Legal

Cookie Policy

Effective 19 July 2026. This policy explains which cookies CUE/IO uses and how you control optional categories.

Who operates this website

This website and the CUE/IO store are operated by SIA Stared. For privacy questions, contact info@cueio.app.

What a cookie is

A cookie is a small text record stored by your browser. This policy also describes local and session storage, which can remember a choice or a random identifier without sending it with every web request.

Cookies and browser storage currently used

NamePurposeCategoryDuration
showcore_cookie_consentStores your cookie choices.Essential1 year
showcore-language local storageRemembers the language selected on the product website.Essential preferenceUntil removed in the browser
showcore_store_localeRemembers the store language.Essential1 year
showcore_public_csrfProtects store forms and account actions against forged requests.EssentialUp to 2 hours
Store session and security cookiesMaintain sign-in, checkout and abuse-prevention state when those functions are used.EssentialSession or the security period shown by the browser
showcore_analytics_visitor local storageRandom first-party identifier used to understand repeat visits after analytics consent.AnalyticsUp to 13 months
showcore_analytics_session session storageRandom first-party identifier that groups events in the current tab session.AnalyticsCurrent tab session

Essential cookies cannot be disabled through our settings because the requested language, account or checkout function would not work reliably without them.

Optional categories

Analytics: our first-party analytics is active only after you allow this category. It measures page views, named section views, purchase-button clicks, scroll and engagement totals, selected language, a coarse viewport width, browser language, a country code when a trusted server layer provides it, allowlisted campaign labels, referrer origin, web performance and non-identifying error fingerprints. It does not retain a finer location. The public browser collector does not read form fields or send account, order, licence or payment values.

Analytics requests contain a sanitised page path without query parameters or fragments. Dynamic identifiers, token-like path segments and email-like path values are replaced before storage. Campaign input is limited to utm_source, utm_medium and utm_campaign; advertising click IDs, utm_term and utm_content are not collected. Only the referring domain is retained; its path, query string and fragment are discarded. The server minimises normal network metadata before analytics storage and does not retain the raw IP address or full user-agent in the analytics database.

Raw browser events, pseudonymous sessions and their visitor link are retained for up to 30 days. Daily aggregate statistics and server-side conversion and attribution records are retained for up to 400 days. Those server records may contain an internal order identifier, amount, currency and allowlisted campaign attribution, but not customer form contents or full card data. Daily HMAC abuse-prevention buckets are retained for up to 2 days. The random visitor identifier is retained in your browser for up to 13 months, and the session identifier lasts for the current tab session.

Analytics remains disabled when the browser sends Global Privacy Control or Do Not Track, even if an earlier analytics choice exists.

Marketing: may be used in the future for advertising or cross-site measurement. No marketing service is currently active.

Optional scripts are blocked until the corresponding category is allowed. A future marketing or third-party analytics service will not be enabled silently; this policy and the consent version will be updated first.

Change or withdraw consent

Use the button below at any time. Rejecting optional cookies does not affect essential website or store functions.

Browser controls and updates

You can also delete cookies in your browser. Deleting the consent cookie makes the choice panel appear again. We update this policy when cookie purposes, providers or retention periods change.