Cookie Policy

What cookies are

Cookies are small files stored in your browser. Websites can also keep data in your browser's local storage and session storage. We use these to keep you signed in, remember your cart, complete checkout, measure how the site is used, and measure and run our advertising. Each is listed below.

Categories of cookies we use

Strictly necessary

Required for the site to function: keeping you signed in, processing checkout, and security tokens. These cannot be disabled.

• sb-* — Supabase auth session
• Cart contents and draft recovery — stored in your browser. Signed-in carts are also saved through our Supabase service provider so you can continue on another device. Checkout sends the selected designs and order details needed to fulfill your purchase.
• Stripe session cookies (set on the checkout redirect)
• Your privacy choice — stored in local storage so we remember that you opted out

Analytics

• _ga, _ga_* — Google Analytics. First-party cookies that count visits and record pages viewed, how you arrived, and site events such as starting a design, adding to cart, beginning checkout and purchases. These stay on when you opt out.
• ph_* — PostHog. A first-party cookie and local storage used for product analytics and session replay, which records how you use the site, including what you type into the stamp designer. Form fields such as email, address and password are masked, and payment details are entered on Stripe's page and never recorded. Turned off when you opt out.
• Vercel Web Analytics and Speed Insights — aggregate page views, referring sites, countries and page-speed measurements. No cookies.
• Our own site measurement — an anonymous session identifier in session storage that rotates after 30 minutes. It sends only fixed event names and broad device, page-purpose and acquisition categories, never inscription text, artwork, addresses or private-link tokens. Turned off when you opt out.
• How you found us — local and session storage that keep the referring site, campaign tags in the link, the first page you landed on and your number of visits, so they can be saved with your order. Turned off when you opt out.

Advertising

When we advertise, Google Ads and the Meta (Facebook and Instagram) Pixel may set cookies to measure which ads lead to orders and to show our ads to people who have visited the site. Turned off when you opt out.

• _gcl_* — Google Ads
• _fbp — Meta Pixel

Error telemetry

When error reporting is enabled, Sentry receives a technical error report (with personal information scrubbed) so we can diagnose and fix it. Sentry does not set tracking cookies.

On eligible pages, a Sentry error report may include a session replay — a reconstruction of the preceding moments in your browser, so we can see what led to the error. Wherever a replay is recorded, every piece of text and every form field is masked and images are blocked before anything leaves your browser — including anything you type into a sign-in or sign-up form. We see layout and where you clicked, not what you typed or read.

Sentry replay is disabled for the designer, batches, carts, checkout, sign-in, account and staff pages, quotes, tracking, and private design or order links. Opting out on Your Privacy Choices and Global Privacy Control also disable it. Sentry replay uses sessionStorage (key sentryReplaySession), not a cookie, and it clears when you close the tab.

Managing your choices

Use Your Privacy Choices to opt out. Opting out, or sending the Global Privacy Control signal from your browser, turns off Google Ads and Meta advertising signals, PostHog, our own site measurement, saving how you found us, and Sentry replay. Basic Google Analytics measurement and Vercel's cookieless analytics continue. Browser ad and tracker blockers also work, and the designer and checkout keep working either way.

You can also block or clear stored data through your browser's site-data settings. Clearing site data can sign you out and remove drafts or carts saved only on that device; download any local work you want to keep first.