Last updated: 13 November 2026 · Policy version 1.0
This Cookie Policy explains how SMARTMERCH ("SMARTMERCH", "we", "us") uses cookies and similar technologies on smartmerch.ai (including the demo at demo.smartmerch.ai) (the "Site"), what data they collect, and how you can control them.
Cookies are small text files stored on your device when you visit a website. Similar technologies, such as local storage and pixels, work in a comparable way. In this policy we call all of them "cookies".
When you first visit the Site, a banner lets you Accept all, Reject all or choose categories. Rejecting is as easy as accepting.
| Category | Default | What it covers |
|---|---|---|
| Necessary | Always on | Running and securing the Site, and remembering your cookie choice, plus the language and currency preference on the demo |
| Analytics | Off until you opt in | Our own first-party analytics and Google Analytics 4 |
| Marketing | Off until you opt in | Reserved. We do not use any marketing or advertising cookies or pixels today. If we add any, we will update this policy and ask for your consent again. |
These are needed for the Site to work and cannot be switched off.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| sm_cookie_consent | SMARTMERCH (first-party) | Stores your cookie choice (necessary / analytics), the date you made it and a random consent ID, so we don’t ask again on every visit and can prove your choice. It doesn’t track you and contains no personal details. | 6 months |
| Platform cookies | Cargo (our website host) | Deliver pages, balance load and protect the Site | Session, or as set by the platform |
| Language/currency preference | SMARTMERCH (demo.smartmerch.ai) | Remembers the language and currency you choose on the demo, and keeps a matching server-side record tied to a hashed IP address (never the raw IP), so the demo shows in your chosen settings. It is used for nothing else and is not used for analytics. | 12 months |
None of the following runs, and no analytics cookie is set, unless you opt in to Analytics.
We run our own analytics. The data is stored in our own database, on infrastructure we control, hosted with our cloud providers (Cloudflare and/or Amazon Web Services).
| Cookie | Purpose | Duration |
|---|---|---|
sm_vid |
A random identifier (UUID) that recognises your browser across visits. It contains no personal details. | 13 months |
With your consent we collect: - Visit activity: sessions, pages viewed, time on page, scroll depth, and clicks on buttons, calls to action and outbound links. - Source: referring website and campaign (UTM) parameters. - Device: device type, browser, operating system, screen size and language. - Approximate location: country and city, derived from your IP address when the request arrives. We never store your raw IP address. We keep only a one-way hashed version, used for security, fraud prevention and de-duplication.
Linking to your identity. If you later give us your email address, for example by submitting a contact form or signing up for the SMARTMERCH demo, we may link your visitor ID to that email. Your earlier and later activity on the Site then becomes associated with you, so we can understand your interest and follow up on your request. We do this only for visitors who consented to Analytics. If you did not consent, no visitor ID exists to link.
We also use Google Analytics 4 (measurement ID G-V079HRXK88), provided by Google LLC / Google Ireland Limited, to measure how the Site is used.
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Distinguishes unique visitors | 2 years |
_ga_<container-id> |
Keeps session state | 2 years |
We use Google Consent Mode v2, with analytics_storage, ad_storage, ad_user_data and ad_personalization all set to denied by default. They are granted only for the categories you accept, so ad-related signals stay denied while Marketing is unused. Google may process data outside your country, including in the United States. For more information, see how Google uses data from sites that use its services.
To show that we have your consent, as data protection law requires, we keep a record of each choice you make on the banner or in Cookie settings. Each record holds a consent ID, the date and time, the categories you accepted or rejected, the banner and policy version, a hashed IP address, your browser's user agent, and your country. We keep these records even if you reject cookies, because they document that choice too.
| Data | Retention |
|---|---|
| Your consent choice (sm_cookie_consent) | 6 months, after which we ask again. We also ask again if we materially change this policy. |
First-party visitor ID cookie (sm_vid) |
13 months |
| First-party analytics events | 13 months from collection, then deleted or fully anonymised |
| Google Analytics data | 14 months |
| Consent records | 5 years from the choice, as evidence of consent |
| Data linked to your email | As long as needed for the purpose you gave it for (for example your enquiry or demo access), then deleted or anonymised. Linked analytics events still follow the 13-month limit. |
| Demo language/currency preference (cookie and hashed-IP server record) | 12 months from your last visit |
You can change or withdraw your consent at any time by clicking "Cookie settings" in the footer of any page. If you withdraw Analytics consent, we stop collecting analytics data and delete the analytics cookies from your browser. Withdrawing does not affect processing that took place before. You can also block or delete cookies in your browser settings, though parts of the Site may then not work properly.
Questions about this policy: legal@spinfrequency.com.
We may update this policy. The version and date above show the current one. If a change affects what you consented to, we will ask for your consent again.