Cookies & Tracking
Last updated: September 23, 2026
This page describes every cookie and every piece of browser storage kovamedia.agency creates, who sets it, how long it lasts and how to stop it. It is deliberately specific. A cookie policy that lists categories a site does not use tells you nothing about the site you are actually on.
The short version
This site runs two advertising pixels, Meta’s and Whop’s, and only if you have not opted out. Each sets its own cookie so Kova can tell which ads bring people here: Meta’s is called _fbp and lasts 90 days, Whop’s is called _wuid and lasts two years. Turning measurement off takes one click, deletes those cookies immediately, and stops them being set again.
There is no Google Analytics on this site. No session recording, no heatmaps, no A/B testing tool, no chat widget, no advertising network other than Meta and Whop, and no fonts loaded from anyone else’s server.
Exactly what is stored
Cookies are only part of the picture: most of what a modern site keeps sits in local storage and session storage, which cookie policies routinely ignore. Everything is listed here.
Set by Kova
| Name | Kind | Lasts | What it is for |
|---|---|---|---|
agc_consent_v2 | Local storage | Until you clear it | Your own choice about measurement. This one is how Kova remembers not to track you, so it stays even if you opt out. |
agc_attr | Session storage | Until you close the tab | Which ad or link brought you here: campaign tags and the click ID in the address bar, plus the page you landed on. If you take the Revenue Health Diagnostic it also holds your score, your grade, and up to 600 characters of the notes you typed. It never leaves your browser unless you submit a form; if you do, all of it is sent with that form. |
agc_lead_queue | Local storage | Until delivered | Only created if you submit a form and it fails to reach Kova. It holds your inquiry so the next page load can retry instead of losing it. |
Set by Meta, when measurement is on
| Name | Kind | Lasts | What it is for |
|---|---|---|---|
_fbp | Cookie | 90 days | Meta’s identifier for this browser. It is what lets an ad Kova ran be connected to a visit here. |
_fbc | Cookie | 90 days | Only if you arrived from a Meta ad. Stores that specific ad click ID. |
lastExternalReferrerlastExternalReferrerTime | Local storage | Until you clear it | Meta records which site you came here from. |
multiFbc | Local storage | Until you clear it | Only if you arrived from a Meta ad. Meta keeps more than one recent click ID. |
Set by Whop, when measurement is on
| Name | Kind | Lasts | What it is for |
|---|---|---|---|
_wuid | Cookie, with a copy in local storage | 2 years | Whop’s identifier for this browser. It is what lets an ad Kova runs through Whop be connected to a visit, and to an inquiry, here. |
_wuid_link | Cookie | 2 years | The same identifier, written for kovamedia.agency as a whole so it survives a move between www. and the bare domain. |
_wuid_link_domain_wuid_link_seen | Local storage | Until you clear it | Which domain that cookie was written to (Whop finds out by setting, and at once deleting, a test cookie called _wpd), and whether two of its identifiers have already been joined up. |
_wsc_wsc_probed_at | Local storage | Until you clear it | A second identifier, read from or written into your browser’s graphics cache (see below), and when that was last done. Whop checks it at most once a day. |
_wsc_probed | Session storage | Until you close the tab | Stops that check running twice in one tab. |
Whop’s script also does two things no list of cookies can show. It fingerprints the browser and device, from details such as screen size, language, time zone and graphics hardware, so it can recognise this browser after its cookies are cleared. And it keeps an identifier in your browser’s graphics cache, the same value as _wsc: clearing cookies does not remove it, and no web page can delete it. Opting out stops the script loading, so nothing on this site takes the fingerprint or touches that identifier again.
That is the complete list, and it was produced by loading this site in a clean browser and reading what was actually there, not by filling in a template. It is why the Meta and Whop rows are here at all: they are theirs, not Kova’s, and most cookie policies never mention them.
What this site does not do
Stating absences is more useful than listing categories, so:
- No Google Analytics, Google Tag Manager, or Google advertising tag.
- No TikTok, LinkedIn, X, Snap, Reddit or Pinterest pixel.
- No session recording or heatmap tool: nothing replays your mouse, scrolling or typing.
- No A/B testing or personalization script.
- No live-chat widget.
- No fonts, scripts or stylesheets loaded from anyone else’s server, apart from the two pixels above. Everything else is served from this domain.
- No advertising cookie at all if you opt out, or if your browser sends Global Privacy Control.
You do not have to take any of that on trust. Open your browser’s developer tools, look at the network tab, and count the domains this page contacts.
How to turn it off
Three ways, any of which is enough on its own.
- The control at the top of this page. It takes effect immediately: the cookies are deleted while you watch, and nothing is set on later visits.
- Global Privacy Control. If your browser or an extension sends this signal, Kova honors it automatically. You never have to click anything, you are never asked to confirm, and no button on this page can override it.
- Your browser’s own settings. Blocking cookies for this site works too, though it will also clear the record of your opt-out, so the notice may appear again.
What opting out actually does, and what it cannot do
It stops the Meta and Whop scripts loading, deletes their cookies (_fbp, _fbc, _wuid, _wuid_link) and their storage entries from your browser, and prevents any of it being recreated on future visits. The one thing it cannot delete is the identifier Whop may already have left in your browser’s graphics cache; after you opt out, nothing on this site reads or writes it again.
It cannot reach information Meta or Whop already received before you opted out. No button on any website can. That data is held by them, not by Kova. To see or remove what they hold about you, use the privacy tools in your Meta account, or ask Whop under its own privacy policy. Saying that plainly is better than implying a delete request Kova is not in a position to make.
Is this “selling” or “sharing” my information?
Under California law those two words have specific meanings, and they are not the same thing. Selling means handing personal information to someone else for money or other valuable consideration. Sharing means disclosing it for cross-context behavioral advertising, so that a company can use what you did here to decide what to show you elsewhere.
So, precisely: Kova does not sell your personal information. And when measurement is on, the Meta and Whop pixels do share it, in that second sense. That is what an advertising pixel is for.
A blanket “never sells your data” line on a page that runs an advertising pixel is common, and it is the kind of half-true sentence this business exists to argue against. That line used to appear on the Kova privacy policy. It has been removed.
Opting out here is the opt-out. There is no separate form to fill in and no email to send.
Your choices, and where they come from
California’s privacy law applies to businesses above certain thresholds: broadly, more than $26.6 million in revenue, or handling the personal information of 100,000 Californians a year, or making most of their money from selling data. Kova Media is well below all three. Kova honors the law’s core rights anyway, and for everyone rather than only for Californians.
So, plainly:
- You can opt out of sharing for advertising at any time, using the control at the top of this page. It works in both directions and there is nothing to fill in.
- Kova processes opt-out preference signals frictionlessly. If your browser sends Global Privacy Control, neither pixel loads, no advertising cookie is set, you are not shown a banner, and you are not asked to confirm. Nothing about the site changes and nothing costs more.
- You can send that signal yourself. Some browsers have it built in and others need an extension, and globalprivacycontrol.org lists the current options.
- You can ask what Kova holds, and ask for it to be deleted. Email contact@kovamedia.agency and Kova will answer.
This page deliberately does not carry the section that lists a dozen states and implies each one has been assessed. That assessment has not been done. The rights above are offered to every visitor, wherever they are.
Who else receives anything
| Who | When | What they get |
|---|---|---|
| Meta | On every page, unless you have opted out | That this browser visited this page, plus the cookies above. |
| Whop | On every page, unless you have opted out | That this browser visited this page and where it came from, the identifiers above, Meta’s _fbp and _fbc if they are set, and a fingerprint of the browser and device. On a page with a form: the name, email address and phone number you type, as you move on from each field, and again with the inquiry when you send it. |
| Formspree | Only when you submit a form | What you typed into it, so it can be emailed to Kova. |
| Supabase | Only when you submit a form | The same inquiry, written into the Kova CRM. Supabase hosts that database; they are not a marketing company. |
| Vercel | On every request | Standard server logs: IP address, browser, page requested. This is how any website is hosted. |
Nobody else. Kova does not run an advertising network, does not sell lists, and does not pass inquiries to a third party.
One deliberate omission: the Kova booking page is hosted by Cal.com, and the “grab a time directly” link on the apply page sends you there. It is a plain link, not an embed: nothing from Cal.com runs on this site and it sets nothing in your browser here. Once you are on their page you are subject to their cookies and their policy, which is why it is named here rather than left out.
If you are in the EU or the UK
This site is aimed at businesses in the United States and is built to California’s opt-out standard, which is what applies to Kova. That standard is not the same as the opt-in consent the GDPR expects, and saying so plainly is better than claiming a compliance posture that has not been built.
If you are reading from the EU or the UK and would prefer no measurement at all, use the control at the top of this page before going further, or send Global Privacy Control. Either one turns it off completely and permanently.
Changes to this page
If the list above changes (a new tool, a new cookie) this page changes with it and the date at the top moves. The list is generated from what the site actually does, so a tool cannot quietly appear without appearing here.
Questions
Kova Media
Email: contact@kovamedia.agency
Phone: +1 (916) 823-6920
Sacramento, California
See also the Privacy Policy for how Kova handles information you give directly, and the Terms.