Cookie policy

Published by: AvanceAI LLC
Version: 2026-07-26.1
Last updated: July 26, 2026

This page describes cookies, local storage, and similar technologies on avance.ai and, where applicable, on the app.avance.ai application (AVA by Avance), operated by AvanceAI LLC (Utah, USA).

On avance.ai, the cookie notice requires explicit acceptance before any non-essential marketing or attribution tooling runs. Silence is not consent, and neither is a pre-ticked box. That matches the Superintendencia de Industria y Comercio (SIC) opt-in standard in Colombia.

What happens when you accept or decline

On avance.ai, when the notice is enabled, a banner offers Accept / Accept all or Decline all:

Accept or Accept all

Records website_marketing_consent=granted (and the same preference in localStorage under website:marketing-consent). Only then may the site initialize the conversions and attribution SDK. That may include:

  • the utm_data cookie, which stores campaign or attribution parameters present in the URL (for example UTM parameters and click identifiers);
  • contact-form conversion events (on the Avance site, the lead_submitted event after a successful contact-form submission); and
  • loading Google Tag Manager (GTM) when a GTM container is configured in the site’s conversion configuration.

Any additional tags or cookies GTM may load depend on what is configured in that container.

Decline all or silence

If you choose Decline all, the site records website_marketing_consent=denied. If you make no choice (silence), consent is not granted. In both cases, the conversions / attribution SDK does not initialize: utm_data is not written, contact-form conversion events are not fired through that path, and GTM is not loaded.

Independently of that cookie choice, when you submit a contact form the site may still record attribution parameters (for example UTM values and click identifiers) server-side as part of processing the submitted form, so the lead can be associated with the campaign that brought you to the site. Declining still means no utm_data cookie is written in your browser.

Essential cookies and storage (no marketing consent required)

These items work without marketing acceptance. They do not depend on the opt-in described above.

Better Auth session cookie (better-auth.session_token or __Secure-better-auth.session_token)

  • Purpose: maintain the authenticated user session in the application.
  • Type: essential / strictly necessary for sign-in.
  • Duration: up to 7 days (Better Auth session).
  • Typical scope: app.avance.ai (application).

Better Auth session cache cookie (better-auth.session_data or __Secure-better-auth.session_data)

  • Purpose: short-lived session-data cache to reduce authentication server lookups.
  • Type: essential for authenticated-session performance.
  • Duration: up to 5 minutes.
  • Typical scope: app.avance.ai.

access_token cookie

  • Purpose: HttpOnly access token used by the application to authorize API calls.
  • Type: essential for the authenticated application session.
  • Duration: up to 12 hours.
  • Typical scope: app.avance.ai.

user cookie

  • Purpose: keep minimal authenticated-user context for the UI (for example product session identifiers needed after login).
  • Type: essential for the authenticated application experience.
  • Duration: up to 12 hours.
  • Typical scope: app.avance.ai.

website_marketing_consent cookie

  • Purpose: remember whether you granted or denied marketing / non-essential cookie consent (granted or denied).
  • Type: essential to remember your consent choice.
  • Duration: up to 365 days.
  • Scope: avance.ai website.
  • Note: the same preference is also stored in localStorage under the key website:marketing-consent.

hide-notice cookie (banner)

  • Purpose: the cookie-notice library (react-cookienotice) sets this cookie so the banner is not shown again after you choose (accept or decline).
  • Type: essential for the consent notice to function.
  • Duration: 30 days (library default value: true).
  • Scope: avance.ai website.

Non-essential cookies and tools (only after explicit acceptance)

utm_data cookie

  • Purpose: retain attribution / campaign parameters read from the URL so they can be associated with conversion events.
  • Type: non-essential (marketing / attribution).
  • Duration: 30 days.
  • Scope: avance.ai website.
  • Condition: may be written only after explicit acceptance, when the conversions SDK initializes and the URL contains attribution parameters.

Google Tag Manager (if configured)

After explicit acceptance, if the conversion configuration includes a GTM container ID, the site may load the Google Tag Manager script (googletagmanager.com). GTM may in turn activate third-party tags and cookies according to the container configuration. Without acceptance (decline or silence), GTM is not loaded through this path.

Third-party request: Google Fonts (not consent-gated)

The Avance site loads fonts from Google Fonts servers (fonts.googleapis.com / fonts.gstatic.com) on every page load, based on the theme typography (Inter). That is not analytics and not conversion measurement: it is the download of font files.

Doing so sends the visitor’s IP address and technical request metadata to Google (for example user agent and the page requesting the font). This request occurs regardless of whether you accept or decline the cookie notice.

How consent is given

  1. When you visit avance.ai, if the notice is enabled and the hide-notice cookie is not present, the banner appears.
  2. Click Accept or Accept all to grant marketing / attribution consent.
  3. Click Decline all to refuse expressly.
  4. If you close the browser or continue without clicking either option, there is no consent: non-essential tools stay off.

We do not use pre-ticked boxes for this consent.

How consent is withdrawn

You may withdraw or change your choice at any time:

  1. In the footer of any page on avance.ai, click Cookie preferences.

  2. The cookie notice appears again. Click Decline all to withdraw marketing / attribution consent, or Accept / Accept all if you want to grant it again.

  3. If you withdraw consent, the site immediately:

    • records your preference as website_marketing_consent=denied (and the same value in localStorage under website:marketing-consent);
    • tears down the conversions / attribution SDK so it stops sending new conversion or attribution events;
    • deletes the utm_data cookie (if present);
    • removes the Google Tag Manager gtm.js script and ns.html noscript/iframe nodes that this site injected, clears gtm.start markers from the data layer, and stops further data-layer pushes through that path; and
    • sets the hide-notice cookie again so the notice stays hidden until you open preferences once more.

    Limit of this withdrawal: removing those DOM nodes and stopping the SDK does not unload JavaScript that GTM already executed in the current page, nor does it reliably remove every tag or pixel GTM may already have injected. Those remnants may keep running until you reload the page (or navigate in a way that fully reloads the document). After a reload with consent denied, GTM and the conversions SDK are not loaded again through this path.

You may also email privacy@avance.ai.

To end an application session, use the product sign-out function; that invalidates the Better Auth session and related authentication cookies.

More information