Cookies

Cookies are small files that a website stores on your device. They allow the website to remember your sign-in and settings and to understand how it is used.

The service does not work without these cookies, so no consent is required for them. We use them for:

• signing in and keeping your session;
• security, including the automatic Cloudflare Turnstile check when you start an album;
• payment;
• creating an album, including the draft of an album started without an account;
• account settings and your cookie choices (the record of your consent);
• remembering that you have closed a notice or an offer on the home page.

With your consent, we use our own analytics system (without third-party analytics tools) to see how visitors use the service: visits and clicks on the button for creating an album, progress from creating an album to the preview and payment, types of upload and payment errors, the duration and size of photo uploads in broad ranges, and the display and opening of offers on the home page.

We use a random anonymous identifier and a session identifier for each tab. We may store limited campaign data (utm_source, utm_medium, utm_campaign and utm_content), the name of the website you came from and the broad category of that website; we do not store full page addresses. Analytics never contains photos, file names, captions, names, email or postal addresses, telephone numbers or payment details.

First-visit data and the anonymous identifier expire after 30 days, and events are deleted automatically after 90 days at the latest. To prevent misuse, the server immediately replaces the IP address with a one-way pseudonymous value; we do not store the IP address for analytics, and we delete the pseudonymous records within two hours at the latest.

With your consent, we use the Meta Pixel and the Conversions API to measure visits, sign-ups, albums started, albums with enough photos for approval, checkouts started and purchases, and to improve our ads.

Meta may receive browser and click identifiers (_fbp and _fbc), the browser type and IP address, a hashed form of your email address where we have it, the time of events, and the value and currency of a purchase. Hashing protects the email address in transit but does not make it anonymous. Photos, captions, album names, delivery addresses, payment details and the addresses of private pages are not included. Meta processes the data under its own privacy policy.

We remember your choice for 180 days. Meta identifiers in the browser may remain valid for up to 90 days. We keep matching data and pending events on our server for up to 7 days. Withdrawing consent deletes the Meta identifiers in this browser and requests the removal of pending events; events already sent cannot be recalled.

In the banner, you can choose “Accept all” or “Essential only”; choosing “Settings” brings you to this page, where you can turn analytics and advertising measurement on or off separately. You can withdraw or give consent again at any time with the buttons on this page. Your choice applies to this browser. We also honour the Global Privacy Control signal when your browser sends it. You can also manage cookies in your browser settings; if you block strictly necessary cookies, signing in and saving drafts may not work.

Withdrawing consent does not affect the lawfulness of processing before its withdrawal and does not delete events our server has already received; the retention periods above apply to them. Signing in, album drafts and payment continue to work.

For questions about cookies, please write to us at hello@grandparentalbum.com. More about the processing of personal data is in the Privacy Policy.