AI Product Customizer

Legal

Cookie Policy

Last updated:

This Cookie Policy explains how AI Product Customizer uses cookies and similar technologies when you visit our website, create an account, use our online demonstrations, purchase a subscription or interact with our services.

Our consent approach: strictly necessary cookies may be used without prior consent because they are required to operate, secure or provide the website. Analytics, advertising and other optional technologies will only be activated after you provide consent where applicable law requires it.

1. Who is responsible?

The entity responsible for the use of cookies described in this Policy is:

[FULL LEGAL COMPANY OR TRADER NAME]
Trading as AI Product Customizer
Tax identification number: [NIF/CIF/VAT NUMBER]
Registered address: [FULL BUSINESS ADDRESS, SPAIN]
Privacy email: privacy@aiproductcustomizer.com

2. What are cookies?

Cookies are small text files stored on your computer, mobile device or browser when you visit a website. They allow a website to remember information about your visit, recognise a browser, maintain a secure session or understand how the website is used.

Cookies may be:

  • First-party cookies: placed directly by AI Product Customizer.
  • Third-party cookies: placed or read by an external provider whose technology is integrated into the website.
  • Session cookies: removed when the browser session ends.
  • Persistent cookies: retained for a defined period or until manually deleted.

3. Similar technologies

In addition to browser cookies, we may use comparable technologies such as:

  • local storage;
  • session storage;
  • pixels and conversion tags;
  • server-side event tracking;
  • browser or device identifiers;
  • security tokens;
  • URL parameters; and
  • server logs.

References to “cookies” in this Policy also include these technologies where they perform a similar function.

4. Categories of cookies

4.1 Strictly necessary cookies

These cookies are required to provide a service requested by the user, protect the website, process payments, maintain a session or remember privacy choices.

They cannot normally be disabled through our preference centre because the website may not function correctly without them.

4.2 Functional cookies

Functional cookies remember optional preferences such as language, interface settings or customizer state. They are not always essential but improve usability.

4.3 Analytics cookies

Analytics cookies help us understand how visitors reach and use the website, which pages are visited and whether errors occur.

Where required, these cookies are only activated after consent.

4.4 Advertising cookies

Advertising cookies and pixels may be used to measure campaigns, attribute conversions, create audiences or show more relevant advertisements.

These technologies are optional and will only be activated after consent where required.

5. Cookies and storage technologies we may use

The following table describes the technologies planned for AI Product Customizer. Not every cookie will be present for every visitor. The cookies set depend on the features used, the consent choices made and the services enabled at that time.

Name Provider Purpose Category Typical duration
apc_cookie_consent AI Product Customizer Stores the user's cookie categories and consent preferences. Essential 6 months
apc_consent_version AI Product Customizer Records the version of the consent notice accepted or rejected. Essential 6 months
apc_session AI Product Customizer Maintains an authenticated or functional website session. Essential Session
apc_csrf AI Product Customizer Helps prevent cross-site request forgery and unauthorised form submissions. Essential Session
apc_ai_session AI Product Customizer Associates generation requests with the current anonymous or authenticated session. Essential Session or 24 hours
apc_ai_quota AI Product Customizer Helps enforce free-generation or demonstration limits and prevent abuse. Essential Up to 24 hours
apc_rate_limit AI Product Customizer Supports rate limiting, fraud prevention and service protection. Essential Up to 24 hours
apc_locale AI Product Customizer Remembers the visitor's selected language. Functional 6 months
apc_customizer_state AI Product Customizer Temporarily remembers customizer options, selected tabs or unfinished work. Functional Session or up to 30 days
_ga Google Analytics Distinguishes browsers and supports aggregated website-usage measurement. Analytics Up to 2 years
_ga_<container-id> Google Analytics Persists session state for the relevant Google Analytics property. Analytics Up to 2 years
_gcl_au Google Ads Supports conversion measurement and advertising attribution when Google Ads is enabled. Advertising Typically 3 months
_fbp Meta Supports campaign measurement and advertising attribution when Meta Pixel is enabled. Advertising Typically 3 months
cf_clearance Cloudflare Records that a visitor has passed a Cloudflare security challenge and allows subsequent legitimate requests. Essential Variable according to the security configuration
__cf_bm Cloudflare Helps distinguish legitimate traffic from automated or malicious traffic where Cloudflare bot protection is enabled. Essential Typically around 30 minutes
__stripe_mid Stripe Supports fraud prevention and secure payment processing where Stripe is integrated. Essential Typically up to 1 year
__stripe_sid Stripe Supports fraud prevention and the current Stripe payment session. Essential Typically around 30 minutes

Implementation note: the final published table must match the technologies detected on the live website. Remove any cookie that is not actually used and update names or durations if a provider changes its implementation.

6. Google Tag Manager

We may use Google Tag Manager to manage analytics, advertising and conversion-measurement scripts.

Google Tag Manager is primarily a tag-management system. The tags loaded through it may set cookies or transmit data to their respective providers.

Our consent-management mechanism is intended to communicate the user's choices to Google Tag Manager and prevent optional analytics or advertising tags from operating before the required consent has been obtained.

Depending on the configuration, we may use Google's consent controls to communicate whether the user has granted or denied storage for:

  • analytics;
  • advertising;
  • advertising personalisation;
  • advertising user data; and
  • functional preferences.

7. Google Analytics and website measurement

Subject to consent, we may use Google Analytics 4 to understand aggregated website usage, including:

  • pages visited;
  • approximate session duration;
  • navigation and interaction events;
  • device and browser characteristics;
  • approximate geographic region;
  • referring websites and campaigns;
  • signup or purchase conversion events; and
  • technical errors or performance events.

Google Analytics cookies and tags will not be activated before analytics consent where prior consent is required.

We intend to configure Analytics according to data minimisation principles, including avoiding the deliberate transmission of names, email addresses, full payment details, prompts or generated images as analytics event parameters.

8. Advertising and conversion measurement

If we run advertising campaigns, and only after the necessary consent, we may activate:

  • Google Ads conversion tracking;
  • Google Ads remarketing;
  • Meta Pixel;
  • Meta conversion measurement;
  • other advertising platforms identified in the consent interface; and
  • server-side conversion events linked to consented browser activity.

These technologies may be used to:

  • measure whether an advertisement led to a signup;
  • attribute purchases or subscriptions to campaigns;
  • prevent repeated or irrelevant advertising;
  • create aggregated campaign reports; and
  • create or exclude advertising audiences where the user has provided the required consent.

Advertising cookies are not necessary to use the essential functions of AI Product Customizer.

9. Cloudflare, Turnstile and security technologies

We may use Cloudflare to provide DNS, content delivery, protection against malicious traffic, rate limiting, firewall services and bot detection.

We may also use Cloudflare Turnstile to determine whether a form or generation request is being submitted by a legitimate visitor rather than an automated system.

Cloudflare security cookies and comparable identifiers may be treated as strictly necessary because they help:

  • protect accounts and forms;
  • prevent automated attacks;
  • prevent excessive AI-generation requests;
  • maintain a security challenge result;
  • detect abnormal traffic; and
  • preserve the availability of the Services.

Passing a security challenge does not create an advertising profile and does not mean that optional analytics or advertising consent has been granted.

10. Stripe and payment technologies

If Stripe is used to process payments, Stripe may use cookies or similar technologies that are necessary to:

  • provide a secure checkout;
  • detect and prevent payment fraud;
  • authenticate a payment session;
  • remember eligible payment preferences;
  • operate Stripe Link where selected; and
  • comply with financial and security requirements.

Cookies strictly required to process or secure a payment may be used when the user chooses to access the checkout. They are not used by us as permission to activate unrelated advertising cookies.

Stripe may process information as an independent provider under its own privacy and cookie documentation.

11. AI Product Customizer storage

The AI product customizer may use cookies, browser storage or server-side identifiers to:

  • maintain the current customisation session;
  • remember the selected product or mock-up;
  • retain temporary generation parameters;
  • associate a generated design with the current cart;
  • enforce free-generation limits;
  • prevent duplicate submissions;
  • maintain security tokens; and
  • restore an unfinished design where enabled.

Prompt text, uploaded reference images and generated images should not be stored directly inside cookies. They may be stored temporarily in the Customer Store, browser, ecommerce session or AI Product Customizer infrastructure as described in our Privacy Policy.

A Customer Store that installs the Plugin may set its own WooCommerce, WordPress, ecommerce or consent cookies. Those cookies are controlled by the relevant merchant and should be described in that merchant's own Cookie Policy.

12. Third-party cookies

Some integrated services are operated by third parties. Those providers may receive technical information such as the IP address, browser characteristics, page URL, transaction identifier or consent state when their service is loaded.

Potential third-party providers include:

  • Google;
  • Meta;
  • Cloudflare;
  • Stripe;
  • an email, support or embedded-media provider used on a specific page; and
  • another provider clearly identified in the cookie preference interface.

Third-party cookie names, storage periods and processing practices may change independently of us. The live consent interface and periodic cookie audit should be used to keep this Policy accurate.

14. Browser and device controls

Most browsers allow you to inspect, block or delete cookies through their privacy settings.

Depending on the browser, you may be able to:

  • block all cookies;
  • block third-party cookies;
  • delete cookies when closing the browser;
  • delete cookies for a specific website;
  • prevent cross-site tracking;
  • clear local and session storage; or
  • use private browsing mode.

Blocking strictly necessary storage may prevent login, consent management, checkout, security verification, generation-limit controls or parts of the product customizer from working correctly.

15. International data transfers

Some third-party providers may process cookie identifiers and related technical information outside the European Economic Area.

Where required, international transfers will be based on an appropriate legal mechanism, such as:

  • an adequacy decision;
  • Standard Contractual Clauses;
  • the EU–US Data Privacy Framework for eligible certified recipients; or
  • another legally recognised safeguard.

Further information is available in our Privacy Policy.

16. Changes to this Cookie Policy

We may update this Policy when:

  • new website features are introduced;
  • new analytics or advertising tools are activated;
  • cookie names or durations change;
  • providers or infrastructure change;
  • legal requirements change; or
  • a cookie audit identifies additional technologies.

The effective version will always be identified by the “Last updated” date shown at the top of this page.

Where a change introduces a new optional purpose or provider, we will request consent before activating it when required.

17. Contact us

For questions about cookies or privacy, contact:

[FULL LEGAL COMPANY OR TRADER NAME]
AI Product Customizer
[FULL BUSINESS ADDRESS, SPAIN]
Email: privacy@aiproductcustomizer.com