Cookie Policy and Preferences

• A secure, HttpOnly, SameSite session cookie for account access.
• Short-lived OAuth state, nonce and PKCE values needed for Google or Microsoft sign-in.
• Session storage remembering whether the decorative envelope introduction opened during the browser session.
• Local storage recording whether anonymous first-party analytics were allowed or declined.

Only after you choose Allow analytics, we count page paths, duration selections and checkout starts. The analytics event does not contain your name, email, coupon code, account identifier or full URL query. Successful payments, failures and fulfilment are operational records required to provide and administer the service.

Choose Decline to prevent browser analytics. Use Reset analytics preference below at any time; the consent question will appear again and no non-essential measurement resumes unless you actively allow it.

Any future non-essential storage will remain blocked until the legally required opt-in. Withdrawal must remain as easy as giving consent.