Last updated: July 21, 2026
This Cookie Policy explains how Bonded Studio uses cookies and similar technologies on bonded.studio, the Bonded Studio blog, landing pages, newsletter forms, product pages, checkout flows, advertising or sponsored content, affiliate links, and related web pages. It should be read together with the Privacy Policy, Terms of Service, and Subscription Terms.
1. What Cookies and Similar Technologies Are
Cookies are small text files stored by a website in your browser. Similar technologies include localStorage, sessionStorage, SDK storage, device secure storage, and tokens.
The Bonded iOS app does not use browser cookies in the same way a website does. It may use device storage, such as Expo SecureStore, for authentication tokens and app functionality.
2. Current Website Storage and Cookies
Bonded Studio may use the following cookies and similar technologies:
| Technology | Purpose | Duration / storage |
| i18next localStorage language value | Remembers the website language preference | Until browser storage is cleared or replaced |
| QUIC.cloud / LiteSpeed CDN and cache | Content delivery, caching, and performance for bonded.studio | Short-lived technical/cache identifiers |
| Google Analytics 4 (GA4) cookies and identifiers (_ga, _ga_*) | Measures traffic, page views, events, referral sources, campaigns, and content performance — non-essential; set only where you consent (see §5) | Set by Google (typically up to 2 years) according to analytics and browser controls |
| Web-to-app funnel first-party storage (sessionStorage: session id, gift code, audience, event de-duplication) | Runs the start.bonded.studio funnel within your browser session; not sent to Google Analytics | Cleared when the browser tab/session ends |
| Affiliate or referral identifiers | Attributes clicks, referrals, commissions, and campaign performance | Varies by affiliate or campaign partner |
| Advertising or sponsored-content cookies and pixels | Measures ads, sponsored campaigns, reach, clicks, and conversions where used | Varies by advertising or sponsored-content partner |
| Newsletter and form technologies | Supports newsletter signup, waitlists, embedded forms, email delivery, spam prevention, and form analytics | Varies by Hostinger or form/email provider settings |
| In-memory web bearer token | Allows short-lived authenticated web flows, such as premium checkout after sign-in | Current page/session memory only |
| Magic-link URL token | Lets a returning user complete sign-in from an emailed link | Token expires quickly, currently about 15 minutes |
| Guest session code or token in URL | Lets an invited guest join a web session | Used for the guest session flow |
| Server logs | Security, debugging, fraud prevention, and aggregate operational analysis | Server-side retention, usually limited |
| Checkout-provider cookies or similar storage | Enables checkout, fraud prevention, payment processing, tax, receipts, refunds, and order workflows | Controlled by Apple, Paddle, Lemon Squeezy, ecommerce, or checkout providers where used |
The current web app does not set first-party authentication cookies or CSRF cookies for normal web auth flows. It uses bearer tokens in API requests.
3. Strictly Necessary Technologies
Some technologies are necessary to provide the Services, including:
- Magic-link tokens
- Guest session tokens or codes
- API access tokens
- Server logs and security metadata
- Newsletter form security and spam-prevention technologies
- Checkout technologies during payment, order, tax, refund, or fraud-prevention flows
These are used to provide requested services, secure accounts, process payments, prevent fraud, operate sessions, process forms, and maintain the Site.
4. Functional Technologies
The website may store your language preference using localStorage through the i18next language detector. This helps show the site in your selected or detected language.
If additional functional preferences are added later, this policy should be updated before or when those technologies are introduced.
5. Analytics
Bonded Studio uses Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors use bonded.studio, which articles and pages perform well, how visitors arrive at the Site, and how campaigns, QR links, newsletters, and product pages perform.
GA4 sets cookies (such as _ga and _ga_*) or uses similar identifiers to collect usage information such as page views, device and browser information, approximate (IP-derived) location, referral source, campaign source, link clicks, and other events. Google processes this information as an independent controller under Google’s own terms and privacy policies, and data may be transferred to the United States under Standard Contractual Clauses (see Sub-processors).
Analytics cookies are non-essential. In the EU/EEA they are set only where you consent. You can give, refuse, or withdraw consent through our cookie banner/controls, decline in your browser, use the Google Analytics Opt-out Browser Add-on, or use the controls in Section 9. Refusing analytics does not affect access to the Services.
How consent works on bonded.studio: Our cookie banner keeps analytics off unless you choose “Accept analytics” or turn Analytics on in Cookie settings. We store your choice in the first-party bonded_cookie_consent cookie for up to six months. You can change or withdraw your choice at any time through the “Cookie settings” link in the footer. If you withdraw analytics consent, we disable further Google Analytics events and delete accessible _ga and _ga_* cookies. Necessary technology remains active so the Site can work.
We may also review aggregate server-side logs for security, debugging, and operational traffic analysis; these are strictly necessary and not used for cross-site tracking.
6. Advertising, Affiliate Links, and Sponsored Content
Bonded Studio may include affiliate links, advertisements, sponsored content, paid placements, referral links, partner offers, or brand collaborations on the Site, in newsletters, or in related content.
Affiliate, advertising, and sponsored-content partners may use cookies, pixels, click identifiers, referral IDs, UTM parameters, conversion tags, or similar technologies to measure clicks, conversions, commissions, reach, and campaign performance.
If you click an affiliate link or sponsored link, the third-party destination may set its own cookies or collect its own data. We do not control third-party websites or their tracking technologies.
Where required by law, non-essential analytics, advertising, affiliate, or sponsored-content cookies will be subject to consent or similar controls.
7. Third-Party Cookies and SDK Storage
Third parties may use their own cookies or similar technologies when you interact with them:
- Paddle: checkout, fraud prevention, payment processing, tax, and receipt workflows for web purchases.
- Lemon Squeezy or other checkout providers: checkout, payment, tax, receipt, refund, and purchase-access workflows where used.
- Hostinger: website hosting, newsletter forms, email, domain, and related site infrastructure.
- Google Analytics / Google: analytics, traffic measurement, campaign measurement, and service improvement.
- Advertising, affiliate, and sponsored-content partners: attribution, ads, sponsored campaigns, conversion tracking, and partner reporting where used.
- Google Sign-In: authentication cookies or browser storage when you choose Google sign-in on web.
- Apple Sign-In: authentication cookies or browser storage when you choose Apple sign-in where available.
- RevenueCat: subscription and entitlement SDK or server-side processing for App Store subscription status.
- Expo notifications: push notification token and notification delivery infrastructure in the mobile app when notifications are enabled.
We do not control third-party cookies or SDK storage used by these providers. Their own policies apply.
8. Mobile App Storage
The Bonded mobile app may use:
- Expo SecureStore for refresh tokens
- In-memory access tokens for API requests
- RevenueCat SDK storage for purchase and entitlement functionality
- Expo Notifications storage or device APIs for push notification permissions and tokens
- Local app state for settings, haptics, onboarding, and product experience
Mobile app storage is not the same as browser cookies, but it may still involve personal data as described in the Privacy Policy.
9. How to Control Cookies and Storage
You can control browser cookies and localStorage through your browser settings. Most browsers allow you to view, delete, or block site data.
Common paths include:
- Chrome: Settings > Privacy and security > Third-party cookies or Site settings
- Safari: Settings > Privacy > Manage Website Data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Edge: Settings > Cookies and site permissions
Blocking or clearing strictly necessary site data may break sign-in, checkout, newsletter forms, guest session joining, or language preference. Blocking non-essential analytics or advertising cookies may reduce personalization, attribution, analytics accuracy, or ad measurement, but should not prevent access to basic website content.
For mobile app controls:
- Use device settings to manage notification permissions.
- Use the App settings to manage supported notification and product preferences.
- Delete the App or clear app data according to your device settings if you want to remove local app storage.
10. Changes to This Policy
We may update this Cookie Policy if our use of cookies, localStorage, SDK storage, analytics, advertising, affiliate links, sponsored content, newsletter providers, ecommerce providers, payment providers, or similar technologies changes.
If we introduce non-essential cookies that require consent, we will provide a consent mechanism where required by law.
11. Contact
Questions about cookies or similar technologies may be sent to: support@bonded.studio