We audit digital storage keys with transparent retention clocks.

Effective Date, Governance & Operating Entity

This Cookie Policy took effect on October 30, 2026 (2026-10-30), was last amended on 2026-10-30, and governs all browser storage, tracking parameters, and client-side tokens across acevalleyhub.com.

The operator and controller of this website is Acevalleyhub, trading at acevalleyhub.com. Physical postal address, written out in full: 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Telephone: +1 (407) 555-1639. Direct email for enquiries and for data requests: office@acevalleyhub.com.

Governing law: the law of Colorado, United States, with disputes heard in the courts of Denver. US state privacy law applies—including California (CCPA/CPRA) and other state laws in force—and our GDPR provisions protect visitors reaching this destination from Europe.

Storage Classifications & Code Architecture

Client-side storage on this website operates under three strictly bounded classifications:

1. Strictly Necessary Storage: Foundational storage required to preserve your privacy preference itself. The consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice. It operates automatically to keep your preference without profiling.
2. Functional Support Chat Storage: The support chat (gace815.php) keeps the conversation and a token in the visitor’s browser so they can return to it across sessions without losing message context.
3. Analytical & Advertising Storage: Third-party attribution storage deployed strictly when affirmative consent is granted. Governed entirely by Consent Mode v2 for Google Ads, Microsoft Advertising, and Meta Ads.

Strict Limitation: No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

Complete Storage Register & Real Retention Periods

What this site’s own code records, and nothing beyond it: The inquiry form (sume141.php) writes: name, phone, email, address, the kind of enquiry, the message, the requested specification, the consent tick. With it, automatically: the IP address, the browser’s user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.

Retention periods are stated as real periods, never “as long as necessary”:

Advertising Attribution & Click Identifiers

Advertising, in the present tense — this site receives paid clicks today: Google Ads, Microsoft Advertising and Meta Ads send traffic here.

Click identifiers: gclid (Google), msclkid (Microsoft), fbclid (Meta).

When a visitor arrives via a sponsored campaign, these identifiers are read during navigation strictly to attribute inbound conversions:

• Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals.
• Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid, where a campaign runs there.

Nothing anywhere claims a platform has reviewed, approved or verified this site. We make zero claims of endorsement, verification, or certification by Google, Microsoft, Meta, or any third party.

Consent Mode v2 Operational Mechanics

Ace Valley Hub implements Google Consent Mode v2 on all visitor sessions. Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws.

• ad_storage: Denied by default; prevents creation or reading of advertising cookies.
• ad_user_data: Denied by default; prevents transmission of user data for advertising measurement.
• ad_personalization: Denied by default; blocks ad personalization and remarketing signals.
• analytics_storage: Denied by default; disables persistent analytics identifiers.

Global Privacy Control (the Sec-GPC header) is honoured as an opt-out without asking again. When a Sec-GPC header is detected from your browser, all four parameters remain locked at denied automatically.

Making, Changing & Withdrawing Consent

Upon your first visit, our privacy storage banner gives you clear, equal controls to “Accept Storage” or “Decline”.

The consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice. The record of a consent choice is kept for exactly 12 months.

You may change or withdraw your decision at any time with complete ease. Simply click Consent Settings in the website footer. If you choose to decline or withdraw, Consent Mode v2 sets ad_storage, ad_user_data, ad_personalization, and analytics_storage back to denied the moment you decline or withdraw, and any active promotional storage is purged immediately.

Consequences of Declining Storage

We enforce zero cookie walls and apply no functional penalties to visitors who decline storage:

What remains completely operational: You can explore all card formats, portfolio studies, pricing benchmarks, and interact with the sizing calculator. You can submit project proposals via our inquiry form (sume141.php) and chat live with our Denver studio team through support chat (gace815.php). No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

What stops: No marketing cookies or persistent identifiers are placed. Inbound click identifiers (gclid, msclkid, fbclid) will not be tracked or shared, and all Consent Mode v2 parameters remain strictly denied.

Who Receives Data & Platform Privacy Statements

Who receives data, named one by one:

1. Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals. Review Google’s policies at https://policies.google.com/technologies/cookies.
2. Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement.
3. Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid, where a campaign runs there. Governed under Meta’s Business Tools and Cookies terms.
4. Infrastructure Providers: The hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification to the operator’s inbox.

Nothing anywhere claims a platform has reviewed, approved or verified this site.

Complaints: The visitor may complain to their state Attorney General, and to the California Privacy Protection Agency in California. Visitors reaching the site from Europe may lodge complaints with their relevant national Data Protection Authority under the GDPR.

Operator Contact & Data Subject Inquiries

To audit tracking keys, submit privacy inquiries, or exercise statutory data subject rights: