This Cookie Policy explains how Further Forward Innovation Ltd, trading as ClickGuardian ("we", "us", or "our"), uses cookies and similar technologies on our website at clickguardian.ai. It also covers how our tracking script works on our customers' websites for click fraud detection purposes.
Our website does not show a cookie banner at the moment, so the analytics and advertising tags described below load when you visit. You can block or clear them at any time in your browser settings, as described below.
What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners information about how their site is being used.
Cookies can be "first-party" (set by the website you are visiting) or "third-party" (set by a different domain). They can also be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device for a set period).
Cookies on Our Website (clickguardian.ai)
This is everything our website stores in your browser: cookies, and values kept in local storage (which stays until you clear it) or session storage (cleared when you close the tab). We checked it in a real browser in November 2026.
Set by our website
These remember your choices and where your visit started. They don't follow you to other websites.
| Name | Set by | Purpose | Stored as | How long |
|---|---|---|---|---|
cg-country | ClickGuardian | Remembers your country, worked out from your IP address by our hosting provider, so prices show in your currency | Cookie, first-party | 1 day |
cg-currency | ClickGuardian | Remembers the currency you picked on the pricing page | Local storage | Until you clear it |
cg-cycle | ClickGuardian | Remembers whether you chose monthly or yearly billing on the pricing page | Local storage | Until you clear it |
cg-attribution | ClickGuardian | Keeps the ad click ID and campaign tags from the first page of your visit, so they reach the signup page | Session storage | Until you close the tab |
cg-landing-path | ClickGuardian | Remembers the first page of your visit, which we send with a free audit request | Session storage | Until you close the tab |
cg-fbc | ClickGuardian | Only if you arrived from a Facebook or Instagram ad: keeps Meta's click ID and when you clicked, so that if you request a free audit we can tell Meta which of our ads led to it | Session storage | Until you close the tab |
Analytics and attribution
These tell us which ads and pages bring visitors who go on to sign up or get in touch, and let our own fraud detection check the clicks on our ads.
| Name | Set by | Purpose | Stored as | How long |
|---|---|---|---|---|
_cvl_vid | Convultra | Recognises a returning visitor, so a later signup or enquiry can be credited to the ad that brought them | Cookie, first-party | 365 days |
cvl_visitor_id, cvl_session, cvl_click_history, _gcl_ls | Convultra | Visitor and session IDs, and the ad clicks seen on this device, for conversion tracking | Local storage | Until you clear it |
cg_sid, cg_pv | ClickGuardian tag | A session ID and page-view count for our own click fraud detection, which runs on this site just as it does on our customers' sites | Session storage | Until you close the tab |
Advertising and referrals
These measure our advertising, let Google show our ads to people who have visited, and credit our affiliate partners.
| Name | Set by | Purpose | Stored as | How long |
|---|---|---|---|---|
_gcl_au, _gcl_aw | Google Ads | Link an ad click to a later conversion, such as a trial signup | Cookie, .clickguardian.ai | 90 days |
GCL_AW_P | Google Ads | Conversion measurement, set on Google's own domains | Cookie, Google domains | Set by Google |
| Remarketing cookies | Google Ads | Google sets its own cookies on its domains so it can show our ads to people who have visited this site | Cookies, Google domains | Set by Google |
tolt_referral, tolt_data | Tolt | Credit an affiliate partner when you arrive through their link. Only set when the link carries a valid ?ref= code | Cookies, first-party | 30 days |
ClickGuardian Tracking Script
If you are visiting a website that uses ClickGuardian to protect their ads from click fraud, you may encounter our tracking script. This section explains what the script does and what data it collects.
What Is the Tracking Script?
The ClickGuardian tracking script is a small piece of JavaScript that our customers install on their own websites. It monitors ad clicks to detect fraudulent activity such as bots, competitors, and click farms. The script keeps its session data in the browser on the customer's own domain, not on clickguardian.ai (on our own site, the session-storage values cg_sid and cg_pv), so the data it collects belongs to the website owner.
First-Party Data
Because the tracking script runs on the customer's domain, all data it collects is classified as first-party data. The website owner retains full ownership and control of this data. ClickGuardian processes the data on their behalf solely for the purpose of click fraud detection.
What the Script Collects
The tracking script collects the following data points for each visitor session to determine whether a click is legitimate or fraudulent:
- Click timestamp -- the exact date and time of the ad click
- Device type -- desktop, mobile, or tablet
- IP address -- used for geolocation and datacenter detection
- Browser fingerprint -- a hash of browser attributes (screen size, language, timezone, installed fonts, etc.) used to identify repeat visitors even if they change IP
- User agent string -- browser name, version, and operating system
- Referrer URL -- the page URL that referred the visitor
- Page interaction data -- mouse movements, scroll depth, and time on page (used to detect bot-like behaviour)
- Form field names and interaction metadata -- which fields were focused, time spent per field, and submission patterns (for fake lead detection)
- Typing rhythm on form fields -- the timing between key presses, how many there were and whether Backspace was used, never which keys were pressed (for fake lead detection)
- Form value checks -- a one-way hash of each field's value, a description of its shape (such as its length, the kinds of characters in it, and whether it looks like an email address, phone number or web address) and the domain of any email address, such as gmail.com, never the readable value (for fake lead detection)
- Ad click parameters -- GCLID, MSCLKID, UTM parameters
What the Script Does NOT Collect
We never collect any of the following:
- The text you type into form fields in readable form, including names, email addresses and phone numbers (only a one-way hash, a description of its shape and an email address's domain)
- Which keys you press or the characters you type (only the timing between key presses)
- Anything from forms with a password field: fake lead detection skips them
- Payment card details entered in a payment provider's secure fields, such as Stripe's, which the script can't see
- Browsing history or data from other websites
Why This Data Is Collected
All data collected by the tracking script is used solely for click fraud and fake lead detection and prevention. It enables us to identify bot traffic, competitor clicks, click farms, and other forms of invalid traffic that waste our customers' advertising budgets. The data is analysed in real time to make blocking decisions and is retained for reporting purposes.
Data Ownership
All data collected by the tracking script on a customer's website belongs to that customer. ClickGuardian acts as a data processor on behalf of the customer (the data controller). We do not sell, rent, share, or trade any data collected by the tracking script. Customers can request deletion of their data at any time through their account dashboard or by contacting us at privacy@clickguardian.ai.
How to Manage Cookie Preferences
You can manage, disable, or delete cookies at any time through your browser settings. Below are instructions for the most popular browsers:
Google Chrome
Settings → Privacy and Security → Cookies and other site data
Microsoft Edge
Settings → Cookies and site permissions → Manage and delete cookies
To turn off personalised Google ads, including our remarketing, use Google's My Ad Center.
Please note: Our website keeps working if you block cookies and site storage. Prices may show in US dollars, and your pricing-page choices won't be remembered.
Third-Party Cookies & Integrations
We use the following third-party services that may set their own cookies. Each service has its own privacy policy governing how they use data:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Ads | Advertising conversion tracking and remarketing | How Google uses cookies in advertising |
| Convultra | Conversion tracking, loaded from our own track.clickguardian.ai address | Covered by our Privacy Policy |
| Tolt | Affiliate referral tracking, only after a partner link | Tolt Privacy Policy |
| Stripe | Payment processing in the ClickGuardian app (not on this website) | Stripe Privacy Policy |
Cookie Consent & Compliance
Data protection law (the UK and EU GDPR, the UK's Privacy and Electronic Communications Regulations and the EU ePrivacy Directive) sets rules for cookies and similar technologies. Here is where we stand:
No cookie banner at the moment
Our website does not currently use a cookie consent banner. The tags listed on this page load when you visit. If we add a banner, we will update this page.
Your choices
You can block or delete cookies and site storage in your browser at any time, use a tracker-blocking extension, and turn off personalised Google ads in My Ad Center.
Data protection for tracking script users
Our customers who use the tracking script are responsible for ensuring their own websites comply with applicable cookie laws and include appropriate disclosures about the ClickGuardian script in their own privacy and cookie policies.
Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through a prominent notice on our website.
We encourage you to review this policy periodically to stay informed about how we use cookies.
Contact Us
If you have any questions about this Cookie Policy, our use of cookies, or the ClickGuardian tracking script, please contact us:
Frequently Asked Questions
What cookies does ClickGuardian use?
Our website sets a small number of cookies and browser-storage values. Our own remember your country, your currency and billing choice, and the ad click that brought you. Convultra and our own ClickGuardian tag handle analytics, conversion tracking and click fraud detection. Google Ads measures conversions and runs remarketing, and Tolt credits affiliate partners, but only when you arrive through an affiliate link. The tables on this page list each one and how long it lasts.
Is the ClickGuardian tracking script a cookie?
No. It is a script that website owners install. It keeps its session data in the browser on the website it runs on, not on clickguardian.ai (on our own site, the session-storage values cg_sid and cg_pv, which are cleared when you close the tab). It collects click-level data such as timestamps, device type, IP address and a browser fingerprint to detect fraudulent clicks on that website's ads. Because it runs on the owner's domain, the data it collects is first-party data that the website owner owns.
Can I delete or disable cookies?
Yes. You can block or delete cookies and site storage through your browser settings. All major browsers (Chrome, Firefox, Safari, Edge) allow this. Our website keeps working without them, although prices may show in US dollars and your pricing-page choices won't be remembered.
Does ClickGuardian sell cookie data?
No. ClickGuardian does not sell, rent, or trade any data collected through cookies or our tracking script. Data collected by the tracking script is owned by you, the website owner, and is used solely for click fraud detection and prevention.
What form data does the tracking script collect?
For fake lead detection, the ClickGuardian tracking script collects form field names and interaction metadata (such as which fields were focused and time spent on each), typing rhythm (the timing between key presses, never the keys themselves), and a one-way hash and description of each field's value, plus the domain of any email address. It does not send the readable text you type, and forms with a password field are skipped.