Cookie Policy
Effective Date: 2026-09-25
Table of Contents
- What Are Cookies
- How We Use Cookies
- Cookie Inventory
- Third-Party Cookies and Services
- Consent Mechanism
- Global Privacy Control (GPC)
- Do Not Track (DNT)
- Managing Cookies in Your Browser
- Opt-Out Links
- Impact of Disabling Cookies
- Changes to This Policy
- Contact
This Cookie Policy explains how RB ZILLA LLC ("we," "us," or "our") uses cookies and similar tracking technologies on https://www.rbzilla.com (the "Website"). It describes what these technologies are, why we use them, and your rights to control them. For our full data practices, including how we collect, use, and protect personal information, please refer to our Privacy Policy.
1. What Are Cookies
Cookies are small text files that a website places on your device (computer, tablet, or smartphone) when you visit. They allow the site to remember information about your visit — such as your preferences — so the site functions correctly and efficiently across page loads and sessions.
First-party cookies are set by the website you are visiting (in this case, rbzilla.com). Third-party cookies are set by a domain other than the one you are visiting and enable third-party features or functionality such as analytics.
Your cookie consent preferences are stored only in the first-party cookie cc_cookie, which keeps your choice for at least 12 months. We do not use browser local storage to persist consent preferences.
Apart from the Google Analytics measurement requests described in this policy, this Website does not use web beacons (tracking pixels), Flash cookies (Local Shared Objects), or any advertising-related tracking technologies.
2. How We Use Cookies
Consent Preferences
We use a strictly necessary cookie to store your cookie consent choices so that you are not re-prompted on every visit. This cookie is essential to the Website's operation and cannot be disabled through our consent interface.
Analytics
We use analytics cookies to understand how visitors interact with the Website — which pages are visited, how long users stay, where traffic originates, and interactions such as link clicks. This data is aggregated and used solely to improve the Website's content and performance. We do not use analytics data to build individual behavioral profiles or to target advertising. If you visit from the United States, analytics is on by default until you opt out. Everywhere else, analytics cookies are set only after you accept. When your browser sends a Global Privacy Control signal, analytics does not run at all (see Section 5 and Section 6).
What We Do Not Use
- No advertising or retargeting cookies. We do not use cookies for cross-site behavioral advertising, retargeting, or third-party ad network profiling.
- No marketing cookies. No cookies are set for the purpose of marketing or promotional targeting.
- No session or authentication cookies. The Website does not require login, and there are no session management or CSRF cookies.
3. Cookie Inventory
The following is a complete list of every cookie that may be set when you visit the Website.
3.1 Strictly Necessary Cookies
These cookies are required for the Website to function. They cannot be disabled through our consent interface. You may block them in your browser, but doing so may cause the consent banner to reappear on every visit.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
cc_cookie |
rbzilla.com (CookieConsent by Orestbida) | First-party cookie | Stores your cookie consent preferences (which categories you accepted or rejected) so you are not re-prompted on every visit. | 366 days (a choice stored on or before September 17, 2026 may instead expire after 182 days) |
3.2 Analytics Cookies
These cookies help us understand how visitors use the Website. All data collected is aggregated. If you visit from the United States, they are set by default, until you opt out (opt-out mode). Everywhere else they are set only after you accept (opt-in mode). They are never set while your browser sends a Global Privacy Control signal. When you opt out, reject, or withdraw consent, they are deleted from your browser straight away.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_ga |
Google Analytics | First-party cookie (set on www.rbzilla.com by the Google Analytics script) | Registers a unique ID used to generate statistical data on how you use the Website. Distinguishes between visitors. | 2 years, as set by Google (Chrome keeps it for 400 days). Safari, and other browsers on iPhone and iPad, may delete it after 7 days. |
_ga_<container-id> |
Google Analytics 4 | First-party cookie (set on www.rbzilla.com by the Google Analytics script) | Persists session state and distinguishes users for GA4 measurement. The <container-id> portion is specific to our GA4 property. |
2 years, as set by Google (Chrome keeps it for 400 days). Safari, and other browsers on iPhone and iPad, may delete it after 7 days. |
Auto-clear behavior: When you opt out, reject, or withdraw analytics consent (through the consent banner, the "Consent Preferences" link, or the "Do Not Sell or Share My Personal Information" link), the Website stops Google Analytics on the current page and deletes cookies whose names begin with _ga from your browser.
4. Third-Party Cookies and Services
The following third-party providers may set cookies or process data in connection with your visit to the Website.
| Provider | Role | Cookies Set | Privacy Policy |
|---|---|---|---|
| Google Analytics | Web analytics — measures Website traffic, visitor behavior, interactions such as link clicks, and content performance. Our consent banner loads the Google Analytics script directly from Google, only when analytics is allowed: by default for visits from the United States until you opt out, only after you accept everywhere else, and never while your browser sends a Global Privacy Control signal. | _ga, _ga_<container-id> |
Google Privacy & Terms |
| Cloudflare | CDN, hosting (Cloudflare Pages), and DDoS protection — delivers Website content and filters malicious traffic. | None (Cloudflare Pages static hosting does not set cookies by default) | Cloudflare Privacy Policy |
| Codex Titan (RB ZILLA LLC) | Consent audit logging — records consent actions (grant, deny, revoke) as proof of consent under the GDPR. Also handles Data Subject Access Requests. | None (no cookies; data sent via server-side API call) | Internal RB ZILLA LLC compliance platform |
Note on Google Analytics consent signals: Before Google Analytics loads, the Website sets Google's consent signals to "denied". When analytics is allowed, only analytics storage is granted. Advertising storage, ad user data, and ad personalization stay denied, and Google signals and ad personalization are turned off for our property.
Note on Codex Titan: Codex Titan is an internal RB ZILLA LLC compliance platform. It does not set any cookies. When you make a choice in the consent banner, use the "Do Not Sell or Share My Personal Information" link, or first visit with a Global Privacy Control signal (which we record as a refusal), a server-side API call logs your consent decision along with a pseudonymized visitor identifier (a keyed HMAC-SHA256 value scoped to this website — not your IP address, and not recomputable without a secret key we hold), the consent action you took, the categories you selected, your detected region and how it was determined, the applicable consent regime, whether Global Privacy Control was active (detected both in your browser and at our server), the version of the consent banner you responded to, and a timestamp. Your name and email address are not included in consent logs. See our Privacy Policy Section 3 for full details.
Note on Cloudflare: Cloudflare provides infrastructure-level hosting and security for the Website. Cloudflare Pages (static site hosting) does not set cookies by default. Cloudflare's Bot Management cookies (__cf_bm) and challenge cookies (cf_clearance) are only set on sites that have Bot Management or WAF challenge features enabled; they are not set on this Website.
5. Consent Mechanism
We use CookieConsent by Orestbida (vanilla-cookieconsent) as our consent management tool. The banner behavior is region-aware. We determine your region from the country that our hosting provider, Cloudflare, derives from your IP address. When a page loads, the banner asks our server for that country. The country itself is not stored; the resulting region (United States, EEA/UK, or other) is recorded in our consent log when you make a consent choice. This is an approximate signal: a VPN or proxy can make your connection appear to be in another country. "The United States" means the 50 US states and the District of Columbia; every other country, including US territories, uses opt-in mode. If Cloudflare cannot place your connection, or the check fails or does not answer in time, the banner also uses opt-in mode. Only if Cloudflare reports no location for your connection at all does the banner fall back to your browser's time zone, where the time zones of the 50 US states use opt-out mode:
Visitors in the United States (Opt-Out Mode)
Analytics is on by default, consistent with applicable US state privacy laws, and covers page views and interactions such as link clicks. The consent banner appears until you make a choice and provides a clear Opt Out button of equal visual prominence to the Accept button. You can opt out at any time without any loss of Website functionality: click Opt Out in the banner, turn analytics off under "Consent Preferences" in the Website footer, use the "Do Not Sell or Share My Personal Information" link in the footer, or enable Global Privacy Control in your browser. Opting out stops Google Analytics on the current page and deletes its cookies. Your choice is stored in cc_cookie, and choices you make are kept for at least 12 months, so analytics stays off on later visits for that long (see "Updating Your Preferences" below). A Global Privacy Control signal keeps it off for as long as your browser sends the signal.
All Other Visitors, Including the EEA, UK, and Switzerland (Opt-In Mode)
Non-essential cookies (analytics) are off by default. The consent banner will appear and you must affirmatively click Accept All before any analytics cookies are set. This reflects the opt-in standard required under the GDPR and UK GDPR (ePrivacy Directive). It also applies to any visit whose location we cannot determine, as described above.
Banner Controls
- Accept All — Enables all cookie categories.
- Reject All / Opt Out — Disables all non-essential cookies immediately. Existing analytics cookies are automatically cleared.
- Manage Preferences — Opens a granular preference panel where you can enable or disable individual cookie categories.
Updating Your Preferences
You can change your consent choices at any time by clicking the "Consent Preferences" link in the Website footer. Your preferences are stored in the cc_cookie cookie, and choices you make are kept for at least 12 months, after which you will be prompted again.
Withdrawing Consent
You may withdraw consent at any time by clicking Reject All or adjusting your preferences via the footer link. Withdrawing consent does not affect the lawfulness of any processing that occurred before you withdrew it. Upon withdrawal, analytics cookies are automatically cleared from your browser.
6. Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal as a valid opt-out of all non-essential tracking.
How Detection Works
- Client-side: We detect the
navigator.globalPrivacyControl === trueJavaScript property in your browser. - Server-side: Our consent logging API function reads the
Sec-GPCHTTP request header and includes it in the consent audit record. /.well-known/gpc.json: We publish a GPC support resource confirming that we honor the GPC signal.
When a GPC signal is detected, non-essential cookies are automatically denied and the consent banner is suppressed in all regions — including both opt-out mode (the United States) and opt-in mode (everywhere else). In opt-in mode, analytics cookies are already off by default, so GPC produces the same outcome as the default behavior. No action is required on your part. While your browser sends a GPC signal, Google Analytics does not load in any region, even if you turn analytics on in the consent preferences panel. On your first visit with GPC, we record the signal as a refusal in our consent log (see Section 4).
Mandated US States
GPC opt-out is legally required for residents of the following states: California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas. If you are a resident of one of these states, your GPC signal is processed as a formal opt-out under applicable state privacy law (including the California Consumer Privacy Act).
7. Do Not Track (DNT)
We do not respond to the Do Not Track (DNT) browser signal. DNT has no universally accepted technical standard, no consistent compliance definition across jurisdictions, and no established enforcement mechanism.
If you wish to opt out of non-essential tracking, we recommend using Global Privacy Control (GPC) (see Section 6), which is a standardized, legally recognized alternative supported by applicable US state privacy laws.
8. Managing Cookies in Your Browser
You can control or delete cookies directly through your browser settings. Note that blocking the cc_cookie will cause the consent banner to reappear on every visit.
Google Chrome
Go to Settings > Privacy and security > Cookies and other site data. You can block all cookies, block third-party cookies only, or clear existing cookies. Visit support.google.com/chrome/answer/95647 for step-by-step instructions.
Mozilla Firefox
Go to Settings > Privacy & Security > Cookies and Site Data. Firefox allows you to block all cookies, block cross-site tracking cookies, or manage exceptions per site. Visit support.mozilla.org/kb/cookies-information-websites-store-on-your-computer for details.
Apple Safari
Go to Preferences > Privacy > Manage Website Data. Safari blocks cross-site tracking by default and allows you to remove stored cookies per site or all at once. Visit support.apple.com/guide/safari/manage-cookies for details.
Microsoft Edge
Go to Settings > Cookies and site permissions > Cookies and data stored. Edge allows you to block third-party cookies, clear cookies on browser close, or manage per-site exceptions. Visit support.microsoft.com/microsoft-edge/delete-cookies for details.
9. Opt-Out Links
| Service | Opt-Out Method | Link |
|---|---|---|
| Google Analytics | Browser add-on that prevents Google Analytics JavaScript from sending data to Google. | tools.google.com/dlpage/gaoptout |
| Google Analytics | Adjust data sharing settings within your Google Account. | myaccount.google.com/data-and-privacy |
| All non-essential cookies | Use the "Consent Preferences" link in the Website footer to reject all non-essential cookies. | Available on every page of the Website. |
| All non-essential cookies | Enable Global Privacy Control (GPC) in your browser. | globalprivacycontrol.org |
10. Impact of Disabling Cookies
| Category | If Disabled |
|---|---|
Strictly Necessary (cc_cookie) |
The consent banner will reappear on every visit. No other Website functionality is affected. |
Analytics (_ga, _ga_*) |
No usage data is collected. There is no impact on your ability to use the Website or access any content. |
| Marketing / Advertising | Not applicable — we do not use marketing or advertising cookies. |
11. Changes to This Policy
The Effective Date at the top of this document identifies the current version. Prior versions are available on request by contacting us at legal@rbzilla.com.
Material changes — such as adding a new cookie category, introducing a new third-party provider, or changing the purpose of an existing cookie — will result in an incremented CookieConsent banner revision number (the consent-tool identifier stored with cc_cookie, not a document version number) and a re-prompt to all visitors, regardless of their previously stored preferences.
Non-material changes — such as correcting cookie durations, updating provider links, or clarifying existing descriptions — will be reflected in an updated Effective Date only. No re-prompt will be issued for non-material updates.
We encourage you to review this policy periodically to stay informed about how we use cookies.
12. Contact
If you have questions about this Cookie Policy or our use of tracking technologies, please contact us:
RB ZILLA LLC General Inquiries: hello@rbzilla.com Legal: legal@rbzilla.com Privacy Inquiries: privacy@rbzilla.com Website: https://www.rbzilla.com Mailing Address: 116 E Main St, Suite 201, Rock Hill, SC 29730, United States
For full details on how we handle personal data, please review our Privacy Policy.
This Cookie Policy was prepared for RB ZILLA LLC and is effective as of September 25, 2026. It covers only the Website at rbzilla.com. The effective date is the sole document identifier; consent-banner revision numbers identify the CookieConsent tool configuration, not this policy version. Prior versions are available upon request.