Local Storage and Analytics Policy

1. What cookies and local storage are

Cookies are small records that a website or external service stores in the browser. LocalStorage serves a similar purpose, but its data is available only to code from the relevant website and is not sent automatically with every HTTP request.

2. Essential browser data

These records are required for the interface behaviour requested by the user and are not used for advertising profiling.

lang

The selected website language. It is retained until the selection is changed or browser data is cleared.

3. Visit source and advertising attribution

The original smmdrug_attr record may be attached to a form. Limited current-visit context and one previous advertising touch may be attached to a form and a technical WhatsApp/phone click notification on our server and in a closed Telegram workspace. This is not a history of every page visited. An advertising keyword comes only from a supplied label and does not prove the actual search query. External-referral data supports an inference about the source; without sufficient information, the source remains unknown. The 30-minute and 90-day periods apply to browser records; the server click journal is retained for 30 days, and enquiries under the data policy. Clearing browser data removes these local records. This attribution does not change Google, Yandex Metrica or Meta measurement, or the separate OpenAI choice.

smmdrug_attr

Original UTM tags, advertising click identifiers, the first page visited and external referrer for the form. Retained for no more than 90 days from capture; not automatically treated as a new visit's source.

smmdrug_notification_visit_v2

One limited current-visit context and a private activity timestamp in sessionStorage. A visit expires after 30 minutes of inactivity; closing the tab normally removes this record. It contains only the described source, safe landing path, referring hostname and time, not a full browsing journey, IP address, user-agent, contact details, query string or raw click IDs.

smmdrug_notification_paid_v2

One most recent identified advertising touch and its start date in localStorage, for no more than 90 days from that date. Ordinary page views do not extend the period. It contains no full referral history, raw click IDs or oppref; when attached, it is marked as previous, not as the current visit's source.

4. External analytics

The Google, Yandex Metrica and Meta Pixel scripts listed in this section load on every page of the website. Submitting an enquiry does not depend on them. Section 7 describes the separate choice for server-side OpenAI measurement.

• Google Tag Manager (GTM) is the sole Google loader: it loads one Google Analytics 4 property and the Google Ads conversion-measurement tags.
• Only technical events are sent to Google: a server-accepted enquiry (accepted=true) and WhatsApp or phone clicks. The visitor's name, phone number and enquiry message are not sent to Google.
• Google remarketing and Google enhanced conversions are not used. analytics_storage and ad_storage are granted, while ad_user_data and ad_personalization remain denied.
• Meta Pixel (Main Dataset, ID 708928263783270) records PageView and allowlisted Lead, Contact, ViewContent, CalculatorStart, CtaClick and PaidSearchVisit events to build website audiences, show SMM DRUG ads on Instagram and measure results. Names, phone numbers, enquiry text, calculations and advertising click IDs are not sent as Meta event parameters.
• Meta may create the first-party _fbp and _fbc cookies and automatically receive the IP address, user-agent, referrer and current URL under its Business Tools rules. Automatic event detection and advanced matching are disabled on the website side.
• Yandex Metrica measures visits, clicks and conversions. Webvisor session recording is disabled on the website.
• These services may create their own identifiers and cookies with lifetimes ranging from the current session to 24 months, depending on provider and browser settings.
• Providers may receive the IP address, browser and device information, URL, referrer, identifiers and events. Processing may be cross-border.

5. External media and links

YouTube videos use youtube-nocookie mode and connect only after an action by the user. When a video is played, the service may still receive technical data. Following links to WhatsApp, Telegram, Instagram or another platform means that the user interacts directly with the selected service.

6. How to limit collection

• Collection can be limited with browser tools: blocking third-party cookies, private browsing, or extensions that block measurement scripts.
• Clearing browser data removes local advertising attribution and the _ga*, _ym*, _gcl_*, _fbp and _fbc cookies accessible to the current domain.
• Some third-party records may require the user to clear browser data or change the provider's own settings.
• Questions about data may be sent to smmdrug@gmail.com.

7. Optional OpenAI measurement without OpenAI cookies

Unlike the Google, Yandex Metrica and Meta Pixel processing above, server-side OpenAI measurement starts only after the visitor's separate choice. Refusal does not restrict forms or contact options. No OpenAI Measurement Pixel, SDK or cookies are used; before permission, oppref is not written to localStorage or sent to OpenAI. The advertising parameter may be held temporarily in page memory for this choice and is removed from the address bar.

After permission, the browser sends event information only to our server: the server-saved form or WhatsApp/phone click type and oppref, if present. The server adds the time, random ID and only the domain https://smmdrug.kz, then sends the permitted event to OpenAI Conversions API. Data categories, the recipient and possible cross-border processing are described in the data policy's “Separate OpenAI advertising measurement” section. These data are pseudonymous, not anonymous.

• “OpenAI settings” lets you change the saved choice. Refusal deletes oppref and stops new events; clearing browser data removes both records and requires fresh permission.
• Actions before permission are not replayed. Withdrawal applies to future collection and does not automatically delete information already transferred to OpenAI.
• Names, contact details, messages, their hashes, the visitor's IP/user-agent and browser profile are not sent to OpenAI; every event has opt_out=true to restrict future user-level personalization.

smmdrug_openai_consent_v1

The separate “accepted” or “denied” choice, decision time and version 2026-10-24-openai-v1. Retained for no more than 30 days; it is neither consent to submit a form nor a general switch for website analytics.

smmdrug_openai_click_v1

The original advertising identifier oppref and its capture time. Written only after separate permission and retained for no more than 30 days; it is not used without valid permission and is deleted.