Cookies policy

Cassia Research Inc. dba Yoke

Last updated: 1 October 2026

The short version

We use cookies and similar technologies to run our website, to understand how people use it, and to measure our advertising. Section 5 lists them by provider, what they do, and how long they last.

How we ask depends on where you are. In the European Union and the United Kingdom, a banner asks you first, and we set only strictly necessary cookies until you click “Accept”. Everywhere else, including the United States and Canada, a notice tells you we use cookies, and you can opt out at any time. Section 7 explains your choices.

We do not sell personal information for money. Some of our advertising tools send information about your visit to advertising companies, so they can measure our ads and show them to you on other sites. Under some US state laws, that may count as “selling” or “sharing” personal information. You can opt out with the “Your Privacy Choices” link in our footer or a Global Privacy Control signal, as section 7 explains.

1. What this policy covers

This policy explains how Cassia Research Inc. dba Yoke (“Yoke”, “we”, “us”) uses cookies and similar technologies on our website at yokegtm.com, including all of its subpages, and in our application at app.yokegtm.com.

Yoke was previously known as CoPilot AI. The company has not changed.

Read this policy together with our Privacy Policy, which explains what we do with personal information more broadly.

2. What cookies and similar technologies are

A cookie is a small text file that a website stores on your device. It usually holds a random identifier, so the site can recognise your browser on a later visit.

We also use technologies that work like cookies but store data differently. This policy covers all of them.

  • Local storage and session storage. Data your browser keeps for a site. It works like a cookie, but it holds more and it is not sent with every request.
  • Pixels and tags. Tiny images or snippets of code that tell another company you loaded a page.
  • Server-side connections. Our servers send some of the same information directly to an advertising company, instead of your browser sending it. Section 5.4 explains where we do this.
  • Software development kits. Code from another company that runs inside our software.

Cookies last for different lengths of time. A session cookie is deleted when you close your browser. A persistent cookie stays until it expires or until you delete it. The tables in section 5 give the lifetime of each one.

A first party cookie is set by us. A third party cookie is set by another company whose code runs on our site. We do not control third party cookies. We do choose which companies we allow, and we list every one of them below.

Some cookie names below end in an asterisk. That marks a name that ends with an identifier unique to our account, such as _ga_*. The asterisk stands for that identifier.

3. What we use them for

Every cookie in section 5 does one of these four jobs.

PurposeWhat it does
Strictly necessaryKeeps the site secure and working, and remembers your cookie choices. The site will not work properly without these.
FunctionalRemembers preferences such as your region, and powers our live chat and meeting booking.
Analytics and performanceCounts visits, shows us which pages and features people use, tells us when something is slow or broken, and records how people move through pages.
AdvertisingMeasures whether our ads work, and shows you our ads on other sites.

4. Session recording: what we record and what we do not

One of our analytics tools, Hotjar, records how people interact with our pages. It captures mouse movement, clicks, scrolling, and which pages you visit in what order. This helps us find parts of the site that confuse people.

We configure it to hide what you type. The contents of form fields, including passwords and payment details, are not captured in the recording. We do not record anything outside our website.

Hotjar offers a direct opt out. Section 7.4 has the details.

5. The cookies we use

5.1 Strictly necessary

NameProviderPurposeLifetime
__hs_cookie_cat_prefHubSpot (first party)Remembers the cookie choices you made.13 months

5.2 Functional

NameProviderPurposeLifetime
geoCountryYoke (first party)Remembers your country, so we can show you the version of a page meant for where you are. We look up your country from your IP address through a geolocation service, ipwhois.pro.7 days
messagesUtkHubSpotIdentifies you across live chat conversations, so a chat can continue.6 months
Calendly cookiesCalendlyRun the meeting booking form on our site.Set by Calendly

5.3 Analytics and performance

NameProviderPurposeLifetime
_gaGoogle AnalyticsTells one visitor apart from another.2 years
_ga_*Google AnalyticsHolds session state. We run two, one for the website and one for the application, so a visit to the site and a session in the app read as one journey.2 years
hubspotutkHubSpotIdentifies you across visits, and links form submissions to your history.6 months
__hstcHubSpotRecords your first visit, your last visit and your visit count.6 months
__hsscHubSpotTracks the current visit for session counting.30 minutes
__hssrcHubSpotDetects whether you restarted your browser, so one visit is counted once.Session
_hjSessionUser_*HotjarIdentifies a returning visitor for heatmaps and recordings.12 months
_hjSession_*HotjarHolds the current recording session.30 minutes
ph_phc_*PostHog (in our app)Product analytics. Shows us which features people use.1 year

5.4 Advertising

NameProviderPurposeLifetime
_gcl_auGoogle AdsMeasures which ad brought you to us.90 days
FPAUGoogle Ads (first party)Same as above. Set by our own server side tagging.90 days
FPLCGoogle Ads (first party)Links a visit across our domains for conversion measurement.20 hours
_fbpMetaMeasures our Facebook and Instagram ads, and builds audiences.3 months
LinkedIn Insight TagLinkedInMeasures our LinkedIn ads, and builds audiences. Sets cookies on the linkedin.com domain, including bcookie, lidc, li_gc and UserMatchHistory.Up to 1 year, set by LinkedIn

Meta pixel and server connection. The Meta pixel sends Meta the page you are on, the page that referred you, your IP address and browser type, and Meta’s own cookie and ad-click identifiers. If your name, email address, phone number or location appears on the page, for example after you book a meeting, the pixel also sends it in scrambled (hashed) form. We also send a copy of the same information to Meta from our servers, through Meta’s Conversions API and through our server-side tagging provider, Stape. The choices in section 7 apply to both.

On lifetimes. Durations shown here are the provider’s documented defaults unless we note otherwise.

5.5 Local storage

Our site also stores data in your browser’s local storage. We use it mainly for our chat widget, our analytics and our campaign attribution. This data stays until you clear your browser data.

6. Who the third parties are

Each of these companies controls the data its own technology collects. Their privacy policies govern that data.

This table is also our list of the third parties to which personal information may be sold or shared, as some US state laws define those terms. The advertising companies are Google, Meta Platforms and LinkedIn.

CompanyWhat it does for usTheir privacy policy
Google (Analytics, Ads, Tag Manager)Analytics and advertising measurementpolicies.google.com/privacy
HubSpotForms, live chat, cookie choices, marketing analyticslegal.hubspot.com/privacy-policy
Meta PlatformsAdvertisingfacebook.com/privacy/policy
LinkedInAdvertisinglinkedin.com/legal/privacy-policy
HotjarSession recording and heatmapshotjar.com/legal/policies/privacy
PostHogProduct analytics in our appposthog.com/privacy
CalendlyMeeting bookingcalendly.com/legal/privacy-notice
StapeServer-side tagging for our advertising measurementstape.io

7. Your choices

7.1 If you are in the European Union or the United Kingdom

When you first visit our website, a banner asks whether you accept cookies. Until you click “Accept”, we set only strictly necessary cookies, and our analytics and advertising tools do not run. “Accept” and “Decline” each take one click, so both choices are equally easy. You can change your choice at any time with the “Your Privacy Choices” link in the footer of every page.

7.2 Everywhere else, including the United States and Canada

A notice tells you that we use cookies. Our analytics and advertising tools run by default. You can opt out at any time with the “Cookies settings” button on the notice or the “Your Privacy Choices” link in the footer of every page. Both open a panel with separate switches for analytics and advertising. You can also opt out by sending a Global Privacy Control signal (section 7.3).

When you opt out:

  • Of advertising, our advertising tools stop running in your browser: the Meta pixel, the LinkedIn Insight Tag and Google Ads. Our servers also stop sending information about your visits to Meta and Google Ads.
  • Of analytics, Google Analytics and Hotjar stop running.

Opting out of advertising also opts you out of any “selling” or “sharing” of your personal information, and of targeted advertising, under US state privacy laws. Your choice applies to the browser you made it in. Our Privacy Policy explains your other privacy rights.

7.3 Global Privacy Control

Some browsers and extensions send a Global Privacy Control (GPC) signal. We treat it as a request to opt out of both analytics and advertising for that browser, with the effect described in section 7.2.

7.4 Your browser and providers’ own opt outs

You can block or delete cookies in your browser settings, and you can set your browser to reject third party cookies while keeping ours. If you block strictly necessary cookies, parts of the site will stop working. Chrome, Safari, Firefox and Microsoft Edge each publish a help page for cookie settings.

  • Google Analytics. Install the Google Analytics Opt-out Browser Add-on.
  • Hotjar. Use the Do Not Track opt-out on Hotjar’s website.
  • Advertising in general. The Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), and the Digital Advertising Alliance of Canada (youradchoices.ca) each offer an industry opt-out tool that covers most of the advertising providers in section 5.4.

8. If you are in Canada or Australia

We are a Canadian company and we handle personal information collected through cookies in line with Canadian privacy law. In Canada, we tell you about our cookies with a notice, and you can opt out at any time, as section 7.2 explains. In Australia, we handle this information in line with the Australian Privacy Principles. Our Australian Privacy Policy has more detail.

9. Changes and contact

We update this policy when the technology on our site changes. The “Last updated” date at the top tells you when. Material changes take effect when we post them, and we will highlight them on the site.

Questions about this policy:

Attention: Privacy Officer

Cassia Research Inc. dba Yoke

Suite 700, 1455 West Georgia Street, Vancouver, BC V6G 2T3

Email: privacy@yokegtm.com