Cookie Policy
Last updated: October 22, 2026
1. What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They allow us to remember your preferences, recognize you, and measure site usage. Most browsers allow you to control cookies through settings.
2. Cookie Categories
We use cookies in three categories. Essential cookies are always enabled. On your first visit, we ask you to opt-in to Analytics and opt-out of Marketing. You can change these preferences at any time.
3. Essential (Strictly Necessary) Cookies
Always enabled. No consent required. These cookies are essential for the website to function. Without them, you cannot log in, make purchases, or use core features.
| Cookie Name | Purpose | Duration |
|---|---|---|
| session_id | Keeps you logged in | Session / 30 days |
| csrf_token | Prevents cross-site attacks | Session |
| cookie_preferences | Remembers your cookie choices | 1 year |
| NEXT_LOCALE | Remembers the language you picked | 1 year |
| payment_nonce | Secures payment transactions | Session |
4. Analytics Cookies
Default: Enabled. You can disable. We use two industry-standard analytics services — Google Analytics 4 and Microsoft Clarity — to understand how people use our site: page views, button clicks, error rates, and (Clarity) heatmaps and session replays with personal content masked. Both run for every visitor; this setting decides whether they may store the cookies below on your device. We never use this data to identify you or for advertising.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes unique users | 2 years |
| _ga_* | Google Analytics 4 | Session / campaign attribution | 2 years |
| CLID | Microsoft Clarity | Identifies first-time visitors | 1 year |
| _clck / _clsk | Microsoft Clarity | Session replay + heatmap routing | 1 year |
Privacy-first configuration: With Analytics off — or before you make a choice — both services run in cookieless mode: no analytics cookie is stored on your device, and each page view is counted on its own, without an identifier that links your pages or visits together. Google Analytics 4 does not log or store IP addresses, and we strip one-time tokens from page addresses before they are sent. Clarity masks form inputs, email addresses, your photos and videos, and is never started on pages whose link contains a security token (such as password reset). Advertising signals are always off, and we do not allow either provider to use our analytics data for advertising or to share it across other customers' properties.
5. Marketing Cookies
Default: Disabled. Requires explicit opt-in. We do not currently load any marketing or retargeting cookies on Prismojo. This category is disclosed for transparency and to give you a one-click way to keep it off if we add tools like Meta Pixel, Google Ads or TikTok Pixel in the future. Until you opt in, no marketing cookie is set on your device and we do not track you across other websites.
6. How to Manage Cookies
6.1 In Our Cookie Banner
On first visit, a banner appears offering you to customize cookie preferences. You can:
- Accept All: Enable analytics + (future) marketing
- Reject non-essential: Disable analytics and marketing, keep only strictly necessary
- Save choices: Fine-tune each category individually before saving
6.2 Browser Controls
You can manage cookies in your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Safari: Preferences → Privacy → Manage Website Data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Edge: Settings → Privacy → Clear browsing data → Cookies
6.3 Opt-Out of Analytics
Turning off analytics cookies in the banner stops both services from storing cookies; anonymous, cookieless measurement continues as described in section 4. To block Google Analytics entirely, install the Google Analytics Opt-out Browser Add-on (works across all sites that use Google Analytics) or use your browser's "Do Not Track" setting (though this is not guaranteed to be honored by all websites).
7. Third-Party Services
We use the following third-party services. Each has its own cookie policy:
| Service | Purpose | Cookie Type |
|---|---|---|
| Google OAuth | Sign-in option | Essential |
| Waffo Pancake | Payment processing | Essential |
| Google Analytics 4 | Website analytics (page views, events) | Analytics (cookieless unless allowed) |
| Microsoft Clarity | Heatmaps and masked session replay | Analytics (cookieless unless allowed) |
GDPR & ePrivacy Compliance
We comply with EU ePrivacy Directive 2002/58/EC and GDPR. Analytics and marketing cookies require explicit prior consent. You can withdraw consent at any time using the Cookie Settings button in the footer.
For questions: Contact us