← Back to AppIt Studio

Cookie Policy

Last updated: August 10, 2026

Effective date: August 18, 2026

How choices work

Strictly necessary storage supports security, sessions, checkout requests, and remembering your privacy choice. Optional storage is grouped by purpose and follows the regional, consent, and Global Privacy Control rules described in our Privacy Policy.

Analytics

DataFast measures page visits, traffic sources, returning-visitor journeys, and the approved newsletter_subscribed goal. In strict opt-in regions it remains off until Analytics is allowed. It is enabled by default in known non-strict regions and in the unknown-region fallback, but you can reject or withdraw Analytics at any time. Its visitor, first-seen, and visit-count cookies last up to 365 days and its session cookie lasts 30 minutes. Rejection or withdrawal stops DataFast and clears these cookies.

Google Tag Manager may load approved Google Analytics or other measurement tags only after an explicit Analytics choice; it does not inherit DataFast's regional default.

Attribution

LnkFlow may store visitor, first-click, and last-click identifiers for up to 90 days when Attribution is allowed, including under the known non-strict regional default. It remains memory-only in strict and unknown regions before consent. It can provide an opaque last-click reference to the server-created Teams Stripe Checkout Session. Automatic decoration of shared bundle Payment Links remains disabled.

Experience

Hotjar may use first-party storage for heatmaps and session replay when Experience is allowed. Newsletter fields, checkout returns, account pages, and administration pages are suppressed or excluded.

Accessibility

UserWay supplies the website accessibility widget as necessary accessibility functionality. It is not activated by an Analytics, Attribution, Experience, or Advertising choice.

Change or withdraw your choice

Select “Privacy Choices” in any page footer. Withdrawing a purpose stops new activity, clears covered first-party storage where configured, and reloads the page when necessary to stop an already-active vendor. Global Privacy Control disables DataFast, LnkFlow persistence, Google Tag Manager/Google Analytics, and Hotjar without showing the banner.