Cookie policy
This website, ouxp.com, sets one cookie of its own – to remember your cookie choice. Google Analytics adds two more, but only if you allow it, and Cloudflare, our network provider, may set a short-lived security cookie. There are no advertising or tracking pixels.
Draft – pending legal review before launch. This policy describes how the site works today; its wording may change after review.
Which cookies does ouxp.com use?
One of our own, which every visitor gets once they choose; two from Google Analytics, only if you allow analytics; and Cloudflare’s security cookie, when Cloudflare needs it. The table lists each one. Cloudflare’s rarer security cookies are under Cloudflare cookies.
| Cookie | Set by | What it does | Kind | Lasts |
|---|---|---|---|---|
__Host-ouxp_consent | OUXP | Remembers your cookie choice: a random consent ID, your choice, the banner version and the date. Nothing that identifies you. The __Host- prefix means only ouxp.com itself can set it. | Strictly necessary | 6 months |
_ga | Google Analytics | Tells visits apart with a random ID | Analytics – only if you allow it | Up to 13 months |
_ga_56TC5VVQ7N | Google Analytics | Keeps track of your current visit (the session) | Analytics – only if you allow it | Up to 13 months |
__cf_bm | Cloudflare | Bot protection: helps tell people from automated traffic. Set only while Cloudflare’s bot protection is on | Strictly necessary | 30 minutes after your last activity |
Checked against the site’s code on October 13, 2026. The spam check on our forms sets no cookie on ouxp.com – see the form spam check.
Everything else a site can use
| Technology | On ouxp.com |
|---|---|
| Cookies set by OUXP | One__Host-ouxp_consent, which remembers your cookie choice |
| Analytics – Google Analytics 4 | Only if you allow it Nothing loads until you choose “Allow analytics” – see Google Analytics |
| Tag managers, heatmaps, session recording | Not used No such script runs on any page |
| Advertising and retargeting pixels | Not used No Meta, Google Ads, LinkedIn or similar tags; Google signals and ad personalization are off |
| Embedded video, maps, chat or social widgets | Not used Other sites load only when you click a link to them |
| Fonts and scripts from other domains | Only when needed Our fonts are hosted on ouxp.com. Google’s analytics script loads only if you allow it, and the forms’ spam check comes from Cloudflare – see the form spam check |
| Browser storage – localStorage, sessionStorage, IndexedDB | Not used See other storage on your device |
| Security and delivery cookies from Cloudflare, our network provider | Possible Strictly necessary – see which ones and why |
| Network error reporting from Cloudflare | Some browsers No cookie – see what it reports |
How do you choose – and change your mind?
On your first visit, a banner at the bottom of the page asks whether you allow Google Analytics. Until you answer, nothing optional runs – and the site works the same whatever you choose.
- “Allow analytics” and “Essential only” sit side by side and look the same: saying no takes one click, like saying yes.
- Cookie settings explains each kind of cookie. Analytics is off there until you switch it on.
- Ignoring the banner isn’t a yes. It waits at the bottom of the page without blocking anything, and Escape doesn’t answer it for you.
- If your browser sends a Global Privacy Control signal, we take it as “Essential only”: no banner, and the footer of every page and Cookie settings show “Opt-Out Preference Signal Honored”.
- We keep your choice for 6 months, then ask again – sooner if the tools we use change.
- Changing your mind is just as easy: Cookie settings at the bottom of every page, or the button below. Switching analytics off deletes Google’s cookies from ouxp.com and reloads the page.
- We keep a record of each choice, to show that we asked – see your cookie choice in the privacy policy.
The banner and Cookie settings need JavaScript. Without it nothing optional runs either, so there is nothing to choose.
What does Google Analytics set?
If you allow it, Google Analytics 4 – a service of Google LLC in the US – counts which pages are visited, how visitors arrive and when a form is sent. It never receives what you type into a form. What it collects, where the data goes and how long Google keeps it are in our privacy policy.
- Its script loads from www.googletagmanager.com and it sends measurements to Google’s analytics servers – only after you allow analytics.
- It sets
_gaand_ga_56TC5VVQ7Non ouxp.com, kept up to 13 months. - Google signals and ad personalization are off, and it isn’t linked to Google Ads, so it sets no advertising cookies.
- Google Analytics doesn’t log or store your IP address.
- When you switch analytics off, we stop it and delete its cookies from ouxp.com.
How Google uses cookies (external site)
Which cookies can Cloudflare set?
Cloudflare sits between your browser and our server. It delivers pages from a data center near you and filters out attacks and automated traffic. To do that job it may set a cookie on ouxp.com – these cookies are Cloudflare’s, and we don’t read or use them.
| Cookie | What it does and how long it lasts |
|---|---|
__cf_bm | Bot protection: helps Cloudflare tell people from automated traffic. Its contents are encrypted, and Cloudflare says it doesn’t track you from site to site or between sessions. Lasts: until 30 minutes after your last activity |
cf_clearance | Security checks: remembers that your browser passed one, so you aren’t checked again on every page. Lasts: 30 minutes by default |
cf_chl_rc_* | Security checks: help Cloudflare diagnose problems with the checks themselves. Lasts: not stated by Cloudflare |
__cflb | Load balancing: keeps you on the same server when traffic is spread across several. Lasts: from a few seconds up to 24 hours |
_cfuvid, __cfruid | Rate limiting: tells apart visitors who share an IP address when a rate limit applies. __cfruid belongs to Cloudflare’s older rate limiting.Lasts: not stated by Cloudflare |
__cfseq | Sequence rules: tracks the order and timing of your requests, to spot abuse such as skipped steps. Lasts: not stated by Cloudflare |
__cfwaitingroom | Waiting room: holds your place in a queue while traffic spikes. Lasts: not stated by Cloudflare |
cf_ob_info, cf_use_ob | Always Online: shows a saved copy of a page while our server is down. Lasts: 30 seconds |
You may receive none of them. Each appears only when its Cloudflare feature is switched on for ouxp.com: bot protection can set __cf_bm on an ordinary visit, while cf_clearance appears after a security check – for example, when traffic from your network looks automated. Cloudflare classes all of its cookies as strictly necessary and notes that their data may be processed in its US data centers.
Cloudflare’s own cookie reference (external site)
Cloudflare also handles request data, such as IP addresses, to deliver and protect the site. That data isn’t stored in your browser, so our privacy policy covers it rather than this page.
The spam check on our forms
The contact and migration assessment forms use Cloudflare Turnstile to keep out automated spam. Its script loads from challenges.cloudflare.com only after you start filling in a form, and it runs in a small frame from that address – most people never see it, and a checkbox appears only when Cloudflare needs one click to be sure. It checks signals such as your IP address and browser details; Cloudflare states that they are strictly necessary and used to detect and block bots, not to identify, profile or target anyone. It hands the form a one-time token rather than a cookie, so it sets no cookie on ouxp.com, and inside its frame Cloudflare may keep short-lived data in your browser for challenges.cloudflare.com while the check runs – used, like the check itself, only to tell people from bots. See Cloudflare’s Turnstile privacy addendum (external site).
Does the site store anything else on your device?
Only your cookie choice. Cookies aren’t the only way a site can remember you – browser storage (localStorage, sessionStorage, IndexedDB), tracking pixels and device fingerprinting can do the same job. Apart from the __Host-ouxp_consent cookie, our own code uses none of them, including in the two places where you might expect it to.
The Pause motion button saves nothing
The button in the footer stops animation on the page you’re reading. The choice isn’t saved, so the next page starts with motion again – unless your device is set to reduce motion, which the site always respects.
Forms keep nothing in your browser
What you type into the contact or migration assessment form exists only in the open page. When you send it, your browser posts the answers to ouxp.com with cookies switched off for that request, and the site saves nothing on your device. What we do with the answers is in the privacy policy.
Cloudflare’s network error reports
One setting comes from Cloudflare rather than our code. Browsers that support Network Error Logging, such as Chrome and Edge, keep an instruction for up to 7 days to report failed connections to ouxp.com – the page requested, the error and its timing – so Cloudflare can spot network problems. Successful visits aren’t reported, no cookie is involved and Cloudflare says the reports contain no personal information.
What about links to other sites?
Some links lead to other companies’ sites: our reviews on the Shopify Partner Directory (external site), our agency profile on Upwork (external site) and the client stores named in reviews. Nothing from those sites is embedded on our pages – no badges, widgets or review feeds – so they can’t set cookies until you click through. Once you’re there, their own cookie policies apply.
Email and phone links open your own mail or phone app. Nothing reaches us until you send the email or place the call.
How can you check this yourself?
You don’t have to take our word for it. Any desktop browser shows what a site stores:
- Open ouxp.com, then your browser’s developer tools: F12 or Ctrl+Shift+I on Windows, Cmd+Option+I on a Mac. In Safari, turn on the developer features under Settings › Advanced first.
- Open the stored data: the Application tab in Chrome and Edge, the Storage tab in Firefox and Safari.
- Under Cookies, select ouxp.com. Once you’ve made a choice you’ll see
__Host-ouxp_consent;_gaand_ga_56TC5VVQ7Nonly if you allowed analytics; and perhaps a Cloudflare cookie listed above. Local storage and session storage are empty. - In the Network tab, reload the page. Requests go to ouxp.com. Paths starting with
/cdn-cgi/are Cloudflare’s, served on our own domain – today the script that hides our email address from spam bots, plus a security check if Cloudflare runs one. Requests to www.googletagmanager.com and google-analytics.com appear only if you allowed analytics. On the two form pages, requests to challenges.cloudflare.com appear once you click into a form: that’s the spam check.
Leaving out ad tags and widgets also keeps these pages light. In Shopify performance optimization, we trace each slow metric on a client store to its cause – often an app script or a third-party tag – and you decide what stays.
How do you block or delete cookies?
For analytics, use Cookie settings: switching analytics off deletes Google’s cookies from ouxp.com. If you delete the __Host-ouxp_consent cookie yourself, the banner asks again on your next visit, and nothing optional runs until you answer.
To block or clear cookies anyway, every major browser lets you do it for a single site in its privacy or site-data settings. Most visits work fine without Cloudflare’s cookies. The trade-off: when Cloudflare decides to check a connection, its security check needs a cookie to remember that you passed – with cookies blocked, you may see the check again and again or be unable to get through. With cookies blocked, the banner also can’t remember your answer, so it asks on every page.
When does this policy change?
Whenever the cookies or tools on the site change. Before we add anything that isn’t strictly necessary – an embedded booking calendar, a chat widget, another analytics tool – we update this page and the date at the top, and the banner asks everyone again.
- Nothing optional loads until you choose.
- Advertising or retargeting pixels, if ever added, would need your opt-in too.
- Names, email addresses, store URLs and message text never go into analytics.
Questions about this policy?
This policy covers ouxp.com, run by OUXP (Outstanding Experience), a Shopify Plus agency. Questions about it go to the same team that answers everything else – by email, by phone or through the contact form.
- [email protected]
- Phone
- +1 (818) 651-3226
- Hours
- Mon–Fri, 9 AM–9 PM ET (6 AM–6 PM PT)
- Based in
- Los Angeles, California
During business hours, an engineer replies within 30–60 minutes.