Who is behind each purpose

This page names every company that receives anything when you grant one of the three optional purposes on our cookie card, and every company that receives anything without a purpose being granted. It is the second level of the cookie notice: the Cookie Policy explains what each purpose does, and this page says who is behind it.

It lives at its own address on purpose. Suppliers change; what a purpose does, and what you agreed to, does not. Keeping the names here means we can replace a supplier without reopening a legal document, and it means this list can be more current than a policy ever is.

1. How to read this list

Whose cookie it is is the part that matters most. A cookie on effect.com is ours and we can delete it for you. A cookie on somebody else’s domain is theirs, is governed by their notice rather than ours, and we cannot delete it. That is the same distinction section 2 of the Cookie Policy draws, applied provider by provider.

2. Analytics and performance

Granted by you. Counts how many people read what, and how quickly pages render.

Google LLC, for Google Analytics 4 and Google Tag Manager

Counts page views and named interactions. Cookies on effect.com. Processes in the United States and other countries where Google operates.

Privacy noticeOpt out

PostHog Inc., for product analytics

Counts named product steps rather than watching a screen. One identifier on effect.com, plus keys in local and session storage. Processes in the United States.

Privacy notice

Vercel Inc., for Speed Insights

Measures how quickly a page rendered. Writes nothing to your browser. Processes in the United States.

Privacy notice

3. Session replay

Granted by you, separately from counting. Runs on the marketing site only, never inside the client workspace.

Microsoft Corporation, for Clarity

Records mouse movement, scrolling and clicks, and builds aggregated heatmaps. Form fields are masked before anything leaves your browser. Two cookies on effect.com, two on clarity.ms and microsoft.com, which are Microsoft’s own and which we cannot clear. Processes in the United States.

Privacy notice

4. Embedded content

Granted by you. Today this is the booking calendar and nothing else.

Zoom Communications, Inc., for the booking calendar

Places a page of Zoom’s inside one of ours. Zoom sets its own cookies on its own domains under Zoom’s notice rather than ours, and receives your IP address and basic device information. Refusing costs you the calendar and nothing else.

Privacy notice

Two companies set cookies from inside that same embedded page, on their own domains, and neither receives anything from us: Cloudflare, Inc., running an anti-bot check for Zoom, and Stripe, Inc., setting a device signal. We name them because you will see their cookies in your own browser and would otherwise have no way to know where they came from.

5. Without a purpose being granted

These three are described in section 6 of the Cookie Policy. None of them is on the consent card, and the reasons differ.

Sentry (Functional Software, Inc.), for failure monitoring

Receives a technical error report when our own software fails, carrying no field you typed. Loaded on every page so that it can catch a failure during loading, which means it also sees the network connection your browser makes to it, and that connection carries your IP address. Processes in the United States.

Privacy notice

Cloudflare, Inc., for the anti-abuse check

Runs on the sign-in and registration screens only. Receives your IP address and returns a token proving a person filled in the form. Receives no field you typed.

Privacy notice

Supabase, Inc., for the workspace sign-in session

Strictly necessary: it is the cookie that keeps you signed in. Ours, on our domain. Processes in the United States.

Privacy notice

6. What is not here, and will not be

We run no advertising or targeting provider of any kind. Advertising and personalisation signals are denied permanently rather than conditionally, whatever you answer on the card. There is no provider on this page that receives anything for an advertising purpose, because there is no such purpose.

7. Changes to this list

Every change is published here with its date, in the log below. Where a change means a purpose starts doing something materially different from what you agreed to, we ask you again rather than relying on this page.

We publish a new provider here at least thirty days before it begins receiving anything, so that a client who objects has time to say so. That commitment is on this page rather than only in a data processing agreement, so that it applies to everybody who reads it and not only to signed customers.

To be told when this page changes, write to legal@effect.com with the subject “provider list” and we will add you.

8. Change log

August 23, 2026

This page created. It carries the providers previously named inside the Cookie Policy itself; no provider was added or removed in the move, and nothing about what any of them does has changed.

9. Contact

Sylvent Corporation, 131 Continental Drive, Suite 301, Newark, DE 19713, United States. legal@effect.com