Cookie policy
Last updated: July 2026
This Cookie Policy explains how Spinnify 360° Studio (“we”, “us”) uses cookies and similar technologies (local storage, pixels, and scripts) on spinnify.io and related services. It should be read together with our Privacy Policy.
Where the EU ePrivacy rules and the GDPR apply, we place non-essential cookies (including analytics) only after you give consent via our cookie banner. You can change or withdraw that consent at any time.
What cookies and similar technologies are
Cookies are small text files stored on your device by a website. Similar technologies include local storage, session storage, and scripts that read or write identifiers.
They can keep you signed in, remember language or UI preferences, protect against abuse, and — only with consent — help us measure how the website is used.
Controller
The controller responsible for cookies and similar technologies on this website is:
PRO AGENCY EUROPE SRL
Reg. No.: 50684851 · VAT: RO50684851
Str. Academiei 35-37, sc. A, et. 3, ap. 16, Bucharest, 030167, Romania
Operating Spinnify 360° Studio
For privacy requests, use the Contact page or the email published there.
Categories and legal bases
We group cookies and similar storage as follows:
1) Strictly necessary — required to provide the service you request (sign-in, security, billing context, remembering your cookie choice, basic widget UI). Legal basis: Art. 6(1)(b) GDPR (contract / requested service) and/or Art. 6(1)(f) GDPR (legitimate interest in secure, functional service). These do not require consent under the ePrivacy exemption for strictly necessary storage.
2) Preferences / functional — optional features that improve convenience (for example on-page translation). Legal basis: consent (Art. 6(1)(a) GDPR) where the technology is not strictly necessary.
3) Analytics — aggregated usage measurement (Google Analytics 4, Yandex Metrika, Vercel Analytics). Legal basis: consent (Art. 6(1)(a) GDPR). These load only after you accept analytics in the banner or settings.
We do not use third-party advertising or ad-personalization cookies on the core product. Google Consent Mode keeps ad_storage, ad_user_data, and ad_personalization denied.
Strictly necessary cookies and storage
The following strictly necessary cookies and similar storage are used to operate the service you request:
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| sb-* (Supabase Auth, including chunked tokens) | Spinnify 360° Studio / Supabase (first-party) | Authenticate the user and maintain a secure dashboard session | Session / up to the Supabase auth token lifetime | HTTP cookie |
| NEXT_LOCALE | Spinnify 360° Studio (first-party) | Remember the selected interface language (EN/RU) | About 1 year | HTTP cookie |
| spinnify_cookie_consent | Spinnify 360° Studio (first-party) | Store your cookie consent choice and version so we do not re-prompt unnecessarily | Until cleared by you or until the consent version changes | localStorage |
| spinnify_billing_channel | Spinnify 360° Studio (first-party) | Remember Shopify billing context for the correct checkout/portal flow | Session or until cleared on disconnect | HTTP cookie |
| spinnify_shop_domain | Spinnify 360° Studio (first-party) | Remember the connected Shopify shop domain in billing/integration context | Session or until cleared on disconnect | HTTP cookie |
| spinnify_dashboard_embed_open | Spinnify 360° Studio (first-party) | Remember whether the dashboard embed panel is open | About 1 year | HTTP cookie |
| spinnify:shopify-source | Spinnify 360° Studio (first-party) | Temporary Shopify OAuth / source context during connect or login | Up to about 2 hours | localStorage |
| spinnify:shopify-login-shop | Spinnify 360° Studio (first-party) | Remember the shop domain for Continue with Shopify on return visits | Up to about 1 year | localStorage |
| spinnify_widget_collapsed:* | Spinnify 360° Studio widget (on the merchant site where the widget is embedded) | Remember whether the floating widget UI is collapsed for that API key | Until cleared by the end user or site storage policies | localStorage |
Hosting, CDN, and security infrastructure (for example Vercel / Cloudflare) may also set strictly necessary technical cookies for delivery, load balancing, or abuse protection. Those are limited to operating the service.
Preference and analytics cookies (consent where required)
The technologies below require consent where they are not strictly necessary. Analytics tags load only after you opt in.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| googtrans | Google Translate (when you use on-page translation) | Remember the selected translation language | Until changed or deleted | HTTP cookie |
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| _ga, _ga_* (and related GA identifiers) | Google Ireland Limited / Google LLC (GA4 G-02RJF69C1L) | Aggregated traffic and usage statistics for the marketing site and product improvement | Up to 2 years (see Google documentation) | HTTP cookie / similar |
| _ym_uid, _ym_d, _ym_isad (and related Metrika cookies) | Yandex (counter 109926121) | Aggregated usage statistics; may include webvisor/session replay, click map, and link tracking when enabled | Up to about 1 year depending on the cookie | HTTP cookie / similar |
| Vercel Analytics identifiers | Vercel | Privacy-oriented aggregated performance and traffic insights for our deployment | As described in Vercel Analytics documentation | Cookie or similar (Vercel) |
Product analytics inside the signed-in dashboard (for example view counts for your 360° items) is part of the service you use after login and is not the same as the marketing analytics tags listed above.
Third-party services and transfers
Stripe — when you start checkout or open the billing portal, Stripe may set cookies or similar identifiers for payment security, fraud prevention, and compliance. Stripe acts as an independent controller or processor according to its own terms. See Stripe’s privacy and cookie notices.
Analytics providers (Google, Yandex, Vercel) process data only after consent. Data may be transferred outside the European Economic Area. Where required, transfers rely on appropriate safeguards (for example Standard Contractual Clauses) as described by each provider.
We do not sell personal data and do not use third-party advertising cookies on the core product. If we add marketing tags later, we will update this policy and request consent where required.
How to manage cookies and updates
On marketing pages we show a cookie banner where you can Accept all, Reject non-essential, or Customize analytics. You can reopen preferences anytime via “Cookie settings” in the website footer.
Rejecting analytics does not block strictly necessary cookies needed for sign-in, security, and core features. You can also delete or block cookies in your browser settings; blocking necessary cookies may break parts of the service.
Withdrawing consent does not affect the lawfulness of processing before withdrawal. After you reject or turn off analytics, we stop loading those tags for future visits according to your stored choice.
We may update this Cookie Policy when our practices or the law change. The “Last updated” date will change accordingly. For material changes that affect consent, we may ask for a new choice (for example by bumping the stored consent version).
Questions: contact Spinnify 360° Studio via the Contact page.