Cookie policy
Last updated: 22 October 2026
This Cookie Policy explains how AMV Consulting LLC (“MeshInspector“, “we“, “us“, “our“) uses cookies and similar technologies when you visit https://meshinspector.com and any related sub‑domains (collectively, the “Website“). It also describes your choices and rights regarding these technologies.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They perform many functions, such as enabling core site features, remembering preferences, measuring audience reach, and delivering personalised advertising. Cookies stored for the website you visit, here meshinspector.com, are called first‑party cookies, also when a provider’s script sets them; cookies stored for other domains are third‑party cookies.
We also use technologies that work in tandem with cookies, including:
- Web beacons / pixels – tiny graphics that detect page views, email opens or ad impressions.
- Local storage (HTML5, IndexedDB, sessionStorage) – browser‑based storage that can persist beyond a session.
The contact form on /contact-us/ is a HubSpot form. It loads from HubSpot when you open that page, also before you make a choice in the banner, and HubSpot’s servers set only the necessary __cf_bm cookie listed below. To protect the form against spam and abuse, it uses Google reCAPTCHA, which Google LLC provides in HubSpot’s frame under its own Privacy Policy and Terms of Service. reCAPTCHA starts as soon as the form appears and uses the _GRECAPTCHA cookie and the browser storage listed below with Google LLC as provider. They are strictly necessary for the security of the form, so they do not wait for your choice in the banner; our lawful basis is our legitimate interest in protecting the form against spam and abuse (Art. 6 (1)(f) GDPR). Our Privacy Policy describes the data they process.
The reseller application form on /find-or-become-a-meshinspector-reseller/ is a HubSpot form. It loads from HubSpot when you open that page, also before you make a choice in the banner, and sets only the necessary __cf_bm cookie listed below; our Privacy Policy describes the data it processes.
Videos on our pages are embedded from YouTube (Google). Nothing loads from YouTube until you press Play; then YouTube receives your IP address and may store information in your browser, such as player settings, under Google’s privacy policy.
2. Why do we use cookies?
We group cookies into the following categories. The table below gives the purpose and lawful basis of each category; the tables in section 2.1 list each cookie and similar technology with its provider, category, retention period and purpose.
| Category | Purpose | Lawful basis |
|---|---|---|
| Necessary (always active) | Remember your consent choices and keep the Website and its forms working and secure, including the protection of our contact form against spam and abuse by Google reCAPTCHA. These cannot be switched off in the banner. | Legitimate interest (Art. 6 (1)(f) GDPR) |
| Analytics | Help us understand how visitors use the Website, for example the number of visitors and traffic sources, so we can improve it. This includes session recordings and heatmaps by Microsoft Clarity (section 2.2); the HubSpot cookie also links a message you send through our contact form, or a reseller application, to your earlier visits. | Consent (Art. 6 (1)(a)) |
| Advertisement | Measure our advertising campaigns and make ads more relevant to you. | Consent |
2.1 Detailed cookie list
First‑party cookies and browser storage (on meshinspector.com)
| Name | Provider | Category | Retention | Purpose | SameSite / Secure |
| meshinspector_cookie_consent | meshinspector.com | Necessary | 1 year | Stores your choices and a random consent ID used only to prove your consent. | Lax; Secure |
| _ga | meshinspector.com | Analytics | 2 years | Google Analytics: distinguishes visitors. | Not set |
| _ga_SCHM0KJKPH | meshinspector.com | Analytics | 2 years | Google Analytics: keeps the session state. | Not set |
| _clck | meshinspector.com | Analytics | 1 year | Microsoft Clarity: keeps the Clarity user ID and preferences. | Not set |
| _clsk | meshinspector.com | Analytics | 1 day | Microsoft Clarity: connects several page views into one session. | Not set |
| _cltk (session storage) | meshinspector.com | Analytics | Session | Microsoft Clarity: identifies the browser tab. | — |
| __hstc | meshinspector.com | Analytics | 6 months | HubSpot: main analytics cookie with visitor and session data. | Lax |
| hubspotutk | meshinspector.com | Analytics | 6 months | HubSpot: visitor identity; links a contact-form message or a reseller application to your earlier visits. | Lax |
| __hssc | meshinspector.com | Analytics | 30 minutes | HubSpot: counts page views in the current session. | Lax |
| __hssrc | meshinspector.com | Analytics | Session | HubSpot: detects a new browser session. | Lax |
| _fbp | meshinspector.com | Advertisement | 90 days | Meta (Meta Platforms Ireland Ltd. for the EEA): stores a unique ID to deliver and measure Facebook/Instagram ads, for the Meta pixels 1466808574144374 and 1230677305725443 (the second one through HubSpot ads). | Lax |
| _fbc | meshinspector.com | Advertisement | 90 days | Meta: stores the ad click when you arrive from a Facebook or Instagram ad. | Lax |
| lastExternalReferrer, lastExternalReferrerTime, multiFbc (local storage) | meshinspector.com | Advertisement | Until cleared | Meta: the last other website that linked to ours and, after an ad click, its click IDs. | — |
| _gcl_au | meshinspector.com | Advertisement | 90 days | Google Ads: links ad clicks to visits (conversion linker). | Not set |
| _gcl_aw, _gcl_dc, _gcl_gb | meshinspector.com | Advertisement | 90 days | Google Ads conversion linker: stores the ad click (gclid, dclid, gbraid) when you arrive from a Google ad. | Not set |
| _gcl_ls (local storage) | meshinspector.com | Advertisement | 90 days | Google Ads: conversion linker data in local storage. | — |
| li_fat_id | meshinspector.com | Advertisement | 30 days | LinkedIn: stores the ad click when you arrive from a LinkedIn ad. | Not set |
Third‑party cookies and browser storage that are always active
| Name | Third‑party provider | Category | Retention | Purpose |
| __cf_bm | Cloudflare, Inc., for HubSpot and LinkedIn | Necessary | 30 minutes | Set by Cloudflare on HubSpot and LinkedIn domains to tell people from bots, for example when the HubSpot forms on our contact and reseller pages load. |
| _GRECAPTCHA | Google LLC | Necessary | Up to 6 months | Strictly necessary for the security of our contact form: Google reCAPTCHA sets it on google.com for its risk analysis, which protects the form against spam and abuse. |
| rc::a, rc::d-* (local storage) | Google LLC | Necessary | Until cleared | Strictly necessary for the security of our contact form: Google reCAPTCHA stores them on google.com, in its frame inside the form, to tell people from bots. |
| rc::c (session storage) | Google LLC | Necessary | Session | Strictly necessary for the security of our contact form: Google reCAPTCHA stores it on google.com for the current visit, to tell people from bots. |
Third‑party cookies (set only when you give consent)
| Name | Third‑party provider | Category | Retention | Purpose |
| bcookie | LinkedIn Corporation | Advertisement | 1 year | LinkedIn: identifies the browser for the LinkedIn Insight tag. |
| li_gc | LinkedIn Corporation | Advertisement | 6 months | LinkedIn: stores your consent to non-essential LinkedIn cookies. |
| lidc | LinkedIn Corporation | Advertisement | 1 day | LinkedIn: selects the data center. |
| UserMatchHistory, AnalyticsSyncHistory, li_sugr, bscookie | LinkedIn Corporation | Advertisement | 30 days to 1 year | LinkedIn: set on linkedin.com by the Insight Tag, for example when you are signed in to LinkedIn; ad ID syncing and browser identification. |
| MUID, MR, SM, ANONCHK, SRM_B | Microsoft Corporation | Advertisement | Session to 13 months | Microsoft: set on clarity.ms and bing.com when Microsoft Clarity loads with this consent; identify the browser across Microsoft sites. |
| IDE | Google LLC | Advertisement | 13 months in the EEA, Switzerland and the UK; 24 months elsewhere | Google: ad delivery and retargeting on doubleclick.net, when Google signals is active. |
Note: Actual cookie names may change when vendors update their libraries. The banner lists the same cookies under Customize.
2.2 Session recordings and heatmaps
With your consent to Analytics cookies, Microsoft Clarity, provided by Microsoft Corporation, records how you use our pages, such as clicks, mouse movements, scrolling and the content you see, so that we can replay visits and build heatmaps. Text you type into form fields is masked. Microsoft processes this data in the United States. It keeps recordings for 30 days; a random sample of recordings, and recordings we save as favourites, are kept for up to 9 months, and heatmaps are available for up to 9 months.
2.3 MeshInspector web app and account services
The MeshInspector web app and our sign-in and account services, not the pages of this Website, use the following strictly necessary cookies when you sign in. The banner does not control them.
| Name | Provider | Retention | Purpose | SameSite / Secure |
| XSRF-TOKEN | meshinspector.com | Session | CSRF protection during authenticated sessions. | Strict; Secure |
| spa-auth-edge-nonce | app.meshinspector.com | Session | OAuth PKCE flow nonce. | Lax; Secure |
| spa-auth-edge-nonce-hmac | app.meshinspector.com | Session | HMAC of OAuth nonce for tamper-detection. | Lax; Secure |
| spa-auth-edge-pkce | app.meshinspector.com | 10 minutes | Proof-Key for Code Exchange (PKCE) verifier. | Lax; Secure |
| csrf-state | auth.meshinspector.com | 4 minutes | Tracks OAuth state parameter. | Strict; Secure |
| csrf-state-legacy | auth.meshinspector.com | 4 minutes | Backward-compatibility for legacy clients. | Strict; Secure |
3. Your choices
3.1 Cookie‑consent banner
When you first visit the Website, a banner offers Accept All, Reject All and Customize. Rejecting is as easy as accepting. Under Customize you can switch the Analytics and Advertisement categories on or off one by one; Necessary cookies are always active. Until you choose, the Website loads no analytics or advertising technologies, with the one exception described below. Your choice is kept for one year in the meshinspector_cookie_consent cookie, together with a random consent identifier (see section 5). After that, or when we change what we ask your consent for, the banner asks you again.
Exception: the online tools. The Website itself does not use Mixpanel. Our online tools on /online-stl-repair/ and /online-gcode-viewer/, the STL editor on /feature/stl-editor/ and the STL repair on /feature/stl-file-repair/ embed the MeshInspector web app from embed.meshinspector.com. The app currently starts Mixpanel analytics (Mixpanel, Inc., United States) as soon as a tool opens, also before you make a choice in the banner and after you reject analytics cookies: it sets the cookie mp_51875322b58ddf1523d499cc7d1c80a2_mixpanel (an anonymous visitor ID and event properties, for meshinspector.com and its subdomains) and, if you are signed in to a MeshInspector account, records a page view together with the email address of your account. We plan to change the app so that it waits for your consent; the Website already tells the app your Analytics choice.
Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an objection to advertising: the Advertisement category stays off even when you click Accept All, and the banner tells you so. You can still switch Advertisement on yourself under Customize.
3.2 Withdraw or change consent
You can change your preferences at any time with the cookie settings button in the bottom-left corner of any page (at the end of the page on phones), which re‑opens your consent preferences. When you withdraw consent for a category, the Website removes the cookies and browser storage of that category that it can access and reloads the page, so the withdrawn technologies stop. Cookies that other companies set on their own domains (the third‑party cookies in section 2.1) can only be removed in your browser settings. The withdrawal is recorded in the consent log (section 5). Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
3.3 Browser controls
Most browsers allow you to delete or block cookies via settings. If you block essential cookies, parts of the Website may not work.
3.4 Ads personalisation opt‑outs
- Google Ads: https://adssettings.google.com
- Meta: https://www.facebook.com/adpreferences
- LinkedIn: https://www.linkedin.com/psettings/advertising
4. International data transfers
The providers below are located in the United States. When we last updated this policy, each of them was certified under the EU–US Data Privacy Framework (DPF), as listed on the official Data Privacy Framework List (dataprivacyframework.gov), and we rely on that adequacy decision. Where a provider is not certified, or a transfer is not covered by its certification, we use Standard Contractual Clauses (SCCs) approved by the European Commission. A copy of the relevant safeguards is available upon request.
| Provider | What it does for us | Safeguard |
|---|---|---|
| Google LLC | Google Analytics and Google advertising measurement, with your consent; YouTube, when you play a video; reCAPTCHA in the contact form | EU-U.S. Data Privacy Framework |
| Microsoft Corporation | Microsoft Clarity, with your consent | EU-U.S. Data Privacy Framework |
| Mixpanel, Inc. | Mixpanel analytics in the MeshInspector web app of the online tools (Cookie Policy, section 3.1) | EU-U.S. Data Privacy Framework |
| HubSpot, Inc. | Customer relationship management, the contact and reseller application forms and, with your consent, website analytics | EU-U.S. Data Privacy Framework |
| Meta Platforms, Inc. | Meta Pixel, with your consent | EU-U.S. Data Privacy Framework |
| LinkedIn Corporation | LinkedIn Insight Tag, with your consent | EU-U.S. Data Privacy Framework |
| Cloudflare, Inc. | Bot management on HubSpot and LinkedIn domains | EU-U.S. Data Privacy Framework |
| Amazon Web Services, Inc. | Website hosting and the consent log | EU-U.S. Data Privacy Framework (covered under the certification of Amazon.com, Inc.) |
5. How we keep track of your consent
When you click Accept All, Reject All or Save My Preferences in the banner, or withdraw consent, your browser sends one record of that decision to our consent log. We keep these records so that we can demonstrate that you gave or withdrew consent (Art. 7 (1) GDPR); our lawful basis is that legal obligation (Art. 6 (1)(c) GDPR). Each record contains:
- a random consent identifier, stored in the meshinspector_cookie_consent cookie on your device; it is not derived from you or your device and does not reveal who you are;
- the date and time of the decision, set by our server;
- the version of the banner and cookie list you saw;
- the categories you accepted and the categories you rejected;
- whether your browser sent a Global Privacy Control signal;
- the type of decision: accept all, reject all, save choices or withdraw;
- the website and page where you made the decision, without any query parameters.
The log does not contain your IP address, your browser’s user agent or your country, and it is not combined with analytics or advertising data. A withdrawal is recorded under the identifier it withdraws; your browser then gets a new identifier, so later records cannot be linked to earlier ones.
Records are kept for 5 years and then deleted automatically. The log is stored by Amazon Web Services, Inc. (AWS), our processor, in its US East (N. Virginia) region (us-east-1) in the United States. To ask about the records of your browser, send the identifier from the meshinspector_cookie_consent cookie to privacy@meshinspector.com.
6. Updates to this policy
We may update this Cookie Policy to reflect changes in cookies we use or legal requirements. The “Last updated” date indicates the latest revision. When a change affects what we ask your consent for, the banner asks you again.
7. Contact us
Questions? Contact our privacy team:
Email: privacy@meshinspector.com
Post: AMV Consulting LLC, 19125 North Creek Parkway Suite 120, Bothell, WA, 98011, USA
You also have the right to lodge a complaint with your local supervisory authority.