Cookie policy
How PhotoPort uses essential cookies.
This page explains the small number of browser tokens we use, why customer records stay in the PhotoPort database, and how optional analytics is controlled.
Last updated: 29 August 2026
PhotoPort keeps setup drafts, PhotoPort AI conversations, checkout details, customer messages, and signup-source records in its database. The browser carries only essential signed tokens for authentication, security and short-lived workflow access, plus analytics storage according to the choice shown in privacy settings.
In plain English
- Essential signed tokens keep sign-in, PhotoPort AI continuity, security and checkout working.
- Clearing this browser does not delete setup progress, support history or saved customer records from PhotoPort.
- Analytics runs by default on the US site and stops when you switch it off in privacy settings.
- You can use PhotoPort if you reject optional analytics.
- You can reopen cookie settings from this page and change your analytics choice.
Cookie and database categories
| Category | Examples | Why we use it | Choice |
|---|---|---|---|
| Essential account and security | PhotoPort session cookies, Clerk authentication cookies, the signed photoport_ai_visitor conversation token, admin session cookies, anti-abuse and security records. | To let you sign in, resume one PhotoPort AI conversation across pages and communication methods, keep your account secure, protect the portal, and stop misuse. | Always on because the service cannot work properly without them. |
| Essential checkout and billing | Stripe checkout references, a signed photoport_checkout_intent token, database-backed junior consent, billing return information, and the short-lived photoport_voice_attribution cookie after you choose a voice-assistant package button. | To retrieve the correct database record, complete payment, apply your package, support Apple Pay or card checkout, and bring you back to PhotoPort. | Always on when you use checkout. |
| Database-backed setup and support | Saved setup drafts, original starter-photo references, one database-backed PhotoPort AI transcript and memory record, support cases, account-scoped signup source and journey events, admin contact drafts, account popups, and your privacy-choice audit. | These operational records live in PostgreSQL so the service can recover progress, provide support, and understand which PhotoPort journey an account used. | Always on for the relevant feature under our contract and legitimate interests in operating and improving PhotoPort. |
| Optional analytics | PostHog product analytics, click heatmaps, privacy-protected session replay and error events, Google Analytics, Meta Pixel campaign events when configured, and the 30-day signed photoport_voice_visitor HttpOnly cookie when that attribution feature is authorised. The voice visitor identifier is not stored in localStorage or another script-readable browser store. | To understand which pages, adverts, voice enquiries, and product steps are working, including a later same-browser sign-in. | On by default on the US site. Switch it off at any time; Global Privacy Control is also respected. |
Analytics and advertising measurement
PhotoPort may use PostHog, Google Analytics, and Meta Pixel campaign events to understand visits, sign-ups, checkout starts, purchases, declared product steps, clicks, customer-journey friction, and browser errors. On customer-facing journey pages, PostHog may replay the visible page and non-sensitive customer-visible images. Every typed input is masked, payment iframes are blocked, network request and response bodies are not recorded, and URLs are stripped of query strings and private tokens. Private uploads, signed media, and PhotoPort AI conversations are blocked. Admin, staff-support, private-link, and tokenised capture pages are excluded. Generic click/text autocapture remains disabled. Analytics is not required to use PhotoPort. It runs by default on the US site and stops when you opt out in privacy settings or enable Global Privacy Control. Advertising pixels and extra campaign measurement follow this same consent approach unless the law allows a different basis.
How to change your choice
Use the button below to reopen PhotoPort cookie settings. Clearing cookies and site data may sign you out or end a short-lived checkout or support-view session, but it does not delete setup progress or PhotoPort AI history stored in PhotoPort's database. Unattached guest conversations expire after 180 days; account-linked conversations are removed with the account.