You control optional tracking. Until you click Accept optional in the notice, none of the optional scripts below load. Decline optional and a Global Privacy Control browser signal both keep them off.
Essential (always on)
- Sign-in and session cookies from our authentication provider (Supabase) and the Apex Pass login token (cookie and local storage, up to 30 days).
- Your cart, wishlist, recently viewed items, assistant preferences and chat history, kept in your browser’s local storage.
- Your cookie choice (
apex_cookie_consent), and a referral code if you arrive through a referral link (30 days). - Security and load-balancing cookies set by our host (Vercel) and payment page (Stripe) to prevent fraud.
Optional (only after you accept)
- Google Analytics and Google Ads (googletagmanager.com): usage statistics and ad measurement.
- Meta Pixel (facebook.net): ad measurement and custom audiences.
- TikTok Pixel (tiktok.com): ad measurement and audiences.
- Microsoft Clarity (clarity.ms): session recordings and heatmaps of how pages are used.
- Klaviyo (klaviyo.com): ties browsing to your email profile for later emails.
- Apex Flow Arcade (apexflowlabs.com): the Play button, scores and Apex ID.
- Facebook Page plugin: shows our Facebook feed on some product pages.
Which of these are live depends on what is configured at the time; each loads only if enabled and accepted.
Third-party content that loads as part of the page
- 3D model previews use Google’s
model-viewerlibrary (ajax.googleapis.com), which receives your IP address. - Video posters come from YouTube image servers (i.ytimg.com). The video itself loads from youtube-nocookie.com only after you press play.
- Product images and downloads are served from our own storage and CDN (Cloudflare R2).
- Site fonts are self-hosted at build time. The in-browser template editor loads additional typefaces from Google Fonts (fonts.googleapis.com), which receives your IP address.
Change your mind
Use Cookie settings in the footer at any time to accept or decline. If you withdraw consent the page reloads so running scripts stop. You can also clear site data in your browser, or turn on Global Privacy Control.