COOKIE POLICY
Last updated September 30, 2026
This Cookie Policy explains how Rideau Lakes LLC, doing business as Four-Leaf ("Company," "we," "us," and "our") uses cookies and similar technologies to recognize you when you visit our website at https://www.four-leaf.ai ("Website"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.
In some cases we may use cookies to collect personal information, or that becomes personal information if we combine it with other information.
What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.
Cookies set by the website owner (in this case, Four-Leaf ) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.
Why do we use cookies?
We use first-
How can I control cookies?
You have the right to decide whether to accept or reject cookies. You can exercise your cookie rights by setting your preferences in the Cookie Preference Center. The Cookie Preference Center allows you to select which categories of cookies you accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide you with services.
The Cookie Preference Center can be found in the notification banner and on our Website. If you choose to reject cookies, you may still use our Website though your access to some functionality and areas of our Website may be restricted. You may also set or amend your web browser controls to accept or refuse cookies.
The specific types of first- and third-party cookies served through our Website and the purposes they perform are described in the table below (please note that the specific cookies served may vary depending on the specific Online Properties you visit):
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| sb-*-auth-token | Supabase | Essential / First-party | Maintains user authentication session after email OTP login | Session / until logout |
| sb-*-auth-token-code-verifier | Supabase | Essential / First-party | PKCE code verifier for secure authentication flow | Session |
| fl_consent | Four-Leaf | Essential / First-party | Stores your cookie choices so we can honour them on every page | 1 year |
| fl_region | Four-Leaf | Essential / First-party | Records the country your request came from, so we show you the correct consent options | 1 year |
| fl_confirm_token | Four-Leaf | Essential / First-party | Holds the one-time token from a sign-in email until you press Continue, keeping it out of the page address | 1 hour |
| fl_post_login_next | Four-Leaf | Essential / First-party | Remembers the page to return you to after you sign in | 10 minutes |
| fl_jobs_save_intent | Four-Leaf | Essential / First-party | Remembers the job search you asked to save while you sign in, so only that search is saved | 30 minutes |
| mcp_consent_nonce | Four-Leaf | Essential / First-party | Protects the screen where you connect an AI assistant to your account from forged requests | 10 minutes |
| _ga, _ga_* | Google Analytics | Analytics / First-party | Distinguishes visitors and sessions for aggregate traffic measurement | 2 years |
| _gcl_au | Marketing / First-party | Set by the Google tag to measure which Google ads lead to a sign-up or purchase. Only placed when you allow both analytics and marketing attribution. Not used for remarketing | 90 days | |
| ph_* (browser storage) | PostHog | Analytics / First-party | Distinguishes visitors and records product usage. Session replay starts only after you click Accept, in every region; typed text is masked, and all text is masked inside the signed-in app. Served through our own domain at /_fl/relay | 1 year |
| fl_attr | Four-Leaf | Marketing / First-party | Records the referrer and landing page of your first visit, so we know which channels work | 30 days |
| fl_gclid | Four-Leaf | Marketing / First-party | Records the Google Ads click identifier when you arrive from one of our ads, so a later subscription can be attributed to that ad | 90 days |
| __vercel_live_token | Vercel | Functional / First-party | Enables Vercel deployment previews during development | Session |
| YouTube cookies (for example YSC, VISITOR_INFO1_LIVE) | Google (YouTube) | Functional / Third-party | Set by YouTube only if you press play on an embedded product video. The preview image is served from our own site, so nothing loads from YouTube before that | Set by YouTube |
Cookie Consent & GDPR Compliance
We are committed to transparency regarding our use of cookies and to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for visitors in the European Union and European Economic Area (EU/EEA) and the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) for visitors in the United Kingdom. Four-Leaf is not offered to people in the European Union or the European Economic Area, and new accounts, trials and purchases are refused there, but our public website stays readable, so the consent rules below still apply to visitors from those countries.
Essential cookies (such as authentication and cookie consent cookies listed above) are used under the legal basis of legitimate interest. These cookies are strictly necessary for the Website to function and for us to provide the services you have requested. They cannot be disabled without impairing core functionality.
In the EU/EEA, the UK and Switzerland: only strictly necessary cookies are set until you choose. Analytics and marketing cookies are placed only after you accept them in our cookie banner or preference center. Everywhere else: analytics cookies and the marketing cookies (fl_gclid, fl_attr and _gcl_au) are on by default, and you can switch them off at any time in the Cookie Preference Center. Everywhere: session recordings start only after you click Accept in the cookie banner or save preferences with analytics on.
Withdrawing consent: You have the right to withdraw your cookie consent at any time. You may do so by adjusting your browser settings to delete or block cookies, or by updating your preferences in our Cookie Preference Center. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.
How can I control cookies on my browser?
As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information. The following is information about how to manage cookies on the most popular browsers:
You can learn more about managing online advertising preferences through these organizations:
- Digital Advertising Alliance
- Digital Advertising Alliance of Canada
- European Interactive Digital Advertising Alliance
What about other tracking technologies, like web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our Website
Do you use cookies for advertising or marketing?
We do not serve targeted display advertising. Four-Leaf does not use display advertising cookies or retargeting pixels, we do not allow third parties to serve advertising cookies through our Website, and we do not track your browsing activity across other websites. We do run search advertising, and for that we set one first-party marketing cookie (fl_gclid) recording the click identifier Google attaches to our own ad links, plus a first-party cookie recording which page you arrived on (fl_attr). Both are listed in the table above. In the EU/EEA, the UK and Switzerland they wait for your consent, everywhere else they are on by default, and you can switch them off at any time in the Cookie Preference Center.
We may use email marketing and re-engagement campaigns to communicate with registered users about our services, product updates, and relevant content. These email communications are based solely on the information you have provided to us directly (such as your email address during account registration) and your interaction with our platform. You can opt out of marketing emails at any time by using the unsubscribe link included in each email or by contacting us at team@four-leaf.ai.
How often will you update this Cookie Policy?
We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.
The date at the top of this Cookie Policy indicates when it was last updated.
Where can I get further information?
If you have any questions about our use of cookies or other technologies, please email us at team@four-leaf.ai .