Cookie policy
- Effective date
- Last updated
Summary
- One essential item in your browser remembers your cookie choice. It cannot be switched off.
- If you pick a theme or pause animations under Display settings at the top of a page, your browser remembers that choice. It is never sent to us.
- Our case review form, booking calendar, and chat load only if you allow functional cookies. The chat keeps a few items in your browser on elahilaw.com, listed below. You can always call instead.
- Google Analytics and Microsoft Clarity load only if you allow analytics cookies.
- The Meta Pixel loads only if you allow marketing cookies, and never if your browser sends Global Privacy Control.
- Change your choice at any time with "Cookie settings" at the bottom of every page. To opt out of sale, sharing, and targeted ads, use "Your Privacy Choices" there too.
What we mean by cookies
Cookies are small files a website saves in your browser. Sites also use similar browser storage, such as localStorage, and small scripts that send data to another company. In this policy, "cookies" covers all of these.
Our own code sets no cookies. It keeps 3 small items in localStorage, listed first in the table below. The cookies you may find on elahilaw.com come from Google Analytics and Microsoft Clarity, only after you allow analytics, and from the Meta Pixel, only after you allow marketing. If you allow functional cookies, the chat also keeps items in localStorage on elahilaw.com.
The 4 categories
Essential. Needed for the site to work and to remember your privacy and display choices. Always on.
Functional. Our case review form, booking calendar, and chat. They come from Pinn.Media CRM, the contact system our web studio runs for us on HighLevel software, and load only when you allow them.
Analytics. Google Analytics and Microsoft Clarity, which show us how people use the site. Off until you allow them. Microsoft may also use Clarity data for its own purposes, including advertising, so some state laws treat Clarity as a sale or sharing. If your browser sends Global Privacy Control, analytics stays off and cannot be switched on.
Marketing. The Meta Pixel, which measures our Facebook and Instagram ads and helps show them to people who have visited our site. It sends nothing from our practice area, contact, booking, or blog article pages. State privacy laws treat this as sharing or targeted advertising. Off until you allow it. If your browser sends Global Privacy Control, marketing stays off and cannot be switched on.
Every tool on this site
| Tool | Provider | Category | Cookies or storage | Purpose | How long | How to opt out |
|---|---|---|---|---|---|---|
| Your cookie choice | Elahi Law | Essential | elahi-consent-v1 (localStorage on elahilaw.com) | Remembers your choices, when you made them, and whether your browser sent Global Privacy Control | Until you clear browser storage, or until we change the categories and ask again. Safari deletes it after 7 days of Safari use without a visit to our site, and the site asks again | Cannot be switched off. Clearing browser storage removes it, and the site asks again |
| Your theme choice | Elahi Law | Essential | elahi-theme (localStorage on elahilaw.com). Set only when you pick Light or Dark under Display settings at the top of a page | Opens every page in the theme you picked. Never sent to us or anyone else | Until you clear browser storage. Picking System removes it. Safari deletes it after 7 days of Safari use without a visit to our site | Pick System under Display settings at the top of any page, or clear browser storage |
| Pause animations | Elahi Law | Essential | elahi-motion (localStorage on elahilaw.com). Set only when you switch Pause animations on | Keeps animations paused on every page. Never sent to us or anyone else | Until you clear browser storage. Switching Pause animations off removes it. Safari deletes it after 7 days of Safari use without a visit to our site | Switch Pause animations off under Display settings at the top of any page, or clear browser storage |
| Website hosting | Vercel Inc. | Essential | None set by us. If Vercel's security check runs during an attack, it stores a short security pass in your browser | Delivers the site and keeps it secure | The security pass lasts 1 hour | Not applicable. See "Server logs" below |
| Case review form and booking calendar | Pinn.Media, on HighLevel software (link.elahilaw.com) | Functional | None on elahilaw.com. Inside the frame, on link.elahilaw.com: the __cf_bm cookie (Cloudflare's bot check), ghl_analytics_user_id and v2_user_session_event_<account>_fingerprint in localStorage (a random visitor ID and a browser fingerprint HighLevel uses to tie a submission to earlier visits), and ghl_form_survey_event_v1 and ghl_geo_country_v1 in sessionStorage. Cloudflare Turnstile keeps cf.turnstile.u in its own frame on challenges.cloudflare.com. Observed 2026-11-01 before any submission | Shows and sends the form, shows open times and books your call, and blocks bots | __cf_bm 30 minutes. The localStorage items stay until you clear browser storage. The sessionStorage items end when you close the tab | Cookie settings, switch Functional off. Or call (972) 765-6715 |
| Chat | Pinn.Media, on HighLevel's LeadConnector chat (widgets.leadconnectorhq.com) | Functional | On elahilaw.com, in localStorage: v2_session_history_<account>, v2_history_<account>, v2_contact_session_<account>_session_id, and v3_first_session_event_<account> (the chat attribution record HighLevel describes: how you reached the site and the pages you viewed), <account>lead-connecter-text-widget-prompt-dismissed (hides the greeting after you close it), and, once you type, lead-connecter keys holding your unsent message and the details you enter. In sessionStorage: a request token and the chat's language strings. On leadconnectorhq.com: the __cf_bm cookie (Cloudflare's bot check) | Runs the chat, remembers your conversation on this device, and records how you reached us | __cf_bm 30 minutes. The greeting flag 1 day. The other localStorage items stay until you clear browser storage or switch Functional off, when we delete them | Cookie settings, switch Functional off. The page reloads, the chat is removed, and we delete its items on elahilaw.com. Or call (972) 765-6715 |
| Google Analytics 4 | Google LLC | Analytics | _ga and _ga_<property ID> on elahilaw.com | Tells one visitor from another without knowing who you are, and groups page views into visits | Up to 2 years. Your browser may delete them sooner: Chrome after 400 days, Safari after 7 days without a visit | Cookie settings, switch Analytics off. Google also offers a browser add-on at tools.google.com/dlpage/gaoptout |
| Microsoft Clarity, on our site | Microsoft Corporation | Analytics | _clck and _clsk on elahilaw.com | _clck keeps a random visitor ID. _clsk joins page views into one recording | _clck 1 year. _clsk 1 day | Cookie settings, switch Analytics off |
| Microsoft Clarity, Microsoft domains | Microsoft Corporation | Analytics | CLID, MUID, ANONCHK, SM, MR on clarity.ms and other Microsoft domains, after you allow analytics | CLID records when Clarity first saw this browser on any site that uses Clarity. MUID identifies your browser across Microsoft sites, and Microsoft uses it for advertising, site analytics, and operations. SM and MR keep MUID in step across Microsoft domains. ANONCHK is a flag Clarity always sets to 0 | MUID 1 year. CLID, ANONCHK, SM, and MR set by Microsoft | Cookie settings, switch Analytics off. Delete existing Microsoft cookies in your browser settings |
| Meta Pixel | Meta Platforms, Inc. | Marketing | _fbp on elahilaw.com. _fbc only if you arrive from a Meta ad link. fr on facebook.com, if you use Facebook or Instagram in the same browser | Measures whether our Facebook and Instagram ads lead to visits, and helps show our ads to people who have visited our site. Meta also uses the data under its own terms | _fbp 90 days. _fbc 90 days. fr set by Meta | Your Privacy Choices or Cookie settings, switch Marketing off. Global Privacy Control blocks it automatically |
Not in this list: Google Search Console
We use Google Search Console to see how our pages appear in Google Search. It adds no cookies or scripts to our site and collects nothing from your visit. We see only totals from Google’s own search data, such as how often a page appeared and was clicked. Google confirmed once that we own the site, in a way that loads nothing in your browser.
Things that are not cookies but you should know
- Server logs. Our host, Vercel, records your IP address, browser type, and the page requested, to deliver the site and keep it secure. This happens on every visit.
- Forms inside frames. Our form and calendar run inside frames from link.elahilaw.com. Google Analytics and Microsoft Clarity on our pages cannot see inside them. If a form does not load, call us.
- The chat runs on our page. It is not in a frame. We mark it so Microsoft Clarity masks it completely, and it loads only if you allow functional cookies.
- Fonts. Our fonts are stored on our own server. If you allow functional cookies, the chat loads its typeface from Bunny Fonts, and the form and calendar load theirs from Google Fonts inside their frames. Those services receive your IP address.
- Maps and social links. "Get directions" opens Google Maps in a new page. Social icons are plain links. Neither loads anything from those companies until you click.
How to change your choice
- Use "Cookie settings" at the bottom of any page, or the button on this page. Your new choice is saved straight away.
- When you switch a category off, its tools stop collecting and we delete their cookies on elahilaw.com. For analytics, that means the Google Analytics and Clarity cookies, and the page reloads. For functional, that means the chat's items in localStorage and sessionStorage, and the page reloads without the chat, form, or calendar. For marketing, that means the Meta Pixel cookies, and the page reloads. Cookies on the companies’ own domains stay until they expire or you delete them in your browser settings.
- You can also block or delete cookies in your browser settings. If you block essential storage, the site will ask for your choice on every visit.
Global Privacy Control
If your browser sends Global Privacy Control, we switch analytics and marketing off, and you cannot switch them back on while the signal is present. Google Analytics, Microsoft Clarity, and the Meta Pixel do not load. We treat the signal as a valid request to opt out of the sale and sharing of your information and of targeted advertising. See Your privacy choices for the other ways to opt out.
Changes and contact
When we add or remove a tool, we update this page and its date first. If the change needs your consent, we ask again.
Questions: shayan@elahilawfirm.com or (972) 765-6715.