Only what the journey needs
1. What is used now
- Necessary authentication and security cookies for signed-in administration, including HttpOnly session protection and CSRF controls.
- Session storage for the guest owner capability and temporary upload-journey state. It normally clears when the browser tab or session ends and is never used for advertising.
- Local storage for a display preference such as light or dark theme.
- Stripe may set its own strictly necessary fraud-prevention and checkout storage when you open its hosted payment page, under Stripe's own notice.
2. Optional Google Analytics 4
No Google tag request is made before you opt in. Accept and reject are presented equally, and Cookie settings remains available to withdraw consent at any time. Where optional analytics is not offered, it remains off.
After opt-in, first-party _ga cookies are used for 395 days and are not renewed. Your consent choice is kept in local storage for 180 days. Analytics does not run on upload, checkout, order, account or other customer pages.
3. Your controls
You can clear site data in your browser. Clearing a guest owner capability can prevent that browser from reopening an unfinished order, although an email recovery link may still work. Blocking necessary storage may stop checkout, owner controls or sign-in from functioning.
This notice is not a claim of legal certification. The live cookie scan and consent configuration require owner and EU/Spanish legal approval before launch and after every material tracking change.