Cookie policy

Published by: AvanceAI LLC
Version: 2026-10-27.1
Last updated: October 27, 2026

This page describes cookies, local storage, and similar technologies on avance.ai and, where applicable, on the app.avance.ai application (Avance), operated by AvanceAI LLC (Utah, USA).

On avance.ai, the cookie notice requires explicit acceptance before any non-essential Analytics, marketing or attribution tooling runs. Silence is not consent, and neither is a pre-ticked box. That matches the Superintendencia de Industria y Comercio (SIC) opt-in standard in Colombia.

What happens when you accept or decline

The notice lets you choose Analytics and Marketing and attribution separately. Accept all allows both categories. Under Customize, choose each category and save your selection with Accept. Choosing one category does not grant permission for the other.

Marketing and attribution

If you allow Marketing and attribution, the site records website_marketing_consent=granted (and the same preference in localStorage under website:marketing-consent). Only then may the site initialize the conversions and attribution SDK. That may include:

  • the utm_data cookie, which stores campaign or attribution parameters present in the URL (for example UTM parameters and click identifiers);
  • contact-form conversion events (on the Avance site, the lead_submitted event after a successful contact-form submission); and
  • loading Google Tag Manager (GTM) when a GTM container is configured in the site’s conversion configuration.

Any additional tags or cookies GTM may load depend on what is configured in that container.

Analytics

If you allow Analytics, the site records website_analytics_consent=granted, with the same preference in localStorage under website:analytics-consent. Where Google Analytics is configured and enabled for the site, this choice allows website visits to be measured. This measurement has consent separate from marketing and attribution.

Decline all or silence

Decline all records denied for both categories. If you make no choice, neither category receives consent. Without Analytics consent, this Google Analytics integration does not load. Without Marketing and attribution consent, the conversions / attribution SDK does not initialize: utm_data is not written, contact-form conversion events are not fired through that path, and GTM is not loaded.

Independently of that cookie choice, when you submit a contact form the site may still record attribution parameters (for example UTM values and click identifiers) server-side as part of processing the submitted form, so the lead can be associated with the campaign that brought you to the site. Declining still means no utm_data cookie is written in your browser.

Essential cookies and storage (no optional-tool consent required)

These items work without optional-tool consent. They do not depend on the opt-in described above.

Better Auth session cookie (better-auth.session_token or __Secure-better-auth.session_token)

  • Purpose: maintain the authenticated user session in the application.
  • Type: essential / strictly necessary for sign-in.
  • Duration: up to 7 days (Better Auth session).
  • Typical scope: app.avance.ai (application).

Better Auth session cache cookie (better-auth.session_data or __Secure-better-auth.session_data)

  • Purpose: short-lived session-data cache to reduce authentication server lookups.
  • Type: essential for authenticated-session performance.
  • Duration: up to 5 minutes.
  • Typical scope: app.avance.ai.

access_token cookie

  • Purpose: HttpOnly access token used by the application to authorize API calls.
  • Type: essential for the authenticated application session.
  • Duration: up to 12 hours.
  • Typical scope: app.avance.ai.

user cookie

  • Purpose: keep minimal authenticated-user context for the UI (for example product session identifiers needed after login).
  • Type: essential for the authenticated application experience.
  • Duration: up to 12 hours.
  • Typical scope: app.avance.ai.

website_marketing_consent cookie

  • Purpose: remember whether you granted or denied marketing / attribution consent (granted or denied).
  • Type: essential to remember your consent choice.
  • Duration: up to 365 days.
  • Scope: avance.ai website.
  • Note: the same preference is also stored in localStorage under the key website:marketing-consent.

website_analytics_consent cookie

  • Purpose: remember whether you allowed or declined Analytics (granted or denied).
  • Type: essential to remember your consent choice.
  • Duration: up to 365 days.
  • Scope: avance.ai website.
  • Note: the same preference is stored in localStorage under website:analytics-consent.

hide-notice cookie (banner)

  • Purpose: the cookie-notice library (react-cookienotice) sets this cookie so the banner is not shown again after you choose (accept or decline).
  • Type: essential for the consent notice to function.
  • Duration: 30 days (library default value: true).
  • Scope: avance.ai website.

Non-essential cookies and tools (only after explicit acceptance)

utm_data cookie

  • Purpose: retain attribution / campaign parameters read from the URL so they can be associated with conversion events.
  • Type: non-essential (marketing / attribution).
  • Duration: 30 days.
  • Scope: avance.ai website.
  • Condition: may be written only after explicit acceptance, when the conversions SDK initializes and the URL contains attribution parameters.

Google Analytics (if configured)

Where Google Analytics is configured and enabled for the site, this choice allows website visits to be measured. This measurement has consent separate from marketing and attribution.

Google Tag Manager (if configured)

After explicit acceptance, if the conversion configuration includes a GTM container ID, the site may load the Google Tag Manager script (googletagmanager.com). GTM may in turn activate third-party tags and cookies according to the container configuration. Without acceptance (decline or silence), GTM is not loaded through this path.

Third-party request: Google Fonts (not consent-gated)

The Avance site loads fonts from Google Fonts servers (fonts.googleapis.com / fonts.gstatic.com) on every page load, based on the theme typography (Inter). That is not analytics and not conversion measurement: it is the download of font files.

Doing so sends the visitor’s IP address and technical request metadata to Google (for example user agent and the page requesting the font). This request occurs regardless of whether you accept or decline the cookie notice.

How consent is given

  1. When you visit avance.ai, if the notice is enabled and the hide-notice cookie is not present, the banner appears.
  2. Click Accept all to allow both categories, or open Customize to choose Analytics and Marketing and attribution separately and click Accept to save. Choosing one category does not grant permission for the other.
  3. Click Decline all to refuse expressly.
  4. If you close the browser or continue without clicking either option, there is no consent: non-essential tools stay off.

We do not use pre-ticked boxes for this consent.

How consent is withdrawn

You may withdraw or change your choice at any time:

  1. In the footer of any page on avance.ai, click Cookie preferences.
  2. Open Customize to change each category and click Accept to save, or choose Decline all to withdraw both. Withdrawing Analytics records website_analytics_consent=denied and website:analytics-consent=denied, and disables further events from this Analytics integration. It does not delete Analytics cookies already stored or undo data already sent.
  3. If you withdraw Marketing and attribution, the site immediately:
    • records your preference as website_marketing_consent=denied (and the same value in localStorage under website:marketing-consent);
    • tears down the conversions / attribution SDK so it stops sending new conversion or attribution events;
    • deletes the utm_data cookie (if present);
    • removes the Google Tag Manager gtm.js script and ns.html noscript/iframe nodes that this site injected, clears gtm.start markers from the data layer, and stops further data-layer pushes through that path; and
    • sets the hide-notice cookie again so the notice stays hidden until you open preferences once more.

Limit of this withdrawal: removing those DOM nodes and stopping the SDK does not unload JavaScript that GTM already executed in the current page, nor does it reliably remove every tag or pixel GTM may already have injected. Those remnants may keep running until you reload the page (or navigate in a way that fully reloads the document). After a reload with consent denied, GTM and the conversions SDK are not loaded again through this path.

You may also email privacy@avance.ai.

To end an application session, use the product sign-out function; that invalidates the Better Auth session and related authentication cookies.

More information