Cookie Policy

Essential cookies (always on)

Strictly necessary to run the site, so they need no consent and can't be turned off: an anonymous session id, your region choice, your cart, admin sign-in where applicable, and the record of your cookie choice itself.

Named: atelier_sid (session, ~1 year), atelier_region (region), atelier_cart (cart, in your browser's local storage), atelier_consent (your choice — ~1 year if you allow anything, ~1 day after a full reject so we ask again before long).

Analytics cookies (off by default)

Aggregated, first-party measurement of what's useful on the site — no cross-site profiling and no personal data sent to us in identifiable form. No analytics cookie is set, and no measurement is recorded, until you grant "Analytics".

We use Google Analytics 4 (provided by Google Ireland Ltd as our processor). It sets the cookies _ga and _ga_<id> (about 2 years) and measures page views (path and title only) so we can see which references are read. IP addresses are anonymised and we send no email, name, quiz answers, score, or skin or health data. Some data may be processed in the United States under Google's EU–US Data Privacy Framework certification and Standard Contractual Clauses.

To be precise about when this loads: the Google tag file is fetched from Google on page view, before you make a choice, because Google Consent Mode has to be in place to hold everything denied. In that state it sets no cookies and records no analytics — but Google does receive your IP address and browser type at that moment. The _ga cookies and the actual measurement begin only once you grant "Analytics", and stop if you withdraw it.

Advertising cookies (off by default)

This group loads the Meta Pixel (Meta Platforms Ireland Ltd) — used to measure the performance of any advertising we run and to build advertising and retargeting audiences. It sets Meta cookies such as _fbp. It also covers affiliate / commission links, always disclosed on the page. Unlike the Google tag described above, the Meta Pixel is not loaded at all — not even in a denied state — until you grant "Advertising": nothing is requested from Meta before that.

The Meta Pixel sends a page-view signal and, when you submit a quiz, a content-free "lead" signal — it never receives your email, name, quiz answers, score, or any skin or health data, and automatic advanced matching is switched off. Data collected by the Meta Pixel goes to Meta as a controller under its own terms; see Meta's data policy at facebook.com/privacy/policy. The pixel loads only with your consent and stops if you withdraw it.

This group also loads the Google Ads remarketing tag (Google Ireland Ltd), which sets the cookie _gcl_au (about 90 days) to build advertising and retargeting audiences and, later, to measure ad performance. It receives only a page view (path and title) and a content-free "lead" signal — never your email, name, quiz answers, score, or any skin or health data. Some data may be processed in the United States under Google's EU–US Data Privacy Framework and Standard Contractual Clauses. It shares the single Google tag described under Analytics, so that file is fetched on page view under Consent Mode denial; the _gcl_au cookie, the audience building, and any measurement begin only once you grant "Advertising", and stop if you withdraw it.

Managing and withdrawing consent

Use "Accept all", "Reject non-essential", or "Manage choices" in the banner to set each group. Reject and accept are equally easy — nothing non-essential is pre-selected.

You can change or withdraw your choice at any time from "Cookie settings" in the footer, which reopens the same panel. Withdrawing is as easy as granting.