Cookie Policy

Cookies are small files stored on your device.

They help websites remember information, keep you signed in, and understand how the website is used.

Essential cookies

These are needed for the website to work. They may support:

• login
• security, including a Cloudflare Turnstile bot check when you start an album
• checkout
• album creation, including a saved draft for albums started without an account
• account settings

First-party product analytics

At launch, our own same-origin analytics helps us understand:

• landing visits and create-album button use
• progress from album creation through preview and checkout handoff
• safe categories for upload and checkout failures

We use random anonymous and per-tab session identifiers. We may store controlled campaign fields (utm_source, utm_medium, utm_campaign, and utm_content), the referring hostname and a broad referrer category. We never store a full referring URL or raw query string in analytics.

First-touch campaign attribution and the anonymous identifier expire after 30 days. Raw analytics events are kept for no more than 90 days and are automatically purged every day. This first-party system is separate from the optional Meta advertising measurement below.

To prevent automated abuse, our server briefly reads the single IP address supplied by our hosting platform, converts it to a standard form, and replaces it with a one-way HMAC pseudonym before database use. We do not store or log the raw address for analytics. The pseudonymous hourly budget row is kept for no more than two hours and purged hourly.

Analytics never contains photos, filenames, captions, reactions, names, email addresses, phone or postal addresses, payment details, or Stripe identifiers. We do not sell analytics data.

When advertising measurement is enabled for this site, we use Meta Pixel and the Conversions API by default to measure visits, completed registrations, checkout starts, and purchases and improve our ads. You can disable advertising measurement in the settings below. Disabling does not affect your account, album creation, or checkout.

Meta may receive browser and click identifiers (_fbp and _fbc), your browser type and IP address, a hashed version of your account email, event times, and purchase value and currency. Hashing helps protect the email in transit but does not make it anonymous. Photos, captions, album names, delivery addresses, payment details, and private page URLs are not included in these events. Meta processes the information under its own Privacy Policy.

Your advertising choice is remembered for 180 days. Meta browser identifiers can last up to 90 days. Our server retains matching information and queued marketing events for up to seven days. Disabling clears Meta identifiers in this browser and requests removal of its queued server events. Events already sent cannot be recalled through this control. We honor Global Privacy Control for this advertising measurement.

Product analytics collects journey events unless you disable it in this browser or your browser supplies a Global Privacy Control signal. This control stops future collection in this browser; it does not ask for consent before collection begins.

You can also manage browser storage in your browser or device settings. We honor Global Privacy Control for analytics where the browser makes it technically available. Blocking essential storage may prevent login or saved product features from working.

Your choice applies to this browser. Disabling analytics clears its analytics-only identifiers and attribution storage. It does not delete events already received by our server; those follow the retention periods above. Your login, album drafts, and checkout continue to work.

Cookie questions: hello@grandparentalbum.com