Cookie Policy

Cupidsgram uses a small number of cookies and local storage — the minimum to run the service, plus product analytics and advertising measurement. We never sell your data.

• ig_session_<slug> — session cookie (login). Essential.
• sufig_media — short-lived (15-minute) cookie that authorizes photo delivery from our image edge. Essential — photos will not load without it.
• sufig_admin — operator session cookie. Essential for admin use only.
• localStorage — a dismissed-banner flag and onboarding draft. Stored on your device only.
• _fbp and _fbc — set by the Meta Pixel (and by us, when you arrive from a Facebook or Instagram ad) so Meta can tell which ad brought you here. If you buy, we send Meta the purchase amount and those two values, plus a hashed form of your email. Not essential: the site works without them.

Advertising measurement (Meta) — our pages load the Meta Pixel, which sets the _fbp and _fbc cookies and reports page views, product views and checkout starts to Meta. When a payment succeeds we send Meta a server-side purchase event: the amount, the two cookies, your IP address, your browser's user-agent and a SHA-256 hash of your email — never your name, password or content. When your page goes live we also send Meta a server-side signup event with the same values and no payment amount. We store those same values against your payment record for 90 days, then delete them; the payment record itself is kept.

Product analytics (PostHog) — public visitors are counted anonymously (no profile is created for you). If you start onboarding, your events are linked to the email you provide so we can see where the gift flow works and where it fails. Analytics run through our own domain (/ph) rather than a third-party tracker domain. Recordings of onboarding sessions mask everything you type.

Essential cookies are strictly necessary to deliver the service you requested, so they are set without a consent gate. Analytics and advertising measurement are first-party-routed and free of cross-site profiling beyond ad attribution; you can opt out by blocking /ph and facebook.com in your browser's tracking protection — the site will function normally. You can also clear cookies and site data from your browser at any time; doing so will sign you out and images may not load until you log back in.

Analytics went live in August 2026 and advertising measurement in September 2026; this page was updated then to describe them. If we ever change what we collect, we will update this page first.