Cookies and Analytics

Effective date: November 7, 2026

This notice is part of the C4 SaaS privacy policy at https://www.c4saas.com/privacy-policy. It explains the cookies and similar technologies on www.c4saas.com (the "website"), operated by C4 Payments LLC, doing business as C4 SaaS ("we", "us"), and how we use Google Analytics.

Cookies on the website

The website uses no advertising cookies. Administrator sign-in uses necessary cookies for access and security, and the public inquiry form needs no account. Our own page counts use session storage, not cookies, as described in the privacy policy. Analytics cookies are set only if Google Analytics is running and you have allowed it.

When Google Analytics runs

Google Analytics 4 is a web analytics service provided by Google LLC ("Google"). It runs on the website only when two things are both true: we have turned it on for the website, and you have allowed it. When we have turned it on, a banner that names Google Analytics and its cookies asks for your permission, and an "Analytics preferences" button appears at the bottom of each public page. If you see neither, Google Analytics is not running for you. It does not load, and nothing is sent to Google through it, until you select "Allow analytics". If you decline or never choose, it stays off. It never runs on administrator, sign-in, or preview pages.

What it collects

With your permission, Google Analytics collects the address of the page you view without the query string (the part after a question mark), the page title, when and for how long pages are open, your language setting, general browser and device information (such as browser type and operating system), and an approximate location (such as country or region) that Google derives from your IP address. We do not send Google the address of the page that linked you to us. When our website accepts an inquiry, we send one event recording only that an inquiry was sent, with no name, email address, phone number, message, or inquiry reference. We do not use Google Analytics to identify you or combine its data with your inquiry.

How we set it up

Whenever Google Analytics runs on the website, we keep it set up as follows: Google signals and advertising personalization are off; the setting that lets Google use our Google Analytics data for its own products and services is off; event-level and user-level data is kept for 2 months and then deleted by Google (aggregated reports, such as monthly page views, may be kept longer and do not identify individual visitors); and we do not use the data for advertising, remarketing, or advertising audiences. With these settings, Google processes the data on our behalf as our service provider (also called a processor) under Google's data processing terms. To learn how Google uses information from sites that use its services, visit https://policies.google.com/technologies/partner-sites. Google's privacy policy is at https://policies.google.com/privacy.

Google Analytics cookies and local storage

If you allow Google Analytics, it sets two first-party cookies: _ga, which tells one browser apart from another, and a cookie whose name begins with _ga_ followed by an identifier for our website, which keeps track of your visit. By default they expire after 2 years unless you withdraw permission or delete them sooner. We store your choice (allowed or declined) in your browser's local storage so the banner does not ask on every page, and after an inquiry is accepted we store a small marker there so it is not counted twice. Neither item is sent to us or to Google. Clearing your browser's site data removes them.

Withdrawing permission

You can change your mind at any time: select "Analytics preferences", then "Decline or withdraw". The website tells Google Analytics that permission is withdrawn, stops sending data, and deletes the _ga cookies. Data sent before you withdrew is not deleted at that moment; it expires after 2 months. You can also block or delete cookies in your browser, or use Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as your choice to opt out: Google Analytics does not load, the banner and the "Analytics preferences" button are not shown, and our own page counts are skipped. We also treat Global Privacy Control as a request to opt out of any sale of personal information or sharing for targeted advertising, which we do not do in any case. Inquiries you choose to send are still delivered.

Visitors outside the United States

When Google Analytics runs, its data from the European Economic Area, the United Kingdom, and Switzerland is transferred to Google in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, the UK Extension to it, and the Swiss-U.S. Data Privacy Framework, and relies on the European Commission's standard contractual clauses where a transfer is not covered by them. In those regions we use Google Analytics only with your consent, which you can withdraw as described above, and we keep our own cookieless page counts for our legitimate interest in understanding how the website is used.

Contact

Questions: info@c4saas.com. To ask us to delete your data, see "How to delete your data" at https://www.c4saas.com/privacy-policy.