Cookie Policy

When Analytics is enabled, we may record redacted committed storefront search terms, result counts and selections using a keyed pseudonymous session link for up to 90 days; product views and interactions; and IP-derived country and region when a sell or trade quote is created for up to 60 days.

With your analytics consent, Google Analytics 4 helps us understand visits, acquisition sources, product interactions, baskets, checkout and lead journeys, and completed purchases and refunds. Measurements may include browser/session identifiers, browser and device information, approximate location, product identifiers and names, quantities, order reference, values, discounts, tax, delivery charges and currency. We do not send names, email addresses, phone numbers, postal addresses, account credentials, payment-card details or the contents of contact/quote forms in these analytics events.

The GA4 _ga and _ga_<measurement-id> first-party cookies distinguish browser instances and maintain session information. They can last up to 2 years; activity can refresh their expiry. Google Analytics event-level retention is configured to 2 months and user-data retention to 14 months, with the user-data period reset by new activity. Most aggregated standard reports are not governed by those retention settings. Cookie expiry and report retention are different.

Analytics waits for an analytics opt-in, separately from advertising measurement. Any consented transaction measurements delivered from our servers follow the same choice; server-side delivery does not override a refusal. Google signals, user-provided contact-data collection and personalised advertising are disabled for this implementation. See Google’s Privacy Policy.

The provider inventory below is frozen with this approved revision. An external analytics or advertising measurement tracker cannot be activated unless its declaration is complete, matches this inventory, passes an inventory check, and uses the current consent and policy versions.

Withdrawing consent stops new optional collection, prevents supported trackers loading after refresh, and removes known optional cookies where possible. It cannot automatically recall information already transmitted or required to be retained lawfully.

With your separate advertising measurement consent, Google Ads helps us understand which advertisements lead to purchases. Google receives ad-click identifiers where available, browser and device information (including IP address and user agent), page information, and the order reference, total value and GBP currency after a successful payment. We do not include your name, email address, postal address or card details in our purchase event.

Google tags do not load for advertising measurement until you choose to allow it. We pass your choice using Google Consent Mode and keep personalised advertising disabled. Analytics consent alone does not enable Google Ads measurement. Advertising measurement consent does not subscribe you to marketing email.

Google may use first-party cookies beginning _gcl_ to measure advertising results, normally lasting up to 90 days. Some are only set following an ad interaction. Google may also use related browser storage and technologies on its own domains, subject to browser controls and your Google settings. See Google's cookie information and how Google uses information from partner sites.

You may reject or withdraw advertising measurement independently in Cookie settings without affecting shopping or payment. Withdrawing consent stops new measurement on subsequent pages and removes recognised first-party advertising cookies and storage where possible; it cannot recall information already sent to Google or remove cookies on Google's domains.

Inter fonts and account initials are served locally. When you intentionally continue to Stripe's hosted checkout, Stripe may use cookies and similar technologies on its own domain for payment and fraud prevention under Stripe's policies.

Questions can be sent to support@shutterxchange.com. See our Privacy Policy for personal-data processing, retention, and rights.