Cookies and local storage
What Staffshots puts in your browser, why, and how long it stays. You can change your analytics decision on this page at any time.
Your choice
Everything we store
| What it is | Kind | Set by | What it is for | How long | Consent needed |
|---|---|---|---|---|---|
| headshots.access_token | Local storage | Staffshots | Keeps you signed in after you follow a sign-in link. | Until you sign out or clear browser data | No — strictly necessary |
| headshots.history | Local storage | Staffshots | Remembers the photos and headshot sets you made in this browser, so you can find them again. Identifiers only, no images. | Until you sign out or clear browser data | No — strictly necessary for the feature you asked for |
| headshots.consent | Local storage | Staffshots | Remembers whether you accepted or refused analytics, so we stop asking. | 12 months, then we ask again | No — exempt, it is the record of your choice |
| _ga | Cookie | Tells one returning visitor apart from another. | 13 months | Yes — set only after you accept | |
| _ga_<container> | Cookie | Keeps analytics session state for this site. | 13 months | Yes — set only after you accept |
Before you accept, nothing is loaded
If you have not accepted, no Google script is loaded and no request is made to Google at all — not a tag with tracking switched off, nothing. Refusing, or ignoring the banner, leaves the site exactly as it is.
What we never send
Page addresses are sent without the query string and without the fragment, and any identifier in the path is replaced with a placeholder before sending. The sign-in and invitation pages are excluded entirely, so a sign-in link can never reach Google.
Who receives it
Google Ireland Limited is the recipient. Data may be processed by Google LLC in the United States under the EU–US Data Privacy Framework. Ad personalisation and Google signals are switched off, and the cookies expire after 13 months rather than the two-year default.
Nothing else is watching
We run no advertising cookies, no advertising pixel, no tag manager, no session recorder and no A/B testing tool. Fonts are served from our own servers, so loading a page tells no one else that you were here.