This Cookie Notice explains how Sydecar (“we”, “us”, “our”) uses cookies and similar technologies on www.sydecar.io and related pages (the “Website”). It should be read alongside our Privacy Notice and Terms of Service.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They let a website remember your actions and preferences, recognise your browser on a return visit, and measure how the website is used.
We also use related technologies that work in a similar way and are covered by this notice:
Local storage and session storage — data stored in your browser rather than sent with every request.
Pixels, tracking scripts, and session-recording tools (Microsoft Clarity and PostHog) — small pieces of code or invisible images that record that a page was loaded or an action was taken, and can set cookies from a third party.
Server-side and first-party identifiers — values we generate and store to recognise a returning visitor or connect a form submission to the visit that produced it.
Where this notice says “cookies”, it means all of the above unless stated otherwise.
2. How we manage cookies
Cookies on the Website are deployed through Google Tag Manager, and are governed by a consent banner built on Google Consent Mode v2.
When you first arrive, non-essential cookies are set to a denied state by default. No advertising or analytics cookie is written until you make a choice. Your choice is recorded against four consent signals:
Signal | What it controls |
|---|---|
| Analytics and measurement cookies |
| Advertising cookies |
| Whether user data may be sent to advertising platforms |
| Whether your data may be used for personalised advertising |
Google Tag Manager and the Google tag may load before you make a choice so they can apply your consent settings and deliver strictly necessary functionality. While consent is denied, analytics and advertising storage remain disabled and non-essential cookies are not set. Google services may send limited, cookieless consent signals in consent-denied mode. Other analytics and advertising tools run only after you provide the relevant consent.
3. Categories of cookies we use
3.1 Strictly necessary
These are required for the Website to function and for you to use features you have asked for. They cannot be switched off through our banner, and under most privacy laws they do not require consent.
Purpose | Provider | Notes |
|---|---|---|
Website hosting, page delivery, and load balancing | Framer | Set by our hosting platform. |
Recording your cookie preferences | Framer / first-party | Stores your banner choice so we do not ask on every page. |
Interactive form and quiz delivery | Heyflow | Loads the interactive tools on our SPV benchmarking and readiness-quiz pages. Required for those forms to display and submit. |
Form event handling | First-party | Detects form submissions so the correct confirmation is shown. |
Note on Heyflow: the interactive tools on
/spv-fees-and-carry-benchmarking-tooland/spv-readiness-quizare treated as strictly necessary on those pages, because without them the page has no content to display. If you would rather not load them, do not visit those pages.
3.2 Analytics and performance
Set only if you consent to analytics. These help us understand which pages are read, how people move through the Website, and where things break.
Purpose | Provider | Typical cookies |
|---|---|---|
Website usage measurement, sessions, page and scroll-depth events | Google Analytics 4 |
|
Tag delivery and measurement configuration | Google Tag / Google Tag Manager | — |
Session recording, heatmaps, and interaction analytics | Microsoft Clarity | _clck, _clsk |
Product analytics and session recording | PostHog | ph_*_posthog (configuration dependent) |
3.3 Advertising and targeting
Set only if you consent to advertising. These let us measure the performance of our campaigns and show you relevant ads on other platforms. Most are set by third parties who may combine this data with information they already hold about you.
Purpose | Provider | Typical cookies |
|---|---|---|
Google Ads conversion measurement and remarketing |
| |
Cross-domain ad click attribution | Google (Conversion Linker) |
|
Meta ad measurement and audience building | Meta (Facebook) |
|
LinkedIn ad measurement and audience building |
| |
Reddit ad measurement and audience building |
| |
Connected-TV and display ad measurement | Vibe | — |
Ad measurement and audience building | OpenAI / ChatGPT advertising pixel | — |
3.4 Marketing, CRM, and attribution
Set only if you consent. These connect your activity on the Website to our customer-relationship records, so that if you contact us we can see which content and campaign brought you here.
Purpose | Provider | Typical cookies |
|---|---|---|
Visitor identification, form attribution, email and content tracking | HubSpot |
|
Campaign attribution — stores the UTM parameters or referring source from your first relevant visit, so a later enquiry can be credited to the right campaign | First-party ( | Retained for 30 days; overwritten on a later campaign visit |
Business-visitor identification | RB2B | See section 4 |
4. Visitor identification (RB2B)
We use a service called RB2B which attempts to identify individual professional visitors to the Website, and may tell us a name, professional email address, employer, and job title associated with your visit — not merely that an anonymous device visited.
This is a more intrusive form of processing than ordinary analytics, so we want to be explicit about it:
It runs only where you have consented to advertising cookies.
It is used for business-to-business sales and marketing, to understand which companies and roles are researching our product.
The matching is performed by RB2B against data it has collected from other sources; we do not provide it with your identity.
You can withdraw consent at any time (section 6), and you can ask us to delete anything we hold about you (section 7).
If you would prefer not to be identified in this way, decline advertising cookies before browsing, or contact us at privacy@sydecar.io.
5. Third parties and international transfers
The third parties named above are independent controllers of the data their cookies collect, and their own privacy notices govern what they do with it. We do not control those practices. Their privacy notices:
Several of these providers are based in the United States, so consenting to their cookies may involve transferring your data outside your home country. Where required, these transfers rely on the EU–US Data Privacy Framework, UK equivalents, or Standard Contractual Clauses.
6. Managing your choices
On this Website. Open the cookie preferences link in the Website footer at any time to change or withdraw your consent. Withdrawing stops the relevant tags from firing on your next page view — it does not retroactively delete cookies already set, so also clear your browser cookies if you want them removed now.
In your browser. You can block or delete cookies in your browser settings: Chrome · Safari · Firefox · Edge
Blocking strictly necessary cookies will break parts of the Website, including our interactive tools and forms.
Opting out of ad personalisation directly. Google Ads Settings · Your Online Choices (EU) · NAI opt-out (US) · Retention.com opt-out
Global Privacy Control. We honour the GPC signal where your browser sends it.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port the personal data we hold about you, to object to or restrict its processing, and to withdraw consent. If you are in the EU or UK you may also complain to your local data protection authority.
To exercise any of these rights, contact privacy@sydecar.io.
8. Changes to this notice
We will update this notice when the cookies we use change. Material changes will be signalled through the Website, and we will ask for your consent again where the law requires it. The date at the top shows when it was last revised.
