Cookie Policy
This notice explains the cookies and similar browser technologies Art of Sundays uses, why we use them, and how you control the optional ones.
About cookies and similar technologies
Cookies are small text files that a website can store on your device. Similar technologies, including local storage and tags, can serve comparable purposes. In this policy, “cookies” refers to cookies and these similar browser technologies.
Some are necessary to deliver the website, app, and checkout you ask for. Others are optional and help us measure use, improve the product, or measure advertising. The inventory below describes names or name patterns that may be used; whether a specific entry appears depends on the page, feature, and your choices.
Your choices
You can accept, reject, or choose optional Functional, Analytics, and Marketing categories individually. Necessary cookies remain active because the services they support would otherwise not work.
You can change or withdraw an optional choice at any time using Cookie settings in the website footer or the signed-in app sidebar. A withdrawal affects future optional storage and processing; it does not change processing that occurred before the withdrawal.
Your selection is saved in the necessary aos_consent cookie for 180 days on the relevant Art of Sundays domain. Choices are browser- and device-specific.
Cookie inventory
We keep this table aligned with the storage used by the current Art of Sundays website and app. Values stored in cookies are not shown here.
| Name | Provider | Type | Expiration | Purpose |
|---|---|---|---|---|
| aos_design_favorites | Art of Sundays | Cookie | 1 year | Keeps your saved designs and color palettes on this device. |
| aos_consent | Art of Sundays | Cookie | 180 days | Stores your cookie category choices on this device. |
| aos_guest_session_id | Art of Sundays | Cookie | 30 days | Connects an unsigned visitor's cart and draft across the website and app. |
| guest_session_id | Art of Sundays | Cookie | 30 days | Keeps a guest session available in the editor. |
| aos_country | Art of Sundays | Cookie | 1 year | Selects the country used for product availability and pricing. |
| aos_lang | Art of Sundays | Cookie | 1 year | Stores the chosen language. |
| _medusa_cart_id | Art of Sundays / Medusa | Cookie | 7 days | Associates products with the shopping cart. |
| _medusa_jwt | Art of Sundays / Medusa | Cookie | 7 days | Maintains sign-in for protected shop actions. |
| aos-<environment>.session_token | Better Auth | Cookie | Up to 30 days | Maintains a confirmed account session. |
| aos-<environment>.session_data | Better Auth | Cookie | Up to 30 days | Supports the secure account session in the browser. |
| aos-passkey-login-hint | Art of Sundays | Cookie | 30 days | Shows after sign-in whether the account has a passkey. |
| aos_sela_insights_admin | Art of Sundays | Cookie | 8 hours | Protects the internal SmartEngine insights dashboard after successful administrator verification. |
| aos_post_login_sync | Art of Sundays | Cookie | 60 seconds | Synchronizes required shop data immediately after sign-in. |
| guest_draft_ids | Art of Sundays | Local storage | Until claimed after sign-in or browser deletion | Remembers draft identifiers so guest drafts that were explicitly created can be assigned to the account after sign-in. |
| aos_upload_invite:<draft-id> | Art of Sundays | Local storage | Until reset or browser deletion | Keeps an invited contributor's name and random upload session so an upload in progress can be resumed. |
| aos_editor_entry:<request-id> | Art of Sundays | Session storage | Usable for 20 minutes, at most the browser session | Keeps the submitted prompt during sign-in and prevents duplicate Draft creation on retry. After creation only a short resume reference remains. |
| editor_upload_batch:<draft-id> | Art of Sundays | Session storage | Until completion or the browser session ends | Keeps identifiers for an active editor upload so it can resume and reconcile its status. |
| __stripe_mid | Stripe | Cookie | Up to 1 year | Supports fraud prevention when card payment is selected at checkout. |
| __stripe_sid | Stripe | Cookie | 30 minutes | Supports fraud prevention while a card payment is in progress. |
| cf_clearance | Cloudflare | Cookie | Up to 1 year | Confirms, after a security check, that the browser passed that check. |
| Name | Provider | Type | Expiration | Purpose |
|---|---|---|---|---|
| g_state | Cookie | Up to 180 days | Remembers Google One Tap state when you use the optional Google sign-in. |
| Name | Provider | Type | Expiration | Purpose |
|---|---|---|---|---|
| _ga | Google Analytics | Cookie | Up to 180 days; not renewed by activity | Distinguishes returning visitors for reach measurement. |
| _ga_<container-id> | Google Analytics | Cookie | Up to 180 days; not renewed by activity | Persists session state for Google Analytics 4. |
| ph_<project-key>_posthog | PostHog | Cookie and local storage | 1 year | Stores a pseudonymous analytics session and product analytics settings. |
| __ph_opt_in_out_<project-key> | PostHog | Local storage | Up to 1 year | Stores the local PostHog consent state used for product analytics. |
| Name | Provider | Type | Expiration | Purpose |
|---|---|---|---|---|
| _gcl_au | Google Ads | Cookie | 90 days | Stores ad-click information for campaign measurement. |
| _gcl_aw | Google Ads | Cookie | 90 days | Attributes a Google Ads conversion to an ad click. |
| _gcl_dc | Google Ads | Cookie | 90 days | Supports Google advertising campaign measurement. |
Third-party services
The following services may be involved when the relevant feature is used. Their own privacy notices explain how they handle data.
| Service | Purpose | Category | Privacy notice |
|---|---|---|---|
| Google Analytics 4 | Website measurement and aggregated usage insights. | Analytics | View policy |
| PostHog | Product analytics and, only after Analytics consent, strongly masked session replay on non-sensitive pages. Sensitive product and commerce paths are excluded. | Analytics | View policy |
| Vercel Web Analytics | Privacy-focused, aggregated page and event analytics. It does not use third-party cookies. | Analytics | View policy |
| Google Ads | Advertising campaign measurement and conversion attribution. | Marketing | View policy |
| Google Identity Services | Optional Google One Tap sign-in when the feature is available. | Functional | View policy |
| Stripe | Card-payment processing and fraud prevention during checkout, when card payment is selected. | Necessary | View policy |
| Cloudflare | Security and bot protection, including a completed security challenge. | Necessary | View policy |
Browser controls
You can also delete or block cookies in your browser. This can affect sign-in, cart, saved preferences, and checkout features. Your browser’s help pages explain how to manage its cookie data:
Changes to this policy
We may update this policy when our services or browser technologies change. We will update the date at the top and keep the inventory in line with the active implementation. For broader information about personal-data processing, please read our Privacy Policy.