(function() { /* rc-ec-preseed-20260823: THE Google Tag (AW-18297748462) fires on Initialization/All Pages — dataLayer index 2, before limoflow.ts pushes user_data at index 3. It therefore read an EMPTY user-provided-data variable and every downstream conversion inherited that, shipping em=tv.1 with no hash (Google: "user-provided data isn't available at the time of conversion"). Measured: 21 of 22 EC not processed, 5% coverage. This file renders BEFORE GTMScript and is beforeInteractive, so seeding the dataLayer here puts EC data in place before the Google Tag reads it. Source is the same localStorage mirror limoflow.ts writes (rc_ec_ud, 2h TTL) plus the sessionStorage stash, so no new data collection. Guarded: no-op when nothing is stored. */ try { var _ecE = '', _ecP = ''; try { _ecE = sessionStorage.getItem('rc_ec_email') || ''; } catch (e0) {} try { _ecP = sessionStorage.getItem('rc_ec_phone') || ''; } catch (e1) {} if (!_ecE && !_ecP) { try { var _raw = localStorage.getItem('rc_ec_ud'); if (_raw) { var _m = JSON.parse(_raw); if (_m && Date.now() - _m.t <= 2 * 3600 * 1000) { _ecE = _m.e || ''; _ecP = _m.p || ''; } } } catch (e2) {} } if (_ecE || _ecP) { var _ud = {}; if (_ecE) { _ud.email = _ecE; _ud.email_address = _ecE; } if (_ecP) _ud.phone_number = _ecP; window.dataLayer = window.dataLayer || []; window.dataLayer.push({ email_address: _ecE || undefined, phone_number: _ecP || undefined, user_data: _ud }); window.__rcCapturedUserData = _ud; } } catch (ecErr) {} var queryString = window.location.search; var urlParams = new URLSearchParams(queryString || ''); /* Google reads gclid / gbraid / wbraid / gad_source / gad_campaignid from the document URL. If any utm_* is also on that URL and the click id cannot be used, Analytics builds the whole channel from the UTMs and the Ads campaign stays empty. Drop only the utm keys, before GTM loads. The original query is already in urlParams, so storage still keeps them for our own reports. */ try { var _clickOnUrl = urlParams.get('gclid') || urlParams.get('gbraid') || urlParams.get('wbraid') || urlParams.get('gad_source') || urlParams.get('gad_campaignid'); var _utmOnUrl = urlParams.get('utm_source') || urlParams.get('utm_medium') || urlParams.get('utm_campaign') || urlParams.get('utm_term') || urlParams.get('utm_content'); if (_clickOnUrl && _utmOnUrl && window.history && window.history.replaceState) { var _clean = new URL(window.location.href); ['utm_source','utm_medium','utm_campaign','utm_term','utm_content'].forEach(function(k){ _clean.searchParams.delete(k); }); window.history.replaceState(window.history.state, '', _clean.toString()); } } catch (eUtm) {} /* rc-ss-guard-20260823: unguarded sessionStorage read. Safari Private Browsing and some embedded webviews THROW on sessionStorage access rather than returning null — that exception escapes the IIFE and kills this whole script, taking gclid capture, link decoration, the EC pre-seed and the /thank-you attribution restore with it. Found by a 1070-case storage-denied sweep. Guarded read, same semantics when storage works. */ var storedParams = null; try { storedParams = sessionStorage.getItem('tracking_params'); } catch (ssErr) { storedParams = null; } var ATTRIBUTION_KEYS = [ 'gclid', 'gbraid', 'wbraid', 'fbclid', 'msclkid', 'gad_source', 'gad_campaignid', 'pmax_campaignid', 'campaign_id', 'utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'gclsrc' ]; function isClickId(v) { if (!v || v.length < 1 || v.length > 250) return false; for (var i = 0; i < v.length; i++) { var c = v.charAt(i); var ok = (c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z') || (c >= '0' && c <= '9') || c === '_' || c === '-'; if (!ok) return false; } return true; } /* Exact GCL payload. indexOf matched a new id inside an older click or the unix timestamp and then left Tag 374 on the previous click. No backslash here: this body is a template literal. */ function gclHolds(raw, id) { var bits = String(raw || '').split('.'); if (!(bits.length >= 3 && bits[0] === 'GCL' && /^[0-9]+$/.test(bits[1]))) return false; return bits.slice(2).join('.') === id; } function stampAwCookie(gclid) { try { if (!isClickId(gclid)) return; try { if (localStorage.getItem('rc-cookie-consent') === 'declined') return; } catch (eC) {} var already = ''; try { var parts = String(document.cookie || '').split(';'); for (var i = 0; i < parts.length; i++) { var p = parts[i]; while (p.charAt(0) === ' ') p = p.substring(1); if (p.indexOf('_gcl_aw=') === 0) { already = p.slice(8); break; } } } catch (e0) {} var sec = Math.floor(Date.now() / 1000); var val = 'GCL.' + sec + '.' + gclid; var secure = (location.protocol === 'https:') ? ';Secure' : ''; var base = '_gcl_aw=' + val + ';path=/;max-age=7776000;SameSite=Lax' + secure; if (!gclHolds(already, gclid)) { document.cookie = base; var host = (location && location.hostname) || ''; var bits = host.split('.'); if (bits.length >= 2) { document.cookie = base + ';domain=.' + bits.slice(-2).join('.'); } } /* Always write our own cookie. An existing _gcl_aw used to return early and leave _rc_gclid unset, so a later booking on a phone had no click id to send. */ document.cookie = '_rc_gclid=' + encodeURIComponent(gclid) + ';path=/;max-age=7776000;SameSite=Lax' + secure; } catch (e) {} } function stampAgCookie(gbraid) { try { if (!isClickId(gbraid)) return; try { if (localStorage.getItem('rc-cookie-consent') === 'declined') return; } catch (eC) {} var already = ''; try { var parts = String(document.cookie || '').split(';'); for (var i = 0; i < parts.length; i++) { var p = parts[i]; while (p.charAt(0) === ' ') p = p.substring(1); if (p.indexOf('_gcl_ag=') === 0) { already = p.slice(8); break; } } } catch (e0) {} var host = (location && location.hostname) || ''; var bits = host.split('.'); if (!gclHolds(already, gbraid)) { var sec = Math.floor(Date.now() / 1000); var val = 'GCL.' + sec + '.' + gbraid; var secure = (location.protocol === 'https:') ? ';Secure' : ''; var base = '_gcl_ag=' + val + ';path=/;max-age=7776000;SameSite=Lax' + secure; document.cookie = base; if (bits.length >= 2) { document.cookie = base + ';domain=.' + bits.slice(-2).join('.'); } } /* Old builds put this gbraid in _gcl_gb. Drop that copy so Tag 374 does not send one id as both gbraid and wbraid. A real wbraid is a different id and is stamped after this returns. */ dropGbIfHolds(gbraid, bits); } catch (e) {} } function dropGbIfHolds(id, bits) { try { if (!isClickId(id)) return; var gbVal = ''; var gbParts = String(document.cookie || '').split(';'); for (var gi = 0; gi < gbParts.length; gi++) { var gp = gbParts[gi]; while (gp.charAt(0) === ' ') gp = gp.substring(1); if (gp.indexOf('_gcl_gb=') === 0) { gbVal = gp.slice(8); break; } } if (!gclHolds(gbVal, id)) return; var gone = '_gcl_gb=;path=/;max-age=0;SameSite=Lax'; document.cookie = gone; if (bits && bits.length >= 2) document.cookie = gone + ';domain=.' + bits.slice(-2).join('.'); } catch (eDrop) {} } function stampGbCookie(wbraid) { try { if (!isClickId(wbraid)) return; try { if (localStorage.getItem('rc-cookie-consent') === 'declined') return; } catch (eC) {} var already = ''; try { var parts = String(document.cookie || '').split(';'); for (var i = 0; i < parts.length; i++) { var p = parts[i]; while (p.charAt(0) === ' ') p = p.substring(1); if (p.indexOf('_gcl_gb=') === 0) { already = p.slice(8); break; } } } catch (e0) {} if (gclHolds(already, wbraid)) return; var sec = Math.floor(Date.now() / 1000); var val = 'GCL.' + sec + '.' + wbraid; var secure = (location.protocol === 'https:') ? ';Secure' : ''; var base = '_gcl_gb=' + val + ';path=/;max-age=7776000;SameSite=Lax' + secure; document.cookie = base; var host = (location && location.hostname) || ''; var bits = host.split('.'); if (bits.length >= 2) { document.cookie = base + ';domain=.' + bits.slice(-2).join('.'); } } catch (e) {} } function sanitizeTrackingParams(params) { var sanitized = new URLSearchParams(); ATTRIBUTION_KEYS.forEach(function(key) { var value = params.get(key); if (value) sanitized.set(key, value); }); return sanitized.toString(); } /* rc-attrib-durable-20260823: tracking_params lived ONLY in sessionStorage, which starts empty in a NEW page context. LimoFlow's postSubmissionRedirect paidUrl is a BARE url (https://royalcarriagelimo.com/thank-you, no params), so GA4 opened /thank-you with no URL params and no usable referrer and set session_source=(not set). The purchase fires there, so the purchase inherits (not set) — measured 54.9% of mobile AND 44.8% of desktop purchases, and equally across Safari/Chrome/iOS/Android, which is why this is NOT ITP. Ads was unaffected (it reads gclid from localStorage rc-gclid), but GA4 channel reporting was wrong. Mirror to localStorage (90d, same TTL class as rc-gclid) and restore below. */ var LS_TP = 'rc_tracking_params', LS_TP_TS = 'rc_tracking_params_ts'; var TP_TTL = 90 * 24 * 3600 * 1000; function readDurable() { try { var ts = parseFloat(localStorage.getItem(LS_TP_TS) || '0'); if (!ts || Date.now() - ts > TP_TTL) return ''; return localStorage.getItem(LS_TP) || ''; } catch (e) { return ''; } } function writeDurable(v) { try { if (!v) return; localStorage.setItem(LS_TP, v); localStorage.setItem(LS_TP_TS, String(Date.now())); } catch (e) {} } if (!storedParams) { var recovered = readDurable(); if (recovered) { try { sessionStorage.setItem('tracking_params', recovered); } catch (e) {} storedParams = recovered; } } // If URL has params, MERGE into sessionStorage. New click IDs override; // missing keys (empty gclid, UTM-only URL) must not wipe a stored gclid. if (queryString && urlParams.toString()) { var sanitizedUrlParams = sanitizeTrackingParams(urlParams); if (sanitizedUrlParams) { var merged = new URLSearchParams(storedParams || ''); var incoming = new URLSearchParams(sanitizedUrlParams); incoming.forEach(function(v, k) { merged.set(k, v); }); try { sessionStorage.setItem('tracking_params', merged.toString()); } catch (ssW) {} writeDurable(merged.toString()); } } // Use stored params as primary source (persists across clean pages) // Fall back to URL params if nothing stored yet // Exit only if NO params exist anywhere var trackingParams = storedParams || (queryString ? sanitizeTrackingParams(urlParams) : ''); /* Tag 374 (awct) reads _gcl_aw, not localStorage. Return visits (PMax click days later, no gclid in URL, sessionStorage empty) still have rc-gclid. Stamp the cookie on every load or Ads drops the AWCT while GA4 purchase fires. */ try { var gStamp = urlParams.get('gclid') || ''; if (!gStamp) { try { gStamp = new URLSearchParams(trackingParams).get('gclid') || ''; } catch (eS) { gStamp = ''; } } if (!gStamp) { /* rc-gclid-ttl-20260902: only re-stamp a stored click inside the 90d window (rc-ad-click-ts); a stale click was being forged with a fresh GCL timestamp on every visit. Missing ts = legacy write, allow. */ try { gStamp = localStorage.getItem('rc-gclid') || ''; var gTs = parseInt(localStorage.getItem('rc-ad-click-ts') || '', 10); if (gStamp && !isNaN(gTs) && Date.now() - gTs > 90 * 86400000) gStamp = ''; } catch (eL) { gStamp = ''; } } stampAwCookie(gStamp); var agStamp = urlParams.get('gbraid') || ''; if (!agStamp) { try { agStamp = new URLSearchParams(trackingParams).get('gbraid') || ''; } catch (eB) { agStamp = ''; } } var storedAg = ''; try { storedAg = localStorage.getItem('rc-gbraid') || ''; } catch (eBL) { storedAg = ''; } if (!agStamp) { agStamp = storedAg; try { var agTs = parseInt(localStorage.getItem('rc-ad-click-ts') || '', 10); if (agStamp && !isNaN(agTs) && Date.now() - agTs > 90 * 86400000) agStamp = ''; } catch (eATs) {} } if (agStamp) stampAgCookie(agStamp); else if (storedAg) { var hostAg = (location && location.hostname) || ''; dropGbIfHolds(storedAg, hostAg.split('.')); } var gbStamp = urlParams.get('wbraid') || ''; if (!gbStamp) { try { gbStamp = new URLSearchParams(trackingParams).get('wbraid') || ''; } catch (eW) { gbStamp = ''; } } if (!gbStamp) { try { gbStamp = localStorage.getItem('rc-wbraid') || ''; var wbTs = parseInt(localStorage.getItem('rc-ad-click-ts') || '', 10); if (gbStamp && !isNaN(wbTs) && Date.now() - wbTs > 90 * 86400000) gbStamp = ''; } catch (eWL) { gbStamp = ''; } } stampGbCookie(gbStamp); function stampIdCookie(name, id) { try { if (!isClickId(id)) return; var secFlag = (location.protocol === 'https:') ? ';Secure' : ''; document.cookie = name + '=' + encodeURIComponent(id) + ';path=/;max-age=7776000;SameSite=Lax' + secFlag; } catch (eC) {} } var gbOnly = urlParams.get('gbraid') || ''; var wbOnly = urlParams.get('wbraid') || ''; var storeFresh = true; if (!gbOnly || !wbOnly) { try { var idTs = parseInt(localStorage.getItem('rc-ad-click-ts') || '', 10); if (!isNaN(idTs) && Date.now() - idTs > 90 * 86400000) storeFresh = false; } catch (eF) {} } try { if (!gbOnly && storeFresh) gbOnly = localStorage.getItem('rc-gbraid') || ''; } catch (eGb) {} try { if (!wbOnly && storeFresh) wbOnly = localStorage.getItem('rc-wbraid') || ''; } catch (eWb) {} stampIdCookie('_rc_gbraid', gbOnly); stampIdCookie('_rc_wbraid', wbOnly); } catch (eStamp) {} if (!trackingParams) return; /* rc-attrib-durable-20260823 (part 2): GA4 sets session_source/medium from the URL at SESSION START and event parameters cannot override it — which is why sending utm_source as an event param (we already do) never fixed the (not set) reports. Restore the attribution params onto the CURRENT url with replaceState BEFORE GTM/GA4 initialise. This file is beforeInteractive and renders ahead of GTMScript, so GA4 reads the restored URL. Only fills params the URL does NOT already have, so a real ad landing always wins. History-replace (not push) so the back button is unaffected. */ try { /* SCOPE (critical): restore ONLY on the post-payment confirmation page. The rest of the site must stay bare — decorating internal nav would re-stamp organic/direct sessions as paid and corrupt GA4 channel reporting, which is exactly what processLinks() below avoids. The (not set) problem is specific to LimoFlow's bare paidUrl redirect. */ /* NO regex literal here — this

to Lake Forest