Cookie Policy
Last updated: October 2026 • Version 1.0
This Cookie Policy explains how An Noor Financial Advisors (“we”, “us”, or “our”) uses cookies, local storage, and similar technologies when you visit our website at annoorfinancial.com.
We maintain a conservative, privacy-first consent model. Non-essential technologies—including Google Analytics, Microsoft Clarity, and Apollo lead intelligence—are disabled by default and will only activate if you provide explicit consent.
1. What Are Cookies and Similar Technologies?
Cookies are small text files placed on your device by websites you visit. They are widely used to ensure websites function properly, provide secure navigation, remember preferences, and deliver analytical insight to website operators.
In addition to cookies, we may use browser Local Storage and Session Storage, which function similarly to cookies by storing small configuration values (such as your consent choices or color-theme preference) directly within your browser.
2. Technologies Used on Our Website
A. Strictly Necessary Technologies
Always ActiveThese technologies are essential to enable core site functionality, maintain security, verify legitimate human users against automated bot attacks, and record your consent choices. They do not require consent under EU ePrivacy or US state privacy regulations.
| Identifier | Provider | Type & Storage | Duration | Purpose |
|---|---|---|---|---|
| an_noor_cookie_consent_v1 | First Party | Local Storage | 12 months | Records your cookie consent selections and consent version. |
| __cf_bm | Cloudflare, Inc. | HTTP Cookie | ~30 minutes (continuous inactivity) | Cloudflare Bot Management cookie used to distinguish between humans and automated bots across session requests. |
| cf_clearance (Conditional) | Cloudflare, Inc. | HTTP Cookie | ~30 minutes (configurable in Cloudflare WAF) | Challenge-clearance cookie set when a visitor completes a Cloudflare security challenge or when Turnstile Pre-Clearance is enabled on the zone. Not set by standalone Turnstile widgets by default (Cloudflare Configuration Verification Required). |
| theme | First Party | Local Storage | Persistent | Stores your light or dark mode user interface appearance preference. |
| sb-*-auth-token | Supabase Pte. Ltd. / Supabase, Inc. (Processor) | Local Storage | Session | Authentication token created exclusively for authenticated administrative users accessing internal back-office portals. Never created for general website visitors. |
B. Analytics & Performance Technologies
Consent RequiredThese technologies help us understand how visitors discover and interact with our website, which pages are most useful, and how to improve site speed and technical reliability. Measurement data is aggregated and does not create individual advertising profiles.
| Identifier | Provider | Type & Storage | Duration | Purpose |
|---|---|---|---|---|
| _ga, _ga_* | Google Ireland Ltd. / Google LLC (Processor) | HTTP Cookie | 14 months to 2 years | Distinguishes unique users and measures engagement metrics across visits. |
| _clck, _clsk | Microsoft Ireland Operations Ltd. / Microsoft Corp (Independent Controller) | HTTP Cookie | 1 year / 24 hours | Records aggregated navigational heatmaps and session interaction metrics to detect layout friction. |
C. Marketing & Lead Intelligence Technologies
Consent RequiredThese technologies are used to identify corporate visiting domains for business-to-business (B2B) sales outreach and assess commercial interest in our advisory services. We do not use these technologies for consumer retargeting or cross-site behavioral advertising.
| Identifier | Provider | Type & Storage | Duration | Purpose |
|---|---|---|---|---|
| _apollo_*, apollo_tracker_id | ZenLeads Inc. d/b/a Apollo.io (Processor / Mixed) | Cookie / Local Storage | 12 months | Identifies visiting company domains for commercial B2B sales development and engagement tracking. |
3. Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) browser signal (navigator.globalPrivacyControl === true).
If your browser transmits a valid GPC signal, our consent engine automatically sets Marketing & Lead Intelligence to Denied and respects your right to opt out of any activities that could constitute sale, sharing, or targeted lead tracking under applicable privacy laws (including California CPRA and other US state frameworks).
4. How to Control and Withdraw Consent
You maintain full control over optional tracking technologies at all times:
- On-Site Preference Center: You can click the link located in our website footer at any time to review, modify, or completely withdraw your consent.
- Browser Settings: You can configure your browser to block cookies or notify you before a cookie is stored. Please note that blocking essential cookies may disrupt site functionality or form submission security.
- Immediate Withdrawal Effect: When you reject or withdraw consent, optional tracking scripts are disabled, Google Consent Mode is updated to Denied, Microsoft Clarity stops tracking, and client-accessible analytics cookies are cleared.
5. Questions and Contact Information
If you have any questions about our use of cookies or this policy, please reach out to us at:
Email: [email protected]