Cookie Policy

1. Strictly necessary (no consent required)

• Authentication session (Supabase): keeps you logged in.
• Language preference (woopify-locale) and cookie consent choice itself (local storage).

2. Measurement via GTM (consent required, EU)

Our Google Analytics measurement loads only after you accept measurement or marketing cookies in the banner (Advanced mode: no GTM at all before consent). We use Google Consent Mode v2: ad_storage, analytics_storage, ad_user_data and ad_personalization stay denied by default and switch to granted only for the categories you tick. Events measured: page views, free-preview views (view_item), free preview leads (generate_lead), checkout clicks (begin_checkout) and completed payments (purchase, sent server-side with your transaction ID). Google Analytics 4 anonymizes IPs; data retention is 14 months. Server-side tagging (planned on sst.woopify.app) will later replace browser pixels.

Declining disables all measurement. Change your choice anytime via “Cookie settings” in the footer — every choice is timestamped and logged as your proof of consent.

3. No advertising trackers by default

We run no ad pixels and no cross-site tracking unless you opt into marketing cookies. No data resale, ever.

4. Payment pages

Checkout is handled by our payment providers (Stripe, and Paddle as Merchant of Record where applicable). Their pages may set strictly necessary cookies to process the payment — this happens only when you click “Pay”, never from tracking on our pages.