Cookie Notice

1. The Commstate app and sign-up

The app that businesses use to run Commstate sets no advertising or analytics cookies and loads no third-party tracking.

What it keeps in your browser:

• Your sign-in (browser storage, not a cookie): a sign-in token, which business you are working in, and your basic profile, so you stay signed in. Signing out removes them.
• Your display choices (browser storage): theme and light or dark mode.
• Social sign-in (cookie, about 10 minutes): when you sign in with Google, Facebook, Apple or Microsoft, a short-lived cookie ties the sign-in to your browser so nobody else can finish it. It is deleted when the sign-in completes or expires.
• Sign-up protection: the sign-up page uses Cloudflare Turnstile to tell people from automated sign-ups. Cloudflare's own notice explains what it reads: {{TURNSTILE_NOTICE_URL}}.

These are all strictly necessary for the app to work, which is why, under the EU and UK e-privacy rules and similar laws, they do not need your consent.

2. Shops on Commstate

A shop on Commstate is the business's own website, and the business decides what it uses; its own cookie or privacy policy, on the shop's pages, is what applies. What Commstate's shop software itself does:

Always, because the shop needs them:

• Your cart (cookie, 30 days; and browser storage): keeps what you put in your cart.
• Your shop account (browser storage): keeps you signed in to the shop if you sign in.
• Your choices (browser storage): your delivery pincode, your answer to the cookie banner (kept 6 months), and what you have already seen.

Only if you accept the shop's cookie banner (consent, as the EU and UK rules require):

• Visit session (cookie, 30 minutes): joins your page views into one visit so the shop can see how people use it. It holds a random code, not who you are.
• Advertising and analytics tags the shop has added, such as Google Analytics, Google Tag Manager or the Meta Pixel. If you later reject, they are removed and their cookies deleted.

If your browser sends "Do Not Track" or "Global Privacy Control", the shop does not count your visit at all.

Shop pages load their fonts from Google Fonts, which receives your IP address when your browser fetches them.

3. Your choices

You can delete cookies and site data in your browser's settings at any time; you will be signed out and your cart may be emptied. On a shop, you can change your answer to the cookie banner at any time from the "Cookie settings" link on its pages.