Cookie Policy

1. Scope

1.1. This policy describes the cookies and equivalent technologies — including browser local storage — used on slp.gallery (the “Site”), and the basis on which they are placed. It supplements, and forms part of, the Privacy Policy.

1.2. Storage that is not strictly necessary for the operation of the Site is placed only with the user’s prior consent, in accordance with Directive 2002/58/EC as implemented in national law. No advertising or cross-site tracking technologies are used.

2. Strictly necessary storage

2.1. The following entries are required for the Site to function and are placed on the basis of the Controller’s legitimate interest in delivering the requested service; they are exempt from the consent requirement:

• Authentication session — a signed token maintaining the signed-in state and access to purchased packs. Retained until sign-out or expiry.
• Record of consent — the choice expressed in respect of analytics. Retained for 12 months.
• Interface preferences — for example colour values selected within a prompt, so that user edits survive a page reload.

2.2. These entries are stored in the browser’s local storage rather than as HTTP cookies. They are not transmitted to third parties and cannot be disabled without impairing the Site.

3. Analytics (consent required)

3.1. Where consent is given, the Site loads PostHog, a product-analytics service, which places cookies and local-storage entries in order to recognise a returning browser and to measure use of the Site.

3.2. Data processed comprises pages accessed, interactions, approximate country derived from IP address, and device and browser characteristics. Processing takes place in the United States; the retention period is 12 months.

3.3. Session recording and keystroke capture are disabled. Neither the content of form fields, including the email address, nor the contents of the screen are recorded.

4. Third-party technologies

• Creem — the checkout is hosted on its own domain and may set cookies necessary to process the transaction and prevent fraud.
• Cloudflare and Cloudinary — hosting and delivery of the Site and its images; technical cookies may be set for security, routing and caching purposes.

5. Withdrawal and management of consent

5.1. Consent may be given, refused or withdrawn at any time, with effect for the future, via Cookie settings.

5.2. Cookies and local storage may additionally be deleted or blocked through browser settings. Deleting this data terminates the authentication session and signs the user out.

6. Amendments

This policy may be amended where the technologies used change. The version in force is the one published on this page, identified by the date shown above.

7. Contact

Enquiries concerning this policy: support@slp.gallery.