StoragePurpose and duration
Authentication session cookieKeeps a verified account signed in, protects private studio access, and normally expires within seven days. A short-lived signed cache may reduce repeated account checks.
Authentication flow cookiesSupport email verification, recovery, and request-integrity checks. If you choose Google sign-in, temporary signed state and PKCE values bind Google’s callback to the browser that began the flow and expire after about 10 minutes. They are used only for the requested security flow.
Recipient PIN access proofWhen a gift has an optional PIN, a successful entry creates an HttpOnly, same-site proof for that gift. It lasts no more than 12 hours, ends no later than the gift’s expiration, and becomes invalid when the sender changes recipient access.
Temporary guest gift in local storageBefore account creation, keeps one account-free preview—including its words, design settings, and up to four compressed preview photos—only in that browser. It expires after 24 hours without use and is cleared after a successful move into the private studio. It is not a hosted draft or backup.
Editor layout in local storageRemembers the editing-panel position and size on that browser. Authenticated gift content and full-resolution uploaded media are stored in the protected service, not in this preference.
Measurement choice in local storage (optional)Remembers “allow” or “off,” the notice version, and the time of your choice until you change it or clear browser storage.
Random measurement visitor ID in local storage (optional)Created only after “allow.” It lets us count a short list of gift-making milestones without storing your gift copy or media. It remains until measurement is switched off or browser storage is cleared.
First-party milestone records (optional)When allowed, our server can receive events such as design chosen, creation started, account gate reached, guest preview kept, checkout opened, published, sharing link copied, or recipient journey completed. Records may include a template or private internal draft ID, consent version, and timestamps, and are retained for up to 13 months.
Ideas-board invitation preferenceRemembers when an invitation was shown, a 30-day snooze, or a permanent “do not show” choice. Signed-in users can also save the disabled or snoozed choice to their account so it follows them between devices. It does not contain gift wording or media.
Lemon Squeezy checkout storageLemon Squeezy may place its own cookies or similar storage under its notices only after you choose to open the official checkout. Page & Ribbon does not load Lemon.js merely because you visit the checkout-review page.