Graham Bay Area Equipment
(541) 329-4656North Bend, OR1625 Sherman Avenue
North Bend, OR 97459
Legal
Cookie Notice
Effective July 4, 2026
1. What cookies are
Cookies are small text files a website stores in your browser. They let the site remember things between page loads (like your consent choices) and let measurement tools count visits. “Similar technologies” includes pixels, web beacons, and local storage — they work the same way for privacy purposes.
2. Cookie categories
We group cookies into five categories. Only the first is always on. The other four are granted by default for Oregon visitors and denied until you choose for everyone else.
- Necessary, security, and functionality — core navigation, form protection, fraud prevention, and your saved consent choices. These cannot be disabled because the site needs them to operate.
- Analytics — Google Analytics (via Firebase) measures page views, equipment interactions, searches, and completed lead requests. Form values are never sent — analytics events exclude submitted names, emails, phone numbers, Social Security numbers, financing fields, and free-text form content. Denied categories still produce cookieless, anonymous pings for traffic modeling.
- Advertising measurement — Google Ads conversion tracking and limited conversion modeling. Disabled when you deny advertising consent or send a GPC signal.
- Advertising personalization — allows advertising platforms to personalize ads where permitted. Requires advertising measurement to be on.
- Social media — Meta Pixel measures PageView, ViewContent, Search, and Lead events. Form values are never sent — Meta events exclude submitted names, emails, phone numbers, and free-text form content. Disabled when you deny social consent or send a GPC signal.
4. Vendors and security technologies
- Google Analytics (via Firebase) — page-view and event measurement. See Google's cookie policy.
- Google Ads — conversion measurement and limited conversion modeling. Only loads when you grant advertising consent.
- Meta Pixel — social media measurement. Only loads when you grant both advertising and social consent and have not sent a GPC signal.
- Google reCAPTCHA / reCAPTCHA Enterprise — protects forms, authentication, and website security by helping distinguish legitimate users from bots, spam, and abuse. Treated as a necessary security technology and may operate even when analytics and advertising are rejected. See Google reCAPTCHA privacy.
- Firebase security technologies — Firebase App Check and related security tools protect backend resources from abuse. Treated as necessary security technology.
- ipwho.is / ipapi.co — keyless IP-to-region lookups, each with a 1.5-second timeout. Used once per visitor per 30 days to pick a consent regime. Your IP is sent to these providers only for the region lookup and is never stored in a cookie.
5. Google Consent Mode v2
We use Google Consent Mode v2 to gate every Google tag from a single queue. Before any tag loads, an inline script sets the default consent state: denied for everyone, then granted for Oregon visitors via a regional override. When you deny a category, Google fires cookieless, anonymous pings instead of dropping the event entirely — so denied visitors still contribute to modeled traffic without setting cookies. Denying consent is not a guarantee that no technical communication with Google occurs; it means the website will signal your choice and restrict covered storage and covered use according to the implemented consent settings.
6. Regional defaults and IP detection
On your first visit, an inline script in the page <head> reads the graham_region cookie. If it is missing, the script calls /api/geo once to derive your coarse region (state and country) from your IP address. The result is cached for 30 days so the lookup runs at most once per month per visitor. Your IP is never stored in the cookie and is never shared with any third party beyond the two lookup providers above.
- US-OR — opt-out. No banner. All non-essential cookies granted by default.
- US-CA and all other US states — opt-in. Banner shows. All non-essential cookies denied until you choose.
- EEA / UK / CH — opt-in (GDPR). Banner shows.
- Unknown / lookup failed — fail-strict opt-in. Banner shows.
Your saved choice is sticky: if you opt out in Oregon and then travel to California, your opt-out follows you until the consent cookie expires (180 days) or you change it.
7. Your privacy choices
You can change your choices at any time. Use the button below or the “Your Privacy Choices” link in the footer.
8. Global Privacy Control
If your browser sends a Global Privacy Control signal (a standardized opt-out preference), we treat it as a request to opt out of sale, share, and targeted advertising. Advertising, personalization, and social media toggles are locked off, and the relevant tracking cookies are expired. GPC does not affect necessary, functionality, or security cookies.
9. Browser controls
You can also control cookies directly in your browser. Most browsers let you block all cookies, accept only first-party cookies, or clear cookies on exit. Note that blocking all cookies will prevent you from saving consent choices on this site.
10. Updates
We will post updates to this Cookie Notice on this page with a revised “Last updated” date. If we add a new cookie category or vendor, we will bump the consent policy version so your saved choices are re-confirmed.
11. Where to learn more
Read our Privacy Policy or visit Your Privacy Choices to manage categories. Questions: email info@grahamequipment.com.