Cookies, kept simple.

Effective 9 September 2026. Essential storage keeps your gift accessible. Optional analytics starts only if you choose Allow analytics. Declining does not affect previews, purchases or downloads. We do not use advertising pixels, session replay or embedded social trackers.

What the studio stores.

• gift_owner — a secure, HTTP-only access cookie, set when you ask the studio to create a proof. It connects your browser to your uploads and lasts up to 90 days.
• gift_[order reference] — a secure, HTTP-only cookie set when you open a private gift link. It allows access to that gift for up to 90 days. The gift’s own expiry, refund or deletion can end access sooner.
• gift-current-v2 — local browser storage holding your last gift reference so you can reopen it from the studio. It contains no photograph or card details. It remains until you clear browser storage or delete the gift through that browser; it does not grant access by itself.
• legacy_[order reference] — an access cookie for an earlier-version order, set after its private access link is checked. It lasts up to 24 hours.

These access cookies use SameSite=Lax and are secure on HTTPS. Merely reading the public homepage or gift guides does not start a studio session. Old attribution keys from a previous test version are removed when you revisit; they are no longer used for tracking.

Optional campaign measurement.

gift_analytics_choice remembers yes or no for up to 180 days. If you accept, gift-analytics-session-v1 in session storage holds a random visit reference and approved campaign labels for up to 30 minutes (or until the tab closes). We count public page visits and attach those labels to orders so we can compare previews, sales and costs. We do not collect full URLs, referrers, photos, messages or payment details in visitor events. A hashed network identifier is used separately to limit abusive requests.

Checkout and hosting.

Stripe checkout opens only after you choose to continue to payment. Stripe may use its own storage for checkout, authentication and fraud prevention under its cookie policy. We do not load Stripe advertising or checkout scripts on the homepage. Hosting security may use storage when necessary to protect or authenticate a request. Password-protected test previews can also use Vercel access cookies; those are separate from the public storefront.

Your controls.

You can remove or block site cookies and storage in your browser settings. Public pages still work, but the studio may not be able to remember or authorise your gift. Keep your private access link and downloaded files before clearing storage. Deleting browser storage does not delete server files; use your gift page to request that.

Use Analytics choices in the footer to accept or withdraw permission at any time. Withdrawal stops future collection and clears the analytics session in this browser. Previously collected records expire through our scheduled 90-day cleanup. See the privacy policy.