Back to home

Cookie policy

Last updated: July 2026

This Cookie Policy explains how Spinnify 360° Studio (“we”, “us”) uses cookies and similar technologies (local storage, pixels, and scripts) on spinnify.io and related services. It should be read together with our Privacy Policy. Where the EU ePrivacy rules and the GDPR apply, we place non-essential cookies (including analytics) only after you give consent via our cookie banner. You can change or withdraw that consent at any time.

What cookies and similar technologies are

Cookies are small text files stored on your device by a website. Similar technologies include local storage, session storage, and scripts that read or write identifiers. They can keep you signed in, remember language or UI preferences, protect against abuse, and — only with consent — help us measure how the website is used.

Controller

The controller responsible for cookies and similar technologies on this website is: PRO AGENCY EUROPE SRL Reg. No.: 50684851 · VAT: RO50684851 Str. Academiei 35-37, sc. A, et. 3, ap. 16, Bucharest, 030167, Romania Operating Spinnify 360° Studio For privacy requests, use the Contact page or the email published there.

Categories and legal bases

We group cookies and similar storage as follows: 1) Strictly necessary — required to provide the service you request (sign-in, security, billing context, remembering your cookie choice, basic widget UI). Legal basis: Art. 6(1)(b) GDPR (contract / requested service) and/or Art. 6(1)(f) GDPR (legitimate interest in secure, functional service). These do not require consent under the ePrivacy exemption for strictly necessary storage. 2) Preferences / functional — optional features that improve convenience (for example on-page translation). Legal basis: consent (Art. 6(1)(a) GDPR) where the technology is not strictly necessary. 3) Analytics — aggregated usage measurement (Google Analytics 4, Yandex Metrika, Vercel Analytics). Legal basis: consent (Art. 6(1)(a) GDPR). These load only after you accept analytics in the banner or settings. We do not use third-party advertising or ad-personalization cookies on the core product. Google Consent Mode keeps ad_storage, ad_user_data, and ad_personalization denied.

Strictly necessary cookies and storage

The following strictly necessary cookies and similar storage are used to operate the service you request:
NameProviderPurposeDurationType
sb-* (Supabase Auth, including chunked tokens)Spinnify 360° Studio / Supabase (first-party)Authenticate the user and maintain a secure dashboard sessionSession / up to the Supabase auth token lifetimeHTTP cookie
NEXT_LOCALESpinnify 360° Studio (first-party)Remember the selected interface language (EN/RU)About 1 yearHTTP cookie
spinnify_cookie_consentSpinnify 360° Studio (first-party)Store your cookie consent choice and version so we do not re-prompt unnecessarilyUntil cleared by you or until the consent version changeslocalStorage
spinnify_billing_channelSpinnify 360° Studio (first-party)Remember Shopify billing context for the correct checkout/portal flowSession or until cleared on disconnectHTTP cookie
spinnify_shop_domainSpinnify 360° Studio (first-party)Remember the connected Shopify shop domain in billing/integration contextSession or until cleared on disconnectHTTP cookie
spinnify_dashboard_embed_openSpinnify 360° Studio (first-party)Remember whether the dashboard embed panel is openAbout 1 yearHTTP cookie
spinnify:shopify-sourceSpinnify 360° Studio (first-party)Temporary Shopify OAuth / source context during connect or loginUp to about 2 hourslocalStorage
spinnify:shopify-login-shopSpinnify 360° Studio (first-party)Remember the shop domain for Continue with Shopify on return visitsUp to about 1 yearlocalStorage
spinnify_widget_collapsed:*Spinnify 360° Studio widget (on the merchant site where the widget is embedded)Remember whether the floating widget UI is collapsed for that API keyUntil cleared by the end user or site storage policieslocalStorage
Hosting, CDN, and security infrastructure (for example Vercel / Cloudflare) may also set strictly necessary technical cookies for delivery, load balancing, or abuse protection. Those are limited to operating the service.

Preference and analytics cookies (consent where required)

The technologies below require consent where they are not strictly necessary. Analytics tags load only after you opt in.
Preference / functional
NameProviderPurposeDurationType
googtransGoogle Translate (when you use on-page translation)Remember the selected translation languageUntil changed or deletedHTTP cookie
Analytics (loaded only after you opt in)
NameProviderPurposeDurationType
_ga, _ga_* (and related GA identifiers)Google Ireland Limited / Google LLC (GA4 G-02RJF69C1L)Aggregated traffic and usage statistics for the marketing site and product improvementUp to 2 years (see Google documentation)HTTP cookie / similar
_ym_uid, _ym_d, _ym_isad (and related Metrika cookies)Yandex (counter 109926121)Aggregated usage statistics; may include webvisor/session replay, click map, and link tracking when enabledUp to about 1 year depending on the cookieHTTP cookie / similar
Vercel Analytics identifiersVercelPrivacy-oriented aggregated performance and traffic insights for our deploymentAs described in Vercel Analytics documentationCookie or similar (Vercel)
Product analytics inside the signed-in dashboard (for example view counts for your 360° items) is part of the service you use after login and is not the same as the marketing analytics tags listed above.

Third-party services and transfers

Stripe — when you start checkout or open the billing portal, Stripe may set cookies or similar identifiers for payment security, fraud prevention, and compliance. Stripe acts as an independent controller or processor according to its own terms. See Stripe’s privacy and cookie notices. Analytics providers (Google, Yandex, Vercel) process data only after consent. Data may be transferred outside the European Economic Area. Where required, transfers rely on appropriate safeguards (for example Standard Contractual Clauses) as described by each provider. We do not sell personal data and do not use third-party advertising cookies on the core product. If we add marketing tags later, we will update this policy and request consent where required.

How to manage cookies and updates

On marketing pages we show a cookie banner where you can Accept all, Reject non-essential, or Customize analytics. You can reopen preferences anytime via “Cookie settings” in the website footer. Rejecting analytics does not block strictly necessary cookies needed for sign-in, security, and core features. You can also delete or block cookies in your browser settings; blocking necessary cookies may break parts of the service. Withdrawing consent does not affect the lawfulness of processing before withdrawal. After you reject or turn off analytics, we stop loading those tags for future visits according to your stored choice. We may update this Cookie Policy when our practices or the law change. The “Last updated” date will change accordingly. For material changes that affect consent, we may ask for a new choice (for example by bumping the stored consent version). Questions: contact Spinnify 360° Studio via the Contact page.