Cookie Notice

1. What cookies are

Cookies are small pieces of information stored by a website in a browser. Similar local browser storage can keep short-lived state needed for a feature. This notice explains the storage used by PhotoStrip Studio.

2. Essential authentication storage

• PhotoStrip Studio authentication cookies, managed using Better Auth, maintain a secure signed-in session and refresh it when necessary.
• A short-lived authentication-return cookie remembers the safe PhotoStrip Studio page or action to resume after Google sign-in, email confirmation or password recovery.
• Short-lived session storage may hold an unsaved design while authentication completes so the requested save action can continue.
• Session storage may hold a draft client brief and, for a signed-in operator, recently retrieved Client Workspace share links so a link can be copied or previewed in that browser tab. Share-link access is fetched from the server and the browser cache is cleared on sign-out.
• A Client Workspace uses short-lived per-tab session storage for an opaque random identifier so repeated link opens and submission stages in that tab can be deduplicated. It is not used for advertising or cross-site tracking.
• Security and load-delivery infrastructure may use essential storage needed to route requests, prevent misuse or preserve service integrity.

3. Why consent is not requested for essential storage

The current PhotoStrip Studio product uses the storage above because it is necessary to provide authentication, security and an action specifically requested by the user. Where the law permits, essential storage does not require opt-in consent. Blocking it may prevent sign-in, account access or continuation of an interrupted design save.

4. Analytics and advertising

PhotoStrip Studio does not use advertising cookies, cross-site behavioural tracking or analytics cookies. We keep limited internal server-side product and reliability records for requested actions and Client Workspace stages. A Client Workspace uses one short-lived opaque per-tab session identifier to deduplicate link-open, first-edit, preparation, upload, categorised failure and completion events. Records may include a coarse device category, print-format identifier and export type or platform; they do not retain raw user-agent strings, IP addresses, client names, emails, design wording, uploaded artwork, project names or file URLs.

5. Third-party authentication

If you choose Google sign-in, Google may use its own cookies on Google-controlled pages under Google’s policies. PhotoStrip Studio does not control cookies set while you interact directly with Google.

6. Managing cookies

Most browsers let you view, remove or block cookies. Removing authentication cookies signs you out. Clearing session storage may prevent an unsaved design or brief from being restored, remove temporarily cached share links or start a new Client Workspace reliability session. Signed-in operators can retrieve their active links from the service again.

7. Changes and contact

We will update this notice when our browser-storage practices change. Questions can be sent to hello@photostripstudio.com.