising interactions or their accounts and use them for advertising measurement and applicable audience/advertising purposes. This may constitute sharing for cross-context behavioural advertising under applicable US law. Statistics consent alone is insufficient.

Meta: _fbp identifies a browser and _fbc stores an eligible ad-click reference, normally up to three months. Provider: Meta. TikTok: _ttp and ttcsid/ttcsid_<pixel ID> support visitor and session attribution; TikTok documents up to 13 months for advertising cookies, subject to the actual cookie and browser restrictions. TikTok can also use session storage such as tt_pixel_session_index and tt_sessionId until the tab session ends. Provider: TikTok. Microsoft: _uetsid is normally one day, _uetvid normally 13 months and _uetmsclkid may retain an ad-click reference for up to 90 days. Microsoft’s own-domain advertising cookies may also be involved. Provider: Microsoft.

X: _twclid retains an ad-click reference for up to 30 days; the current SDK can also set _twpid and _twsid browser/session references for up to 13 months, and use cookies on X advertising domains. Provider: X. OpenAI: Fixer stores an eligible ad-click attribution reference in the first-party __oppref cookie for 30 days after writing. A fresh random event reference distinguishes each page-view request and is not saved or reused as a visitor or session identifier. The standalone page-view image pixel does not automatically extract contact fields and does not create the SDK’s __obref browser cookie. Provider: OpenAI. Cookie lifetime is separate from server event retention and attribution windows. Browser controls can shorten storage; revisiting or a new ad click may refresh some cookies.

Google Tag Manager delivers the GTM-M82XMJFQ container after advertising consent. The published container reviewed for this installation contained no tags. Fixer’s GA4 measurement is installed separately under statistics consent; it does not depend on this advertising container. Google consent defaults are denied, then updated to the visitor’s actual choices before the container loads. Future container tags must respect those purposes, must not duplicate directly installed pixels, and require a current inventory. Provider: Google.

Private bearer-share pages, unavailable profiles and unknown/error pages do not load these external pixels. We exclude arbitrary query parameters and fragments before initialising advertising SDKs and retain only permitted language/ad attribution parameters. We supply no form contents, private project information, payment data or customer identifiers to pixel commands. Meta and X automatic configuration/matching are disabled; Microsoft’s additional tag container and Clarity session replay are disabled. No manual advanced matching or server-side advertising API is installed. OpenAI uses the documented standalone page-view image tag instead of a DOM-scanning SDK; it does not require disabling the account’s automatic advanced matching setting. TikTok automatic advanced matching was not enabled in the reviewed pixel configuration; this must remain disabled in Ads Manager. Hashed contact information would still be personal data and requires a separate assessment before introducing it.

6. Privacy signals and browser controls

We recognise Global Privacy Control and keep optional statistics and advertising off when it is active, including where a previous advertising choice exists. This includes opting out of website pixel sharing for targeted advertising. It does not by itself alter app data, a requested lead disclosure or a previous vendor record; contact us for those rights. The older Do Not Track signal is not treated as permission to collect anything.

Your browser can remove or block cookies. Deleting our choice cookie causes a new choice request; blocking cookies does not create consent. Cookies are specific to the browser/device, so choices may need to be made separately. Without JavaScript optional website measurement stays off.

7. Recipients, transfers and rights

Tap Media Group controls Fixer website measurement and the choice record. Cloudflare supports delivery/security and its Web Analytics service; Supabase supports Fixer measurement storage in our primary eu-north-1 project. Provider and support processing can occur outside the EEA. Applicable transfer safeguards and GDPR rights are explained in the Privacy Policy.

Contact info@tapmediagroup.com for access, deletion, withdrawal, objections or applicable regional opt-outs. You can complain to Datatilsynet or your relevant authority without first contacting us. Rejecting optional cookies does not affect access to the website, project services or statutory rights.

Advertising recipients include Meta, TikTok, Microsoft, X, OpenAI and Google. They may act as independent or joint controllers for parts of advertising processing, according to their applicable terms. Their privacy notices describe their own purposes, retention, transfers and rights: Meta Privacy Policy ; TikTok Privacy Policy ; Microsoft Privacy Policy ; X Privacy Policy ; OpenAI Privacy Policy ; Google Privacy Policy . Processing can occur in the US and other countries outside the EEA. Applicable adequacy decisions or standard contractual clauses and necessary supplementary safeguards must cover these transfers; consent to cookies alone does not replace a lawful transfer mechanism. We use consent under GDPR Article 6(1)(a) for optional website advertising collection.