Legal
Cookie Policy
Effective Date: January 1, 2026 · Last Updated: March 27, 2026
This Cookie Policy explains how Fuentes Digital Ventures LLC, operating under the commercial brand Callengo ("Callengo," "we," "us," or "our"), uses cookies and similar tracking technologies on our marketing website at callengo.com (the "Website") and our application at app.callengo.com (the "Application"). It explains what these technologies are, why we use them, and your rights to control their use.
This Cookie Policy should be read alongside our Privacy Policy and Terms of Service, which together describe how we collect, use, and protect your personal data.
COOKIE CATEGORIES ON CALLENGO
Strictly Necessary cookies cannot be disabled — they are essential to operate the Service. All other categories require your consent in applicable jurisdictions.
01What Are Cookies?
Cookies are small text files that are placed on your computer, tablet, smartphone, or other device when you visit a website or use a web application. They are widely used to make websites and applications work, to work more efficiently, and to provide information to the owners of the site.
Cookies are set either by the website or application you are visiting ("first-party cookies") or by third parties whose services are embedded in the page you are visiting ("third-party cookies"). Cookies can be "session cookies," which expire when you close your browser, or "persistent cookies," which remain on your device for a defined period of time or until you delete them.
Cookies are not the only technology used to track activity online. We also describe other similar technologies — including web beacons, pixels, local storage, and session storage — in Section 10 of this policy.
02Why Do We Use Cookies and Similar Technologies?
We use cookies and similar tracking technologies for the following general purposes:
- ▸To make our Website and Application function. Some cookies are strictly necessary for the Website and Application to operate. Without them, you would not be able to log in, maintain a session, or use core features of the platform. These cookies cannot be disabled.
- ▸To remember your preferences. Some cookies allow us to remember choices you have made — such as dismissed alerts and interface settings — so that you do not have to reset them every time you visit.
- ▸To understand how our Website and Application are used. Analytics cookies help us understand how visitors navigate our Website and how customers use our Application. This information allows us to improve the experience and prioritize product development.
- ▸To support our marketing and sales activities. On the Website, certain technologies allow us to track which channels bring visitors to callengo.com, measure the effectiveness of our campaigns, and manage our sales pipeline.
- ▸To keep the Website and Application secure. Some cookies support security functions such as preventing fraudulent account creation, detecting unusual login activity, and enforcing rate limits.
03What Types of Cookies Do We Use?
We organize our cookies into the following categories, consistent with the Interactive Advertising Bureau's Transparency and Consent Framework (IAB TCF v2.2):
3.1 Strictly Necessary Cookies
Always ActiveThese cookies are essential for the Website and Application to function. They enable core functionality such as authentication, session management, security enforcement, and navigation. Without these cookies, the services you have requested cannot be provided. Strictly necessary cookies cannot be disabled through our cookie consent tool.
APPLICATION (app.callengo.com)
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
| sb-[ref]-auth-token | Callengo (Supabase Auth) | Stores the encrypted authentication session JWT. Required to maintain your logged-in state across page loads and browser sessions. | Session / refresh-based |
| sb-[ref]-auth-token-code-verifier | Callengo (Supabase Auth) | PKCE code verifier used during OAuth authentication flows. Required to complete secure social login. | Short-lived (minutes) |
| x-user-meta | Callengo | Caches your company ID and role to reduce database queries on every request. HTTP-only, Secure, SameSite=Lax. | 5 minutes |
WEBSITE (callengo.com)
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
| Session and CSRF cookies | Callengo | Maintain basic session state and protect against cross-site request forgery on web forms. | Session |
| uc_settings | Usercentrics | Stores your cookie consent preferences set via the Usercentrics CMP banner. Required to remember whether you accepted or rejected non-essential cookies. | Persistent |
| uc_user_interaction | Usercentrics | Records that you have interacted with the cookie consent banner, so it is not shown again on subsequent visits. | Persistent |
Usercentrics cookies are classified as strictly necessary because they store your consent preferences and are required to comply with GDPR and ePrivacy Directive obligations. These cookies are set by Usercentrics GmbH (Germany, EU) and loaded from app.usercentrics.eu with settings ID yQ0u7kXv9rUwXL.
3.2 Performance and Functionality Cookies
These cookies allow us to remember choices you have made and enhance your experience. Without them, certain features may not function correctly or your preferences may not be saved between visits.
| Key / Cookie | Set By | Purpose | Duration |
|---|---|---|---|
| callengo_dismissed_alerts | Callengo (localStorage) | Stores IDs of in-app alerts you have dismissed, so they are not shown again. | Persistent (localStorage) |
| callengo_quick_start_dismissed | Callengo (localStorage) | Records whether you have dismissed the quick-start onboarding guide. | Persistent (localStorage) |
| callengo_sync_preferences | Callengo (localStorage) | Stores your calendar sync display preferences in the Application. | Persistent (localStorage) |
| Language preference | Callengo (localStorage) | Stores your selected interface language. | Persistent (localStorage) |
The above items are stored in browser localStorage rather than cookies. They function similarly to persistent cookies but are not transmitted to our servers on every request. They are cleared when you clear your browser data.
3.3 Analytics and Measurement Cookies
These cookies collect information about how visitors use our Website and how customers use our Application. Analytics cookies are not strictly necessary and, for users in the EU, EEA, and UK, are only set after you have given your consent through our cookie consent tool.
WEBSITE (callengo.com) — Google Analytics 4
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes unique users by assigning a randomly generated client identifier. Used to calculate visitor, session, and campaign data. | 2 years |
| _ga_[ID] | Google Analytics 4 | Stores and updates a unique value for each page visit. Used to maintain session state in GA4. | 2 years |
| _gid | Google Analytics 4 | Distinguishes users. Shorter-lived complement to _ga. | 24 hours |
Google Analytics 4 is configured to anonymize IP addresses by default. We do not send personally identifiable information such as email addresses to Google Analytics. Users are identified by a pseudonymized UUID only.
APPLICATION (app.callengo.com) — PostHog Product Analytics
| Cookie / Key | Set By | Purpose | Duration |
|---|---|---|---|
| ph_[key]_posthog | PostHog | Stores a pseudonymized user identifier (your account UUID — not your email address) for session continuity in product analytics. | 1 year |
| __ph_opt_in_out_[key] | PostHog | Stores your opt-in or opt-out preference for PostHog tracking, set when you enable or disable the Do Not Track browser setting. | 1 year |
| PostHog localStorage entries | PostHog | Stores event queue and session recording state for the product analytics SDK. | Persistent (localStorage) |
PostHog is used in the Application to track how authenticated users interact with Application features. Users are identified by a pseudonymized UUID, not by email address. Session recordings are enabled with mandatory masking of password fields, email input fields, and phone number input fields. PostHog respects your browser's Do Not Track (DNT) signal.
3.4 Marketing and Targeting Cookies
Marketing cookies are used to make marketing messages more relevant to you and to measure the effectiveness of our marketing campaigns. Marketing cookies are not strictly necessary and are only set after you have given your consent through our cookie consent tool, where required by applicable law.
WEBSITE (callengo.com) — LinkedIn Insight Tag
The Website uses the LinkedIn Insight Tag, loaded via Google Tag Manager, to measure the effectiveness of our LinkedIn advertising campaigns and to build audiences for ad targeting on the LinkedIn platform. The LinkedIn Insight Tag is consent-gated and is only activated after you have provided consent for marketing cookies through our cookie consent tool. Two LinkedIn ad accounts are connected: a personal account and the Callengo company account, both with auto-tracking enabled via HubSpot.
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
| li_sugr | Browser identifier used for indirect matching of LinkedIn members for conversion tracking. | 3 months | |
| bcookie | Browser identifier cookie for unique identification of devices accessing LinkedIn. | 1 year | |
| lidc | Data center selection cookie for load balancing and optimizing user experience. | 24 hours | |
| UserMatchHistory | Tracks visitors for ad targeting and conversion tracking sync between LinkedIn and ad partners. | 30 days | |
| AnalyticsSyncHistory | Stores information about the time a sync took place with the lms_analytics cookie. | 30 days | |
| li_fat_id | First-party ad tracking cookie for member identification on non-LinkedIn domains. | 30 days | |
| ln_or | Determines whether Oribi analytics can be carried out on a specific domain. | 1 day |
LinkedIn's use of data collected through the Insight Tag is governed by LinkedIn's Privacy Policy. Callengo does not use LinkedIn cookies to serve interest-based advertising outside the LinkedIn platform. Google Ads conversion tracking is connected to HubSpot (account 210-899-4003) with auto-tracking enabled but does not set additional cookies on the Website beyond those managed by Google Consent Mode v2.
3.5 HubSpot Tracking (Website)
We use HubSpot's customer relationship management platform to manage our sales pipeline and respond to enquiries submitted through Website forms. When you submit a form on callengo.com, the information you provide is transmitted to our HubSpot account. If the HubSpot tracking script is active on the Website, HubSpot may set the following cookies:
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
| hubspotutk | HubSpot | Tracks a visitor's identity across sessions for deduplication purposes in HubSpot's contact records. Used to associate form submissions with prior site visits. | 13 months |
| __hstc | HubSpot | Main tracking cookie for HubSpot analytics. Stores subdomain, session start and count, and timestamps. | 13 months |
| __hssc | HubSpot | Tracks sessions for HubSpot analytics. Used to determine whether to increment the session count and timestamps in the __hstc cookie. | 30 minutes |
| __hssrc | HubSpot | Set to 1 whenever HubSpot resets the session cookie. Used to determine whether the visitor has restarted their browser. | Session |
HubSpot cookies on the Website are used exclusively for B2B lead management and are not used for consumer advertising or targeting. Nonetheless, these cookies are classified as non-essential and are subject to consent requirements in applicable jurisdictions.
HubSpot is not used as a behavioral tracking tool within the Application (app.callengo.com). Within the Application, Callengo uses a separate, server-side integration to synchronize account holder data with our HubSpot CRM for account management purposes. This server-side sync does not set cookies in your browser.
3.6 Google Tag Manager (Website)
The Website uses Google Tag Manager (GTM), a tag management system that allows us to deploy and manage tracking scripts on the Website without modifying the site's code directly. GTM itself does not collect personal data; it acts as a container that loads and manages other tags (such as Google Analytics). GTM is configured to respect our cookie consent tool: non-essential tags are only fired after you have provided consent, where required by applicable law. GTM does not set persistent cookies of its own.
3.7 Google reCAPTCHA v3 (Registration Form)
The Application registration form uses Google reCAPTCHA v3, an invisible bot-detection service that processes your IP address, browser characteristics, and behavioral signals to generate a risk score used to distinguish human users from automated bots. No user-visible challenge is displayed.
reCAPTCHA is classified as a strictly necessary security measure for the registration form, as it is essential to protecting the platform from fraudulent account creation. The risk score is processed server-side and is not stored persistently by Callengo. Google's use of data collected through reCAPTCHA is governed by Google's Privacy Policy (policies.google.com/privacy).
04Third-Party Cookies
Some cookies on the Website and Application are set by third parties — companies other than Callengo whose services we use. Their use of cookies is governed by their own privacy policies:
| Third Party | Service | Privacy Policy |
|---|---|---|
| Google LLC | Google Analytics 4, Google Tag Manager, Google Ads, reCAPTCHA v3 | policies.google.com/privacy |
| PostHog, Inc. | Product analytics and session recording (Application) | posthog.com/privacy |
| HubSpot, Inc. | CRM, lead tracking, forms, UTM capture, email marketing (Website) | legal.hubspot.com/privacy-policy |
| LinkedIn Corporation (Microsoft) | LinkedIn Insight Tag — ad attribution and conversion tracking (Website) | linkedin.com/legal/privacy-policy |
| Usercentrics GmbH | Cookie consent management platform (Website) | usercentrics.com/privacy-policy |
| Vercel Inc. | Website hosting and serverless functions | vercel.com/legal/privacy-policy |
Callengo does not control how these third parties use the data they collect through their cookies. We encourage you to review the privacy policies of these third parties to understand their data practices.
05Other Tracking Technologies
5.1 Web Beacons and Tracking Pixels
Web beacons (also known as tracking pixels, clear GIFs, or 1x1 pixel images) are tiny, transparent images embedded in web pages or emails. When your browser loads a web beacon, the server receives information such as your IP address, browser type, and the time of access. We may use web beacons in transactional emails to confirm that the email was delivered and opened. We do not use web beacons for advertising tracking.
5.2 Browser Local Storage and Session Storage
As described in Section 3.2 and 3.3, we use the browser's localStorage API to persist certain user preferences and analytics state on your device. Unlike cookies, localStorage data is not automatically sent to our servers with each request. It is stored on your device until you clear your browser data. localStorage is used only for non-sensitive preference data and analytics state. We do not use sessionStorage for storing personal data or analytics state.
5.3 Do We Use Browser Fingerprinting?
Google reCAPTCHA v3 (used on the registration form) collects browser characteristics as part of its bot-detection assessment. This is limited to the registration flow and is used solely for security purposes — not for tracking your behavior across the Website or building an advertising profile. Callengo does not use fingerprinting technology for tracking or advertising purposes.
06Cookie Consent and Your Choices
6.1 Our Cookie Consent Tool
When you first visit the Callengo Website (callengo.com) from a jurisdiction where cookie consent is required (including the EU, EEA, and UK), you will be presented with a cookie consent banner that allows you to:
- ▸Accept all cookies — consent to all cookie categories, including analytics and marketing cookies;
- ▸Reject non-essential cookies — decline all cookies except strictly necessary cookies; or
- ▸Customize your preferences — individually enable or disable cookie categories.
Your consent preference is stored in a first-party cookie on your browser, so that your choice is remembered on subsequent visits. You may change your cookie preferences at any time through the Cookie Settings tool, accessible via the link in the Website footer.
6.2 Google Consent Mode v2
The Website is configured with Google Consent Mode v2, which communicates your cookie consent choices to Google Analytics and other Google tags in real time. When you decline analytics cookies, Google Consent Mode sets the analytics_storage signal to "denied" and Google Analytics operates in a limited, consent-respecting mode. When you accept analytics cookies, the signal is updated to "granted" and full analytics data collection resumes. Your consent choice is respected at the Google Analytics level, not just at the script-loading level.
6.3 Withdrawing Consent
You may withdraw your consent to non-essential cookies at any time through the Cookie Settings tool in the Website footer. When you withdraw consent, previously set analytics and marketing cookies will be flagged for deletion, and no new non-essential cookies will be set. Withdrawing consent does not affect the lawfulness of any data collected before your withdrawal.
6.4 Browser Settings
Most web browsers allow you to control cookies through their settings. You can typically: view the cookies that have been set on your browser; delete specific cookies or all cookies; block cookies from specific websites or all third-party cookies; and set your browser to alert you when cookies are being set. Please note that blocking or deleting strictly necessary cookies will prevent you from logging in to or using the Application.
| Browser | Cookie Settings URL |
|---|---|
| Google Chrome | chrome://settings/cookies |
| Mozilla Firefox | about:preferences#privacy |
| Apple Safari | Preferences → Privacy → Manage Website Data |
| Microsoft Edge | edge://settings/privacy |
6.5 Industry Opt-Out Tools
For US-based visitors, the following industry opt-out tools allow you to opt out of interest-based advertising from participating companies:
- ▸Digital Advertising Alliance (DAA): optout.aboutads.info
- ▸Network Advertising Initiative (NAI): optout.networkadvertising.org
- ▸European Interactive Digital Advertising Alliance (EDAA): youronlinechoices.eu
Note that Callengo does not currently use advertising networks or serve interest-based advertising. These tools may not apply to Callengo's current cookie practices but are provided as a resource.
6.6 Google Analytics Opt-Out
To opt out of Google Analytics tracking across all websites, you may install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout. This add-on prevents the Google Analytics JavaScript from sharing information about your visit activity with Google Analytics.
07Do Not Track
Some browsers include a "Do Not Track" (DNT) feature that signals to websites and applications that you do not want your online activity tracked. The Callengo Application's product analytics tool (PostHog) is configured to respect the DNT browser signal. If you have enabled DNT in your browser, PostHog will not track your activity in the Application.
The Callengo Website does not currently respond to DNT signals outside of our cookie consent tool. For website tracking preferences, please use the Cookie Settings tool described in Section 6.1.
08Cookies on the Website vs. the Application
| Website (callengo.com) | Application (app.callengo.com) | |
|---|---|---|
| Primary audience | Visitors, prospective customers | Authenticated account holders and team members |
| Strictly necessary cookies | Basic session and CSRF cookies | Supabase Auth session cookies |
| Analytics | Google Analytics 4 (with consent) | PostHog product analytics (respects DNT) |
| Tag management | Google Tag Manager | Not applicable |
| CRM tracking | HubSpot (with consent) | Server-side only (no browser cookies) |
| Ad attribution | LinkedIn Insight Tag (with consent) | Not applicable |
| Session recording | Not applicable | PostHog (with field masking) |
| Consent mechanism | Usercentrics CMP banner + Google Consent Mode v2 | DNT signal respected |
| Bot detection | Not applicable | Google reCAPTCHA v3 (registration form only) |
09Cookies Set by Third-Party Integrations
When you connect a third-party service to your Callengo account (such as Google Calendar, HubSpot CRM, or Salesforce), the OAuth authorization flow for that service may redirect you to the third party's own website, where that third party's cookies may be set. Callengo does not control the cookies set by third-party websites during authorization flows. No cookies from connected CRM or calendar providers are set on callengo.com or app.callengo.com as a result of connecting an integration.
10Cookie Lifespan Summary
The lifespan of each cookie we use is described in the tables in Section 3. In summary:
| Cookie Type | Lifespan |
|---|---|
| Session cookies (Supabase auth code verifier) | Expire when you close your browser |
| Short-lived operational cookies (x-user-meta) | 5 minutes |
| Google Analytics cookies (_ga, _ga_[ID]) | Up to 2 years |
| HubSpot tracking cookies (__hstc, hubspotutk) | 13 months |
| PostHog identity cookie | 1 year |
| HubSpot session cookie (__hssc) | 30 minutes |
| HubSpot browser detection (__hssrc) | Session |
| LinkedIn cookies (bcookie) | 1 year |
| LinkedIn cookies (li_sugr, UserMatchHistory, etc.) | 30 days to 3 months |
| Usercentrics consent cookies | Persistent (until cleared) |
| Authentication cookies (Supabase session token) | Refreshed as long as session is active; expire on logout |
You can delete cookies at any time through your browser settings, which will reset the lifespan of any persistent cookies.
11How Often Will We Update This Cookie Policy?
We review and update this Cookie Policy periodically to reflect changes in our cookie use, the introduction of new technologies, changes in applicable law, or changes in our third-party service providers. When we make material updates, we will post the updated Cookie Policy on this page with a revised "Last Updated" date and update our cookie consent tool to reflect any new or changed cookie categories.
We encourage you to review this Cookie Policy periodically. Your continued use of the Website or Application after any update constitutes your acceptance of the updated policy.
12Contact Us
If you have questions about this Cookie Policy, wish to exercise your rights regarding cookies, or would like more information about the specific cookies we use, please contact us:
This Cookie Policy was last updated on March 27, 2026. It forms part of Callengo's privacy documentation alongside the Privacy Policy (callengo.com/privacy) and Terms of Service (callengo.com/terms).