Cookie Policy

1.1Cookies are small text files a website stores on your device. They let a site remember that you are signed in, keep your settings and, with your consent, count how the site is used. Browser storage works in a similar way but stays in your browser and is not sent to the server.

• We use cookies that the site needs to work: to keep you signed in, to finish a sign-in step and to remember your language. These do not need your consent.
• We use Google Analytics, and Google Ads to measure whether our ads lead to sign-ups and purchases, only if you say yes to them in the cookie notice. Each has its own switch. If you reject them, or do not answer, they do not load and set no cookies.
• We use no cookies for personalised ads or retargeting, no session recording and no cookies from social networks.

3.1These are needed for the site to work and cannot be switched off. On the live site the sign-in cookies carry a __Secure- prefix in front of the names below (for example __Secure-better-auth.session_token).

better-auth.session_token

What it does
Keeps you signed in on this device.

How long
7 days, renewed while you use the site

better-auth.two_factor

What it does
Remembers the first step of a log-in while you enter your two-factor code.

How long
10 minutes

better-auth.trust_device

What it does
Set only if you tick the box to trust this device at the two-factor step, so it does not ask for a code here again.

How long
30 days

better-auth.better-auth-passkey

What it does
Holds the one-time challenge while you log in with a passkey or add one.

How long
5 minutes

locale

What it does
The language you picked for the app and our emails.

How long
1 year

locale_session

What it does
The language a shared link asked for, for this visit only.

How long
Until you close the browser

3.2Cloudflare, which protects the site, may set its own security cookies, such as __cf_bm for bot detection (30 minutes) or cf_clearance after you pass a security check. The check on our sign-up, sign-in code, password reset and contact forms (Cloudflare Turnstile) runs in its own frame from Cloudflare.

4.1If you accept analytics cookies in the cookie notice, Google Analytics loads and sets these cookies:

_ga

What it does
Tells visits by different people apart.

How long
2 years

_ga_<container-id>

What it does
Keeps the state of your current visit.

How long
2 years

4.2They tell us which pages people use and where they come from. Google processes this data for us; see the Privacy Policy for who receives data and where.

5.1If you say yes to ad measurement in the cookie notice, Google Ads, a service of Google Ireland Limited, loads and sets these cookies on our domain:

_gcl_aw

What it does
Holds the details of the Google ad click that brought you to us.

How long
90 days

_gcl_gs

What it does
Holds the details of the Google ad click that brought you to us.

How long
90 days

_gcl_au

What it does
Lets Google Ads measure conversions on our site.

How long
90 days

5.2They tell us whether a click on one of our Google ads led to a sign-up or a purchase. We do not use them for personalised ads or retargeting: that stays switched off. When a sign-up or a purchase is reported, Google may also read or set its own cookies on its domains (such as googleadservices.com, google.com and doubleclick.net) under its own rules. Google lists its cookies at business.safety.google/adscookies and explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites. See the Privacy Policy for what Google receives.

6.1You pay on Stripe's own checkout and billing pages, not on ours. Stripe may set cookies there for fraud prevention and secure payment, under Stripe's own cookie policy. Our pages set no payment cookies.

7.1We keep your answer to the cookie notice in your browser's local storage under produktshot.consent.v2, so we do not ask on every page. It stays until you change your answer or clear your browser's data.

7.2If you say yes to ad measurement, Google Ads also keeps the details of the ad click that brought you to us in local storage under _gcl_ls, and we note there under produktshot.ads-sent.v1 which sign-up or purchase was already reported, so a reload does not report it twice. If you take that consent back, we delete both.

8.1The cookie notice has Reject and Accept side by side. Accept says yes to everything the notice names, Reject to none of it. Settings has a separate switch for analytics and for ad measurement, both off until you turn them on. To change your answer later, use Cookie settings at the bottom of any public page, or on Account › Data & privacy when you are signed in. If you take your consent back, we remove the cookies of what you took back and reload the page without it.

8.2You can also delete or block cookies in your browser's settings. If you block the essential ones, you cannot stay signed in.

9.1Some browsers send a Do Not Track signal. There is no common standard for it, so we do not respond to it. Analytics and ad measurement run only if you accept them in the cookie notice in any case.

10.1We update this policy when the cookies we use change. The date of the last change is at the top of this page.

11.1Questions about cookies: write to us through the contact page or at info@produktshot.com.