Cookie Policy
Last updated: 20 September 2026 · Effective from: 4 October 2026 · Document version: privacy-2026-09-20
1. Necessary cookies and local storage
The Service relies on necessary cookies: NextAuth session cookies that handle sign-in, and signed CloudFront cookies that grant access to a private gallery for 24 hours. Browser local storage holds photo likes and the selected language. None of this data reaches the Controller's servers.
2. Analytics cookies set after consent
Once consent is given in the cookie banner we set Google Analytics 4 cookies (_ga, _ga_*, stored for up to 2 years) and load the Microsoft Clarity script, which writes its own analytics cookies. Without consent neither tool runs. You can withdraw consent at any time by clearing site data in your browser settings.
3. Google Consent Mode v2
Google Consent Mode v2 may apply behavioural modelling, including conversion modelling, even where analytics consent has not been given in full. This means Google estimates traffic patterns from aggregated data stripped of identifiers. The mechanism is documented here: Google Consent Mode v2.