Last updated: August 25, 2026
When you arrive at inboundra.io, no analytics or advertising technology loads. A notice asks you to choose first. If you decline, nothing beyond what is strictly necessary is ever loaded, and we collect nothing. This is about measurement: if you submit one of the lead-capture forms we host on behalf of a client, such as /get-quote.html, the data you type there is collected, whatever you decide about cookies. Declining takes one click, exactly like accepting. You can change your mind at any moment.
One honest exception: the site fonts are served from Google Fonts, so Google sees your IP address when the page loads, before you decide. It is not a cookie or a tracker and we do not use it to measure you, but it happens and we would rather tell you. We are working on self-hosting them so it stops happening.
Your current choice: — ·
"Cookie" is used in this document in the broad sense the law gives it: any technology that stores or reads information on your device. On this site that includes browser cookies proper and also localStorage and sessionStorage, which is what we actually use for most things.
These make the site work and remember the decision you just made. They require no consent, because without them we cannot provide the service you asked for. They are first-party, they are never shared, and they never leave your browser.
| Name | Type | Purpose | Retention |
|---|---|---|---|
inb-consent | localStorage | Remembers your cookie choice so we do not ask again on every visit. | Until you clear it |
inboundra-lang | localStorage | Remembers whether you read the site in Spanish or English. | Until you clear it |
Our own telemetry. It runs on infrastructure we control, the data is ours, and we never sell it. We use it to understand which parts of the page are read and which are ignored, so we can improve them. Important notice: when Google measurement is active, this same box also enables Google Analytics 4, from Google LLC, a third party with its own cookies and its own policy. Status as of the date of this document: no third-party tag is configured on this site, so ticking this box today loads neither Google Analytics nor any other external tool. And one permanent exception: lead-capture pages we host on behalf of a client, such as /get-quote.html, never load third-party tags, whatever you tick. The data you type there belongs to the client, and handing it to Meta or Google is not our decision to make.
What we record when measurement is connected: which sections you saw, how far down you scrolled, which buttons you pressed, which FAQ questions you opened, how long you were actively engaged, the language you chose, your approximate country, region and city as reported by our hosting network, your browser and operating system family, and your screen size.
What we never store for analytics: your name, your email or your phone. Today we do not store your IP address for analytics either: while our own database is not connected, no IP is stored for measurement, neither raw nor transformed. When we connect it, the IP will not be stored raw: it will exist only as a cryptographic digest computed with a secret server-side salt, used solely to stop abuse of the endpoint, and this document will be updated the same day. This promise covers measurement on this site. It does not cover the lead-capture pages we host for clients, such as /get-quote.html: when you submit one of those, your name, email, town, phone and IP address are stored raw inside the messaging-consent record and kept for 5 years, as explained in the Privacy Policy. One thing that does happen today, on every page load: to authorize sending a conversion to Meta, our server computes a short cryptographic digest from your IP address and places it inside a 30-minute ticket handed to your own browser. That ticket exists so a third party cannot inject fake conversions into our advertising. The digest is never stored, in any database or log, and it never leaves in any direction other than back to you. A ticket is issued to every visitor who allows any category, not only marketing.
What leaves to a third party: if you allow marketing and the Meta relay is configured, our server sends Meta, in order to measure our ads, the IP address you are browsing from and your browser identifier, together with the event. Meta processes that data under its own policy. If you do not allow marketing, this never happens. As of the date of this document that relay is not configured and no event has been sent to Meta.
| Name | Type | Purpose | Retention |
|---|---|---|---|
inb-vid | localStorage | A random identifier for your browser, so repeat visits are not counted as new people. It is not linked to your identity. | Until you clear it |
inb-sid | sessionStorage | Groups the actions of a single visit. | Until you close the tab |
inb-first-touch | localStorage | Records how you found us the first time (campaign, link, referring site). | Until you clear it |
| Server-side events | Our database | The behavioural records described above. While our own database is not yet connected, these events are not stored at all: only the event type and the page are logged, with no identifiers. | 180 days once connected, then deleted automatically |
These are third-party technologies. We use them to measure our own advertising and to reach people similar to our customers. If you decline this category, none of them is ever loaded.
| Provider | Technology | Purpose | Their policy |
|---|---|---|---|
| Meta Platforms, Inc. | Meta Pixel · Conversions API | Measure results of our Facebook and Instagram ads and build audiences. | facebook.com/privacy |
| Google LLC | Google Analytics 4 · Google Ads | Aggregate traffic analysis and measurement of our ad campaigns. | policies.google.com/privacy |
As of the date of this document there is no Pixel, no GA4 and no Google Ads configured on this site, so nothing in this section happens yet. Once configured: with Google we use Consent Mode: your decision is passed to Google before anything is measured. With Meta we call fbq('consent','grant') only after you accept. The server-side relay (Conversions API) fires only if you allow both categories, analytics and marketing.
If you arrive from an ad, an email or a shared link, the address may carry parameters (utm_source, utm_campaign, fbclid, gclid and similar). With analytics consent we record them, together with the site that referred you. This tells us which of our own campaigns is working. It is used to evaluate campaigns, not to identify you as a person.
Use the control, available on every page of this site in the footer. Withdrawing takes effect immediately for our own collection. You can also delete the stored values from your browser settings at any time.
You have the right to request deletion of your data. Write to inboundrahq@inboundra.com and we will erase every record associated with your browser identifier. We respond within 10 business days. That deadline is our own commitment, not a period imposed by statute.
Because nothing loads until you say yes, a visitor who never accepts is never tracked, regardless of browser signals. We treat no consent as no tracking, which is the same outcome those signals are asking for.
If we add a technology or change a purpose, we raise the version of the consent notice and ask you again. A previously given consent is never silently reused for something new.
Inboundra LLC
11 Valle de las guavas, Aguada, PR 00602, Puerto Rico
Puerto Rico Registry of Corporations: 573241
inboundrahq@inboundra.com · (939) 438-2346
Inboundra