Cookie policy
Last updated: 15 August 2026
The short version. Four cookies are needed to run the site and take a payment, and they are always on. Two more belong to Google Analytics, and they are set only if you say yes. We use no advertising cookies and no cross-site tracking, and we never will without asking you first.
What a cookie is here
A small file the site stores in your browser. We also use your browser's local storage to remember whether you chose the light or dark version of the site, under the key theme. That never leaves your device and is not used to recognise you.
What we set
| Cookie | Set by | What it does | Category | Expires |
|---|---|---|---|---|
cc_cookie | OnePassPhoto | Remembers your cookie choice so you are not asked again. | Essential | 6 months |
__cf_bm | Cloudflare | Tells human visitors from bots and keeps the site up under attack. | Essential | 30 minutes |
__stripe_mid | Stripe | Fraud prevention on payment. Set only when you reach checkout. | Essential | 1 year |
__stripe_sid | Stripe | Ties the steps of one payment together. Set only when you reach checkout. | Essential | 30 minutes |
_ga | Google Analytics | Distinguishes one visitor from another so a visit reads as one journey. | Analytics | 2 years |
_ga_3NTZ0066H1 | Google Analytics | Keeps the session state for this specific site. | Analytics | 2 years |
Essential cookies
These run without asking, because the site cannot do its job without them and the law does not require consent for them. They remember your cookie choice, keep the payment step secure, and protect the site from automated abuse. None of them tracks you across other websites.
The two Stripe cookies appear only once you reach the payment step. If you only use the free check and never go to checkout, they are never set.
Analytics cookies
We use Google Analytics to see how many people use the site and which pages help them. Its cookies are set only after you agree in the banner.
Before you agree, Google Analytics runs in consent-denied mode. It reports that a page was viewed, without a cookie and without any identifier that could recognise you on a later visit, so what it receives cannot be traced back to you. Agreeing turns on normal measurement, where a cookie lets a visit read as one journey rather than a set of unconnected page views.
The advertising signals in Google Consent Mode stay switched off no matter what you choose, and advertising identifiers are stripped from the data. We do not run ads and we do not build audiences.
Changing your mind
Open the cookie preferences from the link in the footer of any page and change your choice. Turning analytics off stops new cookies immediately, and you can delete the ones already set through your browser settings. Withdrawing consent does not make what happened before it unlawful, and it never affects the service you get.
Every browser also lets you block or delete cookies for a site outright. Blocking the essential ones will break the checkout.
Legal basis
Storing and reading information on your device is governed by § 25 TDDDG. Essential cookies rely on § 25(2) no. 2 TDDDG, because they are strictly necessary to provide the service you asked for. Analytics cookies rely on your consent under § 25(1) TDDDG, and the processing that follows relies on Art. 6(1)(a) GDPR. What happens to the data afterwards is described in our privacy policy.
Questions
Email help@onepassphoto.com.