Cookie Policy

Introduction

This Cookie Policy explains how CataShot may use cookies, local storage, and similar browser technologies across public pages, account pages, checkout flows, and the six AI ecommerce visual workspaces. It should be read together with the Privacy Policy.

What Cookies Are

Cookies are small text files a website can store on your device. Local storage, session storage, pixels, and related technologies can also keep preferences, identifiers, or session-related data in a browser. Some data lasts only for the current session; other data remains until it expires or you remove it.

How CataShot Uses Browser Technologies

CataShot may use cookies and similar technologies for the following purposes:

• Essential operation: keeping you signed in, protecting sessions, routing requests, preserving checkout state, and enabling core account and generation features.
• Preferences: remembering language, light or dark theme, interface settings, and an explicit optional-services choice.
• Performance and reliability: understanding load behavior, task errors, and whether site or workspace features operate correctly.
• Analytics: optional analytics governed by CataShot's regional controls can help us understand how visitors move through public pages and use product features so we can improve the service.
• Security: detecting abuse, fraud, spam, suspicious sessions, and unauthorized access.
• Support: optional third-party support tools governed by the same regional controls can supplement essential contact and support channels.
• First-party affiliate attribution: when a landing URL contains a valid aff or aff_id, CataShot writes a first-party affiliate record and retains any existing valid record. This track is independent of region, optional-services consent, and GPC; it does not by itself load a third-party script or send data to a third party.
• Third-party referral integrations: optional third-party referral scripts and outbound conversion sharing follow the optional-service controls described below.

These technologies do not change what CataShot's tools generate. They may support the account and task flow used to request studio product photos, lifestyle scenes, product ad images, fixed five-second product videos, canvas expansion, or five-image sets.

Types of Cookies We May Use

Essential Cookies

Essential cookies and storage are used for login, authentication, request routing, checkout state, security, and basic service operation. The account, payment, or generation workflow may not work correctly if these technologies are blocked.

Preference Cookies

Preference technologies remember choices such as language, theme, and product interface settings. If you choose Allow all, Only essential, or the universal opt-out, CataShot stores the resulting preference in a first-party, server-readable cookie named optional_services_consent and mirrors it in local storage. The preference lasts for about 180 days and lets the initial server response respect a returning visitor's choice; it does not itself load an optional service. A visitor outside the gated region who has not made a choice does not receive a synthetic Allow record. Blocking preference storage may cause the site to return to its regional default between visits.

Optional Analytics, Support, and Third-Party Referral Services

In gated regions—the European Economic Area, the United Kingdom, Switzerland, and when the visitor's location cannot be determined—the site's explicit choice controls optional third-party services. They remain blocked until the visitor selects Allow all, and GPC does not override that direct Allow all choice.

Outside the gated regions, GPC blocks optional third-party services. Without GPC or an explicit Only essential choice or universal opt-out, those services may run by regional default without creating a synthetic consent record. An explicit Only essential choice or universal opt-out keeps them off in every region. Analytics results are intended to improve the service rather than identify the content of a product image.

A configured cookieless Umami script may load independently of this choice with automatic tracking disabled. CataShot sends product analytics events through that integration only when the optional-services rules permit them.

Third-Party Cookies

Trusted authentication, payment, analytics, support, referral, or infrastructure providers may set or read cookies when their services are embedded in or used by CataShot. For services governed by the optional-service controls, a stored denial or universal opt-out blocks runtime use in every region. GPC blocks those services only outside the gated regions; in gated regions, the visitor's direct site choice controls them. These controls cover optional third-party integrations, not CataShot's first-party affiliate attribution. Third-party technologies are governed by the provider's own terms and privacy practices. AI generation providers receive task inputs through service requests; they do not need a browser cookie on your device to process an image or video task.

Managing Cookies

Most browsers let you inspect, delete, limit, or block cookies through their privacy settings. Some browsers also clear site data automatically when a window closes. The available controls and labels vary by browser.

Blocking essential cookies can prevent sign-in, credit checkout, support, or generation features from working. Clearing cookies may sign you out, reset language or theme choices, and remove your optional-services preference. After that, the floating card may return in a gated region, while the regional default may resume elsewhere.

When CataShot needs a choice before optional services can run, the non-modal floating privacy card makes Allow all visually primary while Only essential remains a readable, enabled secondary action. Both remain one-click choices with comparable click-target dimensions. Where the shared footer or account sidebar appears, Cookie settings is available when the regional gate applies or you have saved an explicit preference; it reopens the same card. Do Not Sell or Share My Personal Information is available through those shared controls in every region and records a denial, stops governed optional services, and confirms that the opt-out was saved.

Global Privacy Control

CataShot applies Global Privacy Control (GPC) only outside the gated regions, where it blocks optional third-party services that the regional default would otherwise allow. In gated regions, the visitor's direct site choice controls optional third-party services, so Allow all can load them even when GPC is enabled. GPC does not overwrite a stored preference. This shared optional-service control responds to GPC, not the older Do Not Track (DNT) signal.

Data Connected to Cookies

Cookie or storage identifiers may be connected with account, device, security, transaction, or usage information as described in the Privacy Policy. We retain this information only as reasonably needed for the stated purpose, service reliability, security, legal obligations, and dispute handling.

Changes to This Policy

We may update this Cookie Policy when browser technology, providers, service features, or applicable requirements change. The latest version will be posted on this page with an updated effective date.

Contact Us

If you have questions about this Cookie Policy or the controls available to you, contact us through the support channels shown on this website.