Information we collect
We collect the information you voluntarily provide through our contact forms or when you communicate with us: name, email, phone number, and the content of your message. Along with it we record how you reached us: the page you first arrived on, the page you submitted from, the site that referred you, any campaign tags in the link you followed, and the language of the page. That is the whole list. We create and read no identifier of our own; the referring address and campaign tags are copied exactly as they appear in the link you followed, so what they contain is decided by whoever built it.
Our site is hosted on Google infrastructure (Firebase Hosting), which may log standard technical data such as IP address and browser type for security and service operation. The interactive maps on some pages load their map images from CARTO, which receives the same kind of technical data in order to deliver them and sets no cookies. This site runs no advertising and no remarketing trackers, and sets no advertising cookie of its own; the analytics we do use (one cookieless tool for everyone, and two that load only if you accept) are described in the Cookies and analytics section.
Cookies and analytics
We measure this site in two layers, and only the second uses cookies. One more item, the last row of the table, is not measurement: it records in your browser how you reached the site, and reaches us only if you send a contact form. Cloudflare Web Analytics runs on every page, sets no cookies and no browser storage, and collects aggregate page-view and performance signals only, so we run it without asking for your consent. Google Analytics 4 and Microsoft Clarity run only if you click Accept in the cookie banner; until you do, neither script is requested at all.
Before anything loads, Google Consent Mode v2 is set to denied for analytics_storage, ad_storage, ad_user_data, and ad_personalization. If you accept, analytics_storage and ad_storage are granted: ad_storage is the signal Google signals needs. It lets Google use its own advertising cookies and identifiers to recognise a visitor who is signed in to a Google account; this site sets no advertising cookie itself. ad_user_data and ad_personalization stay denied permanently. Microsoft Clarity receives its own answer: analytics storage granted, advertising storage denied. If your browser sends Global Privacy Control and you still choose Accept, only Google Analytics turns on, with analytics storage only: no Google signals and no Microsoft Clarity.
Microsoft Clarity is a service operated by Microsoft Corporation. It records how pages are used (clicks, taps, scrolling and mouse movement) and turns that into heatmaps and into replays of visits, so we can see where the site is confusing. A replay shows the page as you saw it, but never anything you type: Microsoft hides every form field automatically, and our own code hides our forms in full (contact, lead, alert sign-up, showing-request and rental-application forms), including the message a form prepares for WhatsApp. That hiding happens in your browser, before anything is sent. Clarity also receives technical data such as IP address, browser, device and screen size. Microsoft keeps replays for 30 days (a sample of them, and any we mark as favorites, for up to 9 months) and heatmap and click data for 9 months. Microsoft says it may also use Clarity data to run and improve its own products, including Microsoft Advertising, as described in the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement). Flexway runs no advertising of its own.
What runs on this site, what it stores, why, and for how long.| What runs | What it stores | Purpose | When it runs and how long data is kept |
|---|
| Cloudflare Web Analytics | Nothing in your browser — no cookies, no localStorage, no personal data | Aggregate page views and performance, so we can see which pages get read and improve the site | Every page, whether or not you accept; aggregate data only |
|---|
| Google Analytics 4 (measurement ID G-SYHM2E1KYZ) | Cookies _ga and _ga_SYHM2E1KYZ | Seeing how the site and its tools are used: page views; Google's automatic measurements of how far a page is scrolled (when you reach the bottom), file downloads, site searches, embedded video plays, and when a form is started or sent (the form's name only, never what you type); and our own product-usage events (lead wizard started, lead wizard completed at the WhatsApp hand-off, a Zillow apply link clicked, a successful Radar alert sign-up, a docket CSV download, the MLS search tool viewed, a Radar article viewed, and those listed below this table), with no personal data attached | Only after you click Accept; data kept 14 months; Google does not store IP addresses for Analytics |
|---|
| Microsoft Clarity (project ID yttyzae5ro) | Cookies _clck (a random Clarity ID for this site; up to 1 year) and _clsk (joins the pages of one visit into one replay; 1 day). Also _cltk in sessionStorage: a random ID for this browser tab, cleared when the tab closes; not a cookie. | Heatmaps and replays of how pages are used: clicks, taps, scrolling, mouse movement. Page text is recorded as shown; every form field, and our forms in full, are hidden in your browser before anything is sent | Only after you click Accept, and never while your browser sends a GPC signal; replays kept 30 days (a sample of them up to 9 months), heatmaps and click data 9 months |
|---|
| flexway_consent_v1 (localStorage) | Your accept-or-decline choice, a version number, and an ISO timestamp | Remembering your answer so we stop asking (strictly necessary storage) | Set when you make a choice, or when we honor a GPC signal; stays until you change it or clear your browser storage |
|---|
| Radar de desarrollo alert sign-up (Google Firestore) | The email address, optional phone number, and towns you submit | Sending you the monthly Radar alerts you asked for | Only when you submit the form; kept until you ask to be removed |
|---|
| Lead attribution — flexway:attr:landing (sessionStorage) | The path of the first page of your visit, the address of the page that referred you (cut at the first ? or #), and any utm_source, utm_medium, utm_campaign, utm_term or utm_content tags from the link you followed. Not a cookie. | Knowing which page and which link bring people to us. | Written as the first page of your visit loads — not at all if your browser sends a Global Privacy Control signal. Cleared when the tab closes. Sent to us only if you submit a contact form, and then kept with that inquiry as described in Retention and security. |
|---|
Our product-usage events also include:
- a contact, wizard, rental enquiry or showing request form sent successfully: the form type, the page, the language, and the options you picked from the menus (what you want to do, the area, the timing, the budget range, the property type, or the rental or home you asked about). Never your name, email, phone number or anything you typed.
- a WhatsApp link clicked: the page, where the link sits, and the Flexway WhatsApp number it opens. Never the message text and never your number.
- a phone link clicked: the page, where the link sits, and the Flexway number it dials. Never your number.
- an email link to Flexway clicked: the page, where the link sits, and the Flexway address it opens.
- each step of the lead wizard reached, or a step back: the step number and name and the option you picked on the step before, from the menu. Never anything you typed.
Google Analytics also records some things automatically: the pages you view, when you scroll near the end of a page, clicks on links that take you to another website (the link's address), words searched in our site search, when you start and send a form (the form's name, never what you typed in it), file downloads and video plays. Words you put in a search box are sent as typed, so please don't search for personal details. With your Accept we also turn on Google signals: for visitors signed in to a Google account that allows it, Google gives us aggregated, anonymous reports on age range, gender, interests and devices. We never see who you are. We run no ads and no remarketing, and ad personalization stays off. Google Analytics keeps this data for up to 14 months. Visits by our own staff to test the site are marked and left out of our reports. Microsoft Clarity receives the same event names and menu choices, so we can find the visits that ended in an enquiry.
You can change or withdraw your choice at any time. The Cookie preferences link in the footer of every page reopens the banner. Withdrawing sets both signals back to denied and stops Google Analytics and Microsoft Clarity from loading on any future page. Clarity's cookies are deleted at once; Google Analytics cookies already set are removed where your browser allows, otherwise they expire on their own, and you can clear them in your browser settings.
An event Google Analytics recorded just before you declined may still be sent a few seconds later; nothing recorded after you decline is sent.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a decline automatically: neither Google Analytics nor Microsoft Clarity is loaded, and the banner tells you we honored the signal. We store that decline in your browser so we stop asking. You can still opt in to Google Analytics if you prefer; Microsoft Clarity and Google signals stay off for as long as your browser sends the signal.
When we add a tool to this list, or a new use for one already on it, we ask you again, so an earlier Accept never covers a tool you were not told about.
We run no advertising and no remarketing. Even after you accept, Google's ad_user_data and ad_personalization signals stay denied, and so does advertising storage for Microsoft; ad_storage is granted to Google only so that Google signals can work. No personal data of yours is ever attached to an analytics event: not your name, your email address, your phone number or the contents of a message.
Declining changes nothing about how the site works. Every page, tool, and form behaves exactly the same either way.
Questions or privacy requests: Sales@flexwayrealty.com — Flexway Realty LLC, (321) 443-4772.
