Cookie & Tracking Technology Policy
Effective: April 13, 2026
1. Introduction
This Cookie & Tracking Technology Policy explains how Shankar & Associates PC ("we," "our," or "us") uses cookies and similar technologies on our website. This policy should be read alongside our Privacy Policy and Terms of Service.
2. Data Controller
The data controller responsible for your personal data is:
Shankar & Associates PC
Attn: Srinivas Jayashankar, Esq.
518 Plainview Road, Plainview, NY 11803
Email: info@shankarlaw.us
Phone: (516) 806-4700
3. What Are Cookies & Tracking Technologies
Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences and activity. "Tracking technologies" is a broader term that also includes localStorage, sessionStorage, pixels, and similar mechanisms used to store or access information on your device.
4. Legal Basis for Using Cookies
We use cookies under two legal bases:
- Strictly Necessary Cookies: Legitimate interest (GDPR Article 6(1)(f)). These are essential for the website to function and cannot be disabled.
- Analytics Cookies: Consent (GDPR Article 6(1)(a)). These are only activated after you provide explicit consent via our cookie banner.
5. Cookies We Use
| Cookie Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
| sb-*-auth-token | Supabase (1st party) | Authentication session | Persistent | Session / 1 year | Strictly Necessary |
| _ga, _ga_* | Google Analytics (3rd party) | Aggregate site usage analytics | Persistent | 2 years | Analytics (opt-in) |
| _clck, _clsk, CLID, ANONCHK, MR, MUID, SM | Microsoft Clarity (3rd party) | Anonymous session replay, heatmaps, click behavior | Persistent | Up to 1 year | Analytics (opt-in) |
Supabase Privacy Policy: https://supabase.com/privacy · Google Analytics Privacy Policy: https://policies.google.com/privacy · Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement
Google Analytics specifics: Loaded via gtag.js from googletagmanager.com. We use the GA4 property associated with measurement ID G-…; IP anonymization is enabled at the property level; no personally identifiable information (name, email, phone) is passed to Google. The script is only injected into the page after you grant analytics consent — if you decline, or your browser sends a Global Privacy Control (GPC) signal, the script is never loaded.
6. localStorage & Similar Technologies
We use browser localStorage to store your cookie consent preferences. This is stored under the key cookie_consent and contains your consent choices, a timestamp, and an expiry date. This data does not leave your browser and is not transmitted to our servers.
7. Cross-Border Data Transfers
Our authentication service (Supabase) processes data on infrastructure hosted in the United States (AWS). For visitors from the European Economic Area (EEA), this constitutes a transfer of personal data outside the EEA. These transfers are protected by Standard Contractual Clauses (SCCs) as part of our Data Processing Agreement with Supabase.
8. How We Obtain & Record Consent
When you first visit our website, a cookie consent banner is displayed at the bottom of the page. You may choose to Accept All, Reject All, or Manage Preferences to select individual cookie categories.
Cookie wall prohibition: Our website is fully functional without analytics cookies. We do not restrict access to content or features based on your cookie preferences.
Your consent choice is recorded in your browser's localStorage with a timestamp and the policy version number. If we update this policy (changing the version number) or your consent expires after 12 months, the banner will reappear to request fresh consent.
9. How to Withdraw Consent
You can withdraw or change your consent at any time by clicking the "Cookie Settings" link in our website footer. Withdrawing consent is as simple as giving it — the same cookie banner will appear, and you can update your preferences.
10. Managing Cookies via Your Browser
You can also control cookies through your browser settings:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Safari: Preferences > Privacy > Manage Website Data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
11. Impact of Disabling Cookies
If you disable strictly necessary cookies via your browser, authentication sessions will not persist and you will need to log in again on each visit. Disabling analytics cookies (or declining them via our banner) has no impact on website functionality.
12. Do Not Track & Global Privacy Control
Our website honors the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat this as an opt-out of analytics cookies and do not display the consent banner. We treat GPC as a valid opt-out request under the California Consumer Privacy Act (CCPA Section 1798.135).
13. Do Not Sell or Share My Personal Information
Shankar & Associates PC does not sell or share your personal information as defined under the California Consumer Privacy Act. You may exercise your right to opt out at any time by clicking "Do Not Sell or Share My Personal Information" in our website footer, which opens the cookie settings panel.
14. Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. You will receive the same quality of service and pricing regardless of your cookie preferences or privacy choices (CCPA Section 1798.125).
15. Sensitive Personal Information
We do not collect sensitive personal information through cookies or similar tracking technologies. The cookies used on this site are limited to authentication and consent management.
16. Attorney-Client Confidentiality & Cookies
As a law firm, we are mindful that visiting our website could be considered sensitive. We want you to know:
- Strictly necessary cookies do not track your browsing behavior across our site.
- Analytics cookies, when enabled, collect anonymized usage data that cannot identify individual visitors.
- No cookie data is shared with opposing parties, government agencies, or law enforcement without valid legal process.
Our obligations under New York Rules of Professional Conduct Rule 1.6 (Confidentiality of Information) extend to all technology we use.
17. Children's Privacy
This website is not directed at children under the age of 13. We do not knowingly collect personal information from children through cookies or any other means.
18. Changes & Consent Re-prompting
We may update this policy from time to time. When we make changes, we will update the effective date at the top of this page and increment the consent version number. This means the cookie consent banner will automatically reappear for all visitors so you can review and provide fresh consent under the updated policy. Additionally, consent expires after 12 months regardless of policy changes.
19. Contact & Supervisory Authority
Data Controller:
Shankar & Associates PC
Srinivas Jayashankar, Esq.
518 Plainview Road, Plainview, NY 11803
info@shankarlaw.us | (516) 806-4700
If you are located in the European Economic Area and believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. A directory of EU/EEA Data Protection Authorities is available at edpb.europa.eu.