Cookie Policy

We keep our use of cookies deliberately minimal. We do not use advertising cookies, third-party tracking pixels, device fingerprinting, or cross-site behavioral tracking of any kind. The cookies we do set fall into two groups.

Strictly necessary cookies

• Authentication & session — set by Supabase to keep you signed in and maintain your authenticated session. The service does not work without these.
• session_id — links the photo you upload to your in-progress portrait session so we can show you your previews and complete your order.

Functional & privacy cookies

• visitor_region — remembers your broad region so we can show the appropriate privacy disclosures. Set by our server-side middleware; it does not track behavior.
• gpc_signal — records that your browser sent a Global Privacy Control signal, so we suppress analytics and treat it as an opt-out of sale/sharing.
• privacy_opt_out — records your manual "Do Not Sell or Share" choice from the privacy choices page, which suppresses our first-party analytics beacon.

Analytics

Our page-view measurement is first-party and cookieless. A small beacon tells our own server which path was viewed, counted against a daily-rotating, non-identifying fingerprint. We do not currently use any third-party analytics service.

Managing cookies

You can clear or block cookies in your browser settings, though blocking strictly necessary cookies will prevent sign-in and checkout from working. For more on how we handle data, see our Privacy Policy.