Cookie Notice
This Cookie Notice explains what cookies and similar technologies (collectively, "cookies") are used on the websites operated by ToyBox Consulting & Management, LLC, including www.toyboxconsulting.net, www.katoyapalmer.com, and toyboxconsulting.github.io/golden-hour-landing/. It is part of our Privacy Policy.
Open cookie settingsWhat is a cookie?
A cookie is a small text file a website stores on your device. We also use similar technologies (local storage, session storage, web beacons / pixels, tracking scripts). For simplicity we call them all "cookies." Some are deleted when you close the browser ("session cookies"); others stay for a set period ("persistent cookies").
Categories of cookies we use
1. Strictly necessary (always on)
Required to deliver the basic functions of the Sites. These do not require consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| toybox_consent | This site | Stores your cookie consent preference | 12 months |
| __cf_bm, cf_clearance | Cloudflare, Inc. | Bot management, site security | Session / 30 days |
2. Analytics (consent required)
Help us understand how the Sites are used so we can improve them.
Google Analytics 4 (in Google Consent Mode) and Microsoft Clarity load on every visit in a cookieless mode. They set analytics cookies only after you accept analytics in the cookie banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics 4 (Google LLC) | Distinguish users, session metrics | Up to 24 months |
| _clck, _clsk, MUID | Microsoft Clarity (Microsoft Corporation) | Session replay, heatmaps, scroll/click telemetry | Up to 12 months |
| Cloudflare Web Analytics beacon | Cloudflare, Inc. | Privacy-respecting pageview metrics (cookieless) | n/a |
3. Advertising / cross-context behavioral advertising (consent required; "sharing" under CCPA)
Help us measure and target advertising. Opting out of "sharing" stops these.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _uetsid, _uetvid, MUID | Microsoft Advertising UET (Microsoft Corporation) | Conversion tracking, audience targeting | Up to 13 months |
4. Visitor identification / B2B intent (consent required)
Identify the company associated with an IP address visiting our Sites, where available. On our free tools pages, RB2B may also identify an individual business visitor (US visitors only), and only if you allow this category.
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
| Albacross tracking script | Albacross Nordic AB | Company-level B2B identification | Session + 12 months for aggregate logs |
| RB2B tracking script | RB2B | Business visitor identification on our free tools pages; person-level for some US visitors where possible | Set by RB2B; see its privacy policy |
Embedded third-party content
When you interact with the following embedded or linked services, those providers set their own cookies under their own policies:
- Calendly — scheduling
- Eventbrite — RSVP / event registration
- Substack — newsletter subscription
- Vimeo — embedded video
- LinkedIn, TikTok, Instagram — social profile links
- Crisp — live chat widget. Sets a session cookie when the chat bubble loads; collects messages, name, and email only when you initiate a conversation. Posts to our Slack workspace. Crisp privacy policy.
These cookies load only after you interact with the embedded element or follow the link.
How to manage cookies
- On this site: Use the "Open cookie settings" button above or the "Cookie settings" link in the footer.
- In your browser: All major browsers allow you to view, block, or delete cookies. See your browser's help pages.
- Global Privacy Control (GPC): We honor the GPC signal as an opt-out of "sharing" for cross-context behavioral advertising.
- Google Analytics: install the Google Analytics opt-out browser add-on.
- Microsoft: opt out at choice.microsoft.com.
- Albacross: opt out at albacross.com/opt-out.
Changes to this notice
We may update this notice. The new effective date appears at the top. Material changes will trigger a re-consent prompt.
Browser-Level Visitor Protections (Not Cookies)
In addition to managing cookies, we apply browser security headers (Content-Security-Policy, Permissions-Policy, Referrer-Policy, HSTS) and bot protection (Cloudflare Turnstile) to protect visitors. These are not cookies and do not collect new data. See our Privacy Policy › "Browser-Level Visitor Protections" for details.
Contact
Questions: katoya@toyboxconsulting.net · ToyBox Consulting & Management, LLC, Bellevue, WA.
Use your browser's translate option to read this site in your language. Need help in another language? Email katoya@toyboxconsulting.net.
