Cookie Notice
No advertising cookies. Ever. We use cookies to keep you signed in, and Google Analytics to count how many people use the editor. That is the whole list.
Strictly necessary
These make the site work. They cannot be turned off, because without them you cannot stay signed in. They are not used for tracking, and no consent is required for them under EU or UK law.
| Cookie | Purpose | Expires |
|---|---|---|
sb-*-auth-token | Set by Supabase. Keeps you signed in, so you don't have to request a new link on every page. | 1 year (refreshed) |
pm-consent | Remembers whether you allowed analytics, so we stop asking. Stored in your browser, never sent to us. | Until you clear your browser data |
Analytics — optional
We use Google Analytics 4 to see which pages people land on, how many finish a poster, and where things break. It tells us that someone did something, not who.
| Cookie | Purpose | Expires |
|---|---|---|
_ga | Distinguishes one browser from another using a random identifier. | 2 years |
_ga_P023Y247WP | Maintains the session state for this property. | 2 years |
How we've configured it
- Off by default in the EEA, UK and Switzerland. We use Google Consent Mode v2 with
analytics_storageset todeniedfor those regions. Nothing is stored on your device unless you press “Allow.” - IP anonymisation is on. Your IP address is truncated before it is logged, so location is city-level at best.
- Google Signals is off. Your analytics data is not joined to your Google account or used for ad personalisation.
- Advertising features are off. We do not build remarketing audiences and we do not sell data to advertisers.
- Data retention is 14 months, the shortest GA4 allows.
- Your photos and posters are never sent to Google. Analytics sees page URLs and events, not content.
Turning analytics off
You have three ways, all of which work:
- Use the button below. It clears your saved choice and re-asks — decline, and the analytics cookie is never set.
- Install Google's opt-out add-on — tools.google.com/dlpage/gaoptout — which blocks GA on every site, not just ours.
- Turn on Global Privacy Control in your browser, or block third-party scripts. We honour GPC.
Declining changes nothing about how the product works. Every feature stays available. We would simply rather know what to fix.
Analytics on this browser
Using the default for your region.
Questions
privacy@papermache.io. The full picture of what we collect is in the Privacy Policy.