Cookie Policy

Cookies are small text files a website stores in your browser. They let a site remember things between page loads and visits, like keeping you signed in. Some sites also use related technologies such as local storage and pixels, which we cover here under the word “cookies.”

One of the things we describe here is not a cookie at all. We also collect a device signature, which is a set of properties your browser already reveals to every site you visit. It does the same job a cookie does, so it belongs in this policy. See Site monitoring.

This policy explains which cookies Printuple sets, why, and how you can change your choice. It sits alongside our Privacy Policy, which describes how we handle personal information more broadly.

We use a small number of cookies. They fall into four categories:

• Strictly necessary. Needed for the site and app to work. These sign you in, keep your session secure, remember your cookie choice, and let our own staff open the site while it is down for maintenance. The site cannot function properly without them, so they do not require consent. The visitor cookie described under Site monitoring is not in this category, even though we set it before you answer the banner.
• Preferences.Remember choices you make, such as your light or dark theme. We store this in your browser’s local storage rather than sending it to a server.
• Site monitoring. A first-party visitor cookie named pt_vid, plus the device signature. Together they let us recognise a returning visitor and follow how people move through our sites and through shops that run on Printuple. We use this to find pages that break or confuse people, to keep our visitor numbers honest, and to detect and block abuse. This runs whichever button you pick on the banner, including Essential only. It is not strictly necessary and the site works without it. Where the GDPR applies we rely on our legitimate interests, and you can object at any time by emailing us. See Site monitoring for exactly what it records.
• Analytics and session recording (only with your consent). Google Analytics, plus session replay and heatmaps in our own monitoring. These start only after you select Accept all, and never before. If you choose Essential only, no Google cookies are set, nothing is sent to Google, no session of yours is recorded, and nothing of yours goes into a heatmap.

We do notuse advertising cookies, we do not sell what we collect, and none of it feeds an ad network or a data broker. We do recognise the same device across Printuple’s own sites and across the shops that run on Printuple, and we do that with a first-party cookie and the device signature rather than third-party tracking cookies. It does not follow you to sites that have nothing to do with us.

The specific items we store in your browser today are:

• Session cookie. A secure, host-only cookie that keeps you signed in to your account. Strictly necessary. Expires when your session ends.
• Visitor cookie. A first-party cookie named pt_vidholding a random id. It is how we tell a returning visitor from a new one. Your browser cannot read it, and on its own it is a meaningless number that grants access to nothing. On Printuple’s own sites it is set for the whole domain, so a visit to printuple.com and a visit to app.printuple.comcount as one person rather than two. On a shop’s own domain it is set for that domain only. It lasts two years. We set it on your first page load, before you answer the banner, and choosing Essential only does not remove it.
• Cookie choice. A first-party cookie named pt_cookie_consent that records whether you accepted all cookies or essential only, so we do not ask again on every page. Lasts up to one year.
• Theme preference. A value in local storage that remembers your light or dark theme. Stays until you clear your browser storage.
• Maintenance preview. A host-only cookie named __Host-printuple.maint, set only for Printuple staff. When we take the site down for maintenance, this is what lets one of our team open the real site behind the maintenance notice to check the work before we let everyone back in. Strictly necessary. Your browser cannot read it, it works on the one site address it was issued for, it holds no personal information, and it tracks nothing. It lasts at most eight hours and usually one, and it disappears when it expires. If you are not on our staff you will never be given one.
• Analytics, only if you accept. Google Analytics sets two first-party cookies, _ga and _ga_FJ3MTM5RLS. They hold a randomly generated number that lets us tell a returning visitor from a new one and see which pages get used. They do not hold your name or your email address. They last up to two years, and we set them only after you select Accept all.

The device signature is not stored in your browser, so it is not in that list. It is read once per visit and sent to us. See Site monitoring.

If you use features that involve a third party, that provider may set its own cookies when you interact with it. For example, payments run through Stripe, and if you connect a sales channel or storefront checkout, those services apply their own cookie and privacy notices.

We run our own visitor monitoring. It works in two tiers, split by the choice you make on the banner, and this section spells out both.

Recorded on every visit, including Essential only.

• the pages you view, in order, with how long you spend on each, how far down you scrolled, how many times you clicked, clicks that look like frustration (three in the same spot within half a second), and any errors the page threw;
• when you click a link that takes you off our site, when you download a file, and when you submit a form. We record that it happened and which page it happened on. We never record what you typed into the form;
• the page that sent you to us, and any campaign tags in the link you followed;
• your IP address, and the approximate country, region and city our host works out from it;
• your browser, operating system and device type, your screen and window size, and your language and time zone;
• the device signature described below;
• your Printuple account if you are signed in, or the shop account you are signed in to when you shop; and
• the random id in the pt_vid cookie.

Recorded only after Accept all, and only on our own sites.On printuple.com and the Printuple app — never on a shop — we may record the session itself: a replay of the pages as they rendered, including mouse movement, clicks, scrolling and changes on the page, which we can play back afterwards. We also add your clicks, movement and scroll depth to page heatmaps, which are counts per spot on a page and hold nothing about you individually. Our servers check your choice again when the data arrives and throw away replay and heatmap data from anyone who did not accept, so this does not depend on the page script behaving.

The device signature. Once per visit, a small script reads properties your browser already exposes: the user agent string, the platform, your languages, your time zone, your screen size and colour depth, the pixel ratio, the number of processor cores, the rough amount of memory, the number of touch points, a hash of a small test image your graphics hardware draws, your GPU name, which rendering engine the browser uses, and whether the browser reports itself as automated. Those values are sent to us once and immediately hashed with a secret key that only our servers hold. We keep the hash. The values themselves are discarded and never written down.

A hash cannot be turned back into the values that made it, but it is still a way to recognise you, so we treat it as personal information. It is what tells us that a visitor who cleared their cookies is the same person, and it is the only thing that can link a visit on printuple.comto a visit on a shop’s own domain, because no cookie can span two different domains. We use it to follow one journey rather than count it as several, and to make a block stick when someone abusive comes back with fresh cookies.

We leave out the noisiest signals on purpose. We do not list your installed fonts, we do not fingerprint your audio hardware, and we do not touch your camera, microphone, location permission or device list.

Where it runs.On printuple.com, on the Printuple app, and on storefronts that run on Printuple, including shops using their own domain name. If you are shopping at a store built on Printuple, this monitoring is running, whether or not that store’s own notice mentions it. It never runs on our internal staff console, and it skips the 3D model viewer, the page builder and shop-floor kiosk screens.

Shops are never recorded.On a storefront we count pages, location and device, and nothing more. We do not make a session replay, we do not build heatmaps, and no member of our staff can watch a shopper’s screen, live or afterwards. That holds whichever cookie choice you made, because you made it for the shop and not for us. Session replay and heatmaps happen only on printuple.com and the Printuple app, where our own banner asked you first.

Who can see it. Printuple staff who hold the internal permission for it. Shop owners cannot see this data, not even for visitors to their own store.

How long we keep it. Pages viewed and finished visits, 90 days. Session replays, 30 days. Heatmap totals, 180 days. Your raw IP address, 90 days, after which we remove the address itself and keep only its hash so an existing block keeps working.

Daily totals, 24 months. Once a night we count the previous day up into totals: how many visits, how many pages, which pages, which countries, which devices, and which links brought people to us. We keep those totals for 24 months so we can compare this month against last year.

One of those totals is per person rather than per visit, and we want to be plain about it. It holds the random id from your pt_vid cookie against each day you visited, because counting how many separate people came in a month is not something you can work out by adding up daily visit counts. It holds nothing else: no IP address, no device signature, no pages you read, no account. It outlives the 90 day window above, and it is removed after 24 months.

We use Google Analytics 4, measurement ID G-FJ3MTM5RLS, provided by Google LLC. It tells us which pages were viewed, which page sent you to us, your approximate country and city, and your browser and device type. We use it to see what people find useful and where the product needs work.

Google acts as our processor for this, and it stores the data on servers in the United States. We have turned off Google Signals and every advertising feature on our property, so none of this feeds advertising profiles and none of it is shared with Google for advertising. Event-level and user-level analytics data is kept no longer than 14 months, after which Google deletes it automatically. Aggregated reports that cannot identify you may be kept for longer.

No Google Analytics loads until you select Accept all. If you never accept, the Google Analytics script is never requested and no Google cookies are set. You can turn analytics off again at any time with Cookie preferences in the site footer, or in Settings then Account inside the app. Google also publishes a browser add-on that blocks Google Analytics on every site you visit, at tools.google.com/dlpage/gaoptout.

Google Analytics is not the whole picture. Our own site monitoring is separate, it is not a Google product, and its first tier runs whether or not you accept analytics. See Site monitoring.

When you first visit, we show a short banner. You can pick Accept all or Essential only, and both are equally easy to choose. Essential only turns off Google Analytics, session replay and heatmaps.

You can change your mind at any time. Select Cookie preferences in the site footer, or in Settings then Account inside the app, to reopen the banner and update your choice. If you turn analytics off after having accepted them, we stop sending anything to Google straight away, delete the _ga and _ga_FJ3MTM5RLS cookies from your browser, and stop recording your sessions and adding to heatmaps from your next page load.

Turning analytics off does not remove the pt_vid visitor cookie and does not switch off the first tier of Site monitoring. Clearing cookies for our site in your browser removes pt_vid until your next page load, but it does not delete what we already recorded, and the device signature can still recognise the same browser. If you want us to stop, or you want the records of your visits deleted, email us at hello@printuple.com and we will handle it as described in our Privacy Policy.

You can also control or delete cookies in your browser settings, though blocking strictly necessary cookies may stop you from signing in.

Some browsers can send a “Do Not Track” signal. There is no shared industry standard for how sites should respond, so we do not change our behavior based on it. Google Analytics stays off unless you accept it, with advertising features turned off, and you can switch it off again at any time with Cookie preferences. Our own site monitoring runs on Printuple’s sites and on the storefronts that run on Printuple, and that signal does not switch it off either. Email us if you want it stopped for you.

We may update this Cookie Policy as the product changes. The most recent change adds the staff maintenance preview cookie listed above. The change before it described our own site monitoring, including the pt_vid visitor cookie and the device signature, and corrected earlier wording that said we did not recognise you across sites. When we make a material change we update the date above and, where appropriate, ask for your choice again through the banner.

If you have questions about how we use cookies, email us at hello@printuple.com. Printuple is operated by Digitex LLC (DBA Printuple).