06Legal
Your analytics choice
Cookie Notice
Effective date: October 28, 2026
The short version
- We don't use advertising or tracking cookies. On our public pages, including the free test and the face shape tool, we use Google Analytics to count visits and see how long people stay. It never receives your photo, measurements or score. In the EU, the EEA, the UK and Switzerland it stays off until you choose Allow; elsewhere you can turn it off below at any time.
- We use your browser's session storage only to make the test and your report work. It is cleared when you close the tab.
- When you sign in, we set one sign-in cookie so you stay signed in to My reports. The free score never sets it.
- On pages that never handle your photo (home, sample report, How scoring works, our policies, sign-in and My reports), Google may show a one-tap sign-in prompt. Google Analytics may also run on the free test and the face shape tool. Google's code never loads on your report, the payment confirmation page, the page for adding a photo to your report or the password pages, whose addresses hold private keys.
- Our payment provider, Stripe, sets its own cookies on its checkout page.
What we use
| Name / type | What it does | How long it lasts |
|---|---|---|
| Session storage in your browser | Keeps your consent status, the step you're on, your gender answer, your measurements and free score, and the random keys that open your report, while you go through the steps. The positions of points on your face are kept only in the page's memory and never stored. | Cleared when you close the tab |
| Session storage while you pay | When you choose to buy a report, keeps a smaller copy of your photo and your measurements so they can be sent after payment. | Removed when they are sent, after 30 minutes, or when you close the tab, whichever comes first |
| Sign-in cookie (session token) | Keeps you signed in after you sign in to buy a report or open My reports. It holds a random key, not your email or any face data. | 7 days after your last visit, or until you sign out |
| Short-lived sign-in cookie, only with Google sign-in | Protects the trip to Google and back against forgery. | Removed when you return from Google, at most 10 minutes |
| Google cookies and code (accounts.google.com) | If you choose to sign in with Google, and, on pages that never handle your photo, to show Google's one-tap prompt. Google's privacy policy covers them. | Set by Google |
Google Analytics cookies (_ga, _ga_<ID>), only on our public pages (not your report, payment confirmation or add-photo pages) |
Tell visits apart with a random ID, so we can count visitors, pages per visit and time on our pages. Only if you allow it where the law requires consent; never if you choose Decline or your browser sends Global Privacy Control. Google signals and ad personalization are off. | Up to 2 years, or until you choose Decline (which deletes them) |
Your analytics choice (analytics_consent) |
Remembers whether you chose Allow or Decline. | 1 year |
| Stripe cookies (on checkout.stripe.com) | Stripe sets these on its own checkout page, for payment security and fraud prevention. Stripe's privacy policy covers them. | Set by Stripe |
Session storage, the sign-in cookie and the cookie that remembers your analytics choice are strictly necessary to provide the test, report and account you ask for and to respect your choice, so we don't ask for consent to use them. Google Analytics cookies are not necessary, so where the law requires it we ask first.
How we count visits
- Visit counts. Our server counts visits to our public pages as daily totals: the page, the website or campaign that sent you, your country and your device type. This happens on our server when the page is requested. It uses no cookies, runs no code in your browser, and stores no IP address or identifier.
- Google Analytics. On our public pages, and only as described above, Google Analytics also measures how many people visit, how many pages they open and how long they stay. We send it no events about your test, and nothing about your photo, measurements or score. It never runs on your report, the payment confirmation page, the page for adding a photo to your report or the password pages, whose addresses hold private keys.
- Step and score counts. Your browser tells our server when certain steps happen, such as reaching a free result or creating a share card, and sends the scoring version and score of each free result. These messages carry no cookie or identifier, and we keep only daily totals. When you start the test from one of our public pages, the link carries a general source label (such as "reddit" or "share") so we can see which sources lead to results. The label is the same for everyone from that source and doesn't identify you.
Your choices
Use Allow or Decline at the top of this page to turn Google Analytics on or off for this browser at any time; Decline also deletes its cookies. You can also clear or block cookies and storage in your browser settings. If you block session storage, the test and payment steps may not work. If you block cookies, you can't sign in, so you can't buy a report. To remove your photo from your browser at any time, use Remove my photo from this device on the result page, or close the tab.
Changes
If we add any other cookies or analytics, we will update this notice first. Where the law requires it, we will ask for your consent before turning them on.
Questions? Email support@attractivenesscheck.com.