Two different pages, two different answers
A couple’s wedding site, at an address like
yournames.vows.day, sets no cookies. It stores one item in
session storage, which is gone when you close the tab, and it makes no request to any other
company unless the couple has chosen to embed a video or a live map. See section 4.
vows.day itself, the marketing pages and the studio, stores the handful of things in section 2. There is no advertising, no tracking pixel, no cross-site profiling, and no data sold to anybody.
What vows.day stores
Necessary, and there is no way to turn these off
| What | Kind | Why | How long |
|---|---|---|---|
firebaseLocalStorageDb | Browser database | Keeps you signed in. Without it every page would ask you to sign in again. | Until you sign out, or clear your browser. |
__stripe_mid, __stripe_sid | Cookies | Set by Stripe when a payment form is on screen, to detect fraud. Only on the pages that sell something. | One year, and 30 minutes. |
Preferences you have set
| What | Kind | Why | How long |
|---|---|---|---|
vows:theme | Local storage | Whether you asked the studio for light or dark. Only written if you choose one: untouched, it follows your machine. | Until you clear it. |
vows:brief-draft | Session storage | Carries the sentence you typed on the home page through to the studio, so it is not lost. Deliberately not put in the address, because it is a sentence about your wedding and has no business in a browser history or a server log. | Read once and deleted immediately. |
Measurement
| What | Kind | Why | How long |
|---|---|---|---|
_ga, _ga_* | Cookies, set by Google Analytics | Counts visits and which pages are opened, so we can tell what works. | Up to two years. |
_pin_unauth | Cookie, set by the Pinterest tag | Tells Pinterest which pages were opened, when somebody signed up, when they started paying and when a payment went through, so that an advertisement on Pinterest can be measured against what it led to. Pinterest may use what it sees under its own policy. | One year. |
These are the only non-essential things on the site, and three rules govern them:
- They do not run where consent would be required and has not been given. A visitor whose browser places them in the UK, the EEA or Switzerland is not measured, and the script is never loaded for them. Nothing is set, so there is nothing to refuse.
- Global Privacy Control and Do Not Track are honoured everywhere. A browser sending either signal is not measured, wherever it is.
- No private address is ever reported as a page view. Your site’s own
identifier is stripped out of the page address before Google Analytics is told anything, so a
report says
/studio/(id)rather than which site you were looking at, and query strings are dropped entirely. The Pinterest tag cannot be handed a cleaned address, so it is told nothing at all about a page whose address, query string or referring page carries your site’s identifier, with one exception: a payment is reported from the page it was made on, and that page’s address goes with it. The identifier on its own opens nothing, since the page is behind your sign-in.
We do not use Google Analytics for advertising and we have not turned on its advertising features or signals. The Pinterest tag is for advertising: it is what lets us see whether an advertisement led to anybody, and Pinterest may use what it sees to build audiences under its own policy. It reads nothing you type and is never given your email address, hashed or otherwise: it is told only the things named above and never the contents of a form or the words on a button.
To stop being measured anywhere, turn on Global Privacy Control in your browser, block the cookies for this site, or write to legal@vows.day and ask.
What a couple’s published site stores
| What | Kind | Why | How long |
|---|---|---|---|
vows:replied:(site) | Session storage | Remembers that you have already replied, so the page shows a thank you rather than an empty form if you reload it. | Until you close the tab. |
Session storage rather than something longer-lived, deliberately: a guest who comes back next week may genuinely want to correct their answer, and finding the form gone would be worse than finding it there.
Nothing else. No cookies, no analytics, no fonts from anywhere else, and no advertising. We do not measure the visitors to a couple’s site at all, for them or for us.
Unless the couple added something
A couple can put an embedded video or a live, pannable map on their site. If they have, then opening the page loads it from that company, and that company can set its own cookies and see your network address. The ones that are possible are YouTube, Vimeo, Twitch, Google Maps and OpenStreetMap, and their own policies apply to what they do.
The default map is a picture drawn by us before the site was published, which contacts nobody. A couple who prefers it that way can ask for it, and a site with no embed at all makes no third-party request whatsoever.
Changes
If we ever add something that needs your consent in a place where it needs your consent, we will ask before it runs rather than assume. This page will say what it is first.
Questions to legal@vows.day. What happens to your data more generally is in the privacy policy.