Legal
Cookie statement
This statement describes which cookies ymcreations.com sets, what they are for, how long they last, and how to change your choice.
Last updated
What cookies are
A cookie is a small text file a website places in your browser. On a later visit the website can read it again, for instance to remember a choice or to count visits.
Necessary
The website sets one necessary cookie: the one that remembers your cookie choice. It needs no consent. Without your consent, the public website sets no other cookies and uses no storage in your browser. Fonts are served from our own server, not from Google.
The YM Creations admin area sets an authentication cookie after a staff member signs in. Its name starts with sb- and ends in -auth-token, sometimes split into several parts. It holds the staff member's signed-in session, is necessary for the admin area and is never set during an ordinary visit to the website. The cookie can remain in the browser for up to 400 days; how long the signed-in session itself stays valid is managed separately by the authentication service.
Analytics, only with consent
With your consent we load Google Analytics to understand how the website is used and to improve it. Google then sets cookies to tell visits and visitors apart, and data about your visit is shared with Google. Those cookies are set to last ninety days. The cookie that tells visitors apart is not extended by a later visit; the cookie that tracks the session is set again for ninety days on each visit, because Google updates the session state in it. Without consent the script is not loaded and these cookies are not set. With the same consent we keep in your browser's session storage (ym_attr) through which channel your visit began, so a page reload does not lose it; that storage disappears when you close the tab or withdraw your consent, and holds no code that identifies you or an ad click. Analytics is off by default.
Behaviour recordings, only with consent
Only if you consent to behaviour recordings do we load Microsoft Clarity. Clarity shows where visitors click, how far they scroll and where they may get stuck, through heatmaps and reconstructed session recordings. Clarity then sets two cookies on our website: one that recognises your browser on a later visit by a pseudonymous code, and one that joins the pages of one visit into one recording. Without that consent Clarity is not loaded and these cookies are not set, not even if you consented to analytics. Behaviour recordings are off by default.
Microsoft may also set or read cookies on its own domains. Microsoft lists MUID, CLID, ANONCHK, MR and SM for this; according to Microsoft they serve, among other things, to recognise a browser across sites, and MUID is also used for advertising. We signal to Clarity that storage for advertising purposes is not allowed. These cookies live on Microsoft's domains and are governed by the Microsoft privacy statement; we cannot read or remove them.
Marketing, only with consent
Only if you consent to marketing do we load the Meta Pixel. With it we measure which ads on Facebook and Instagram lead to a visit or an inquiry. Meta then sets a cookie on our website that recognises your browser by a pseudonymous code, and, when you arrive through an ad from Meta, a second cookie that remembers that click. Without that consent the pixel is not loaded and these cookies are not set, not even if you consented to analytics or behaviour recordings. Marketing is off by default.
Meta may also read or set cookies on its own domains, such as facebook.com, for example when you are logged in to Facebook or Instagram. Those cookies are governed by Meta's cookie policy; we cannot read or remove them.
With the same consent for marketing we also load Google Ads. With it we measure which Google ads lead to a visit, an inquiry, a phone call or a WhatsApp message, and we can show earlier visitors an ad again later. Google then sets cookies on our website that remember a visit and, after a click on a Google ad, that click. Google may also read or set cookies on its own domains, such as google.com and doubleclick.net; those are governed by Google's privacy policy. Without consent for marketing Google Ads is not loaded, not even if you consented to analytics.
Overview
| Cookie | Purpose | Category | Lifetime |
|---|---|---|---|
| ym_consent | Remembers your cookie choice, the version it was made under and when you made it. | Necessary, first-party | 6 months |
| _ga | Google Analytics: tells visitors apart. | Analytics, Google, only with consent | 90 days, not extended |
| _ga_* | Google Analytics: keeps track of the session. | Analytics, Google, only with consent | 90 days from the last visit |
| ym_attr (session storage, not a cookie) | Remembers through which channel your visit began, so a request still knows it after a page reload. | Analytics, first-party storage, only with consent | Until you close the tab |
| _clck | Microsoft Clarity: recognises your browser on a later visit by a pseudonymous code and keeps Clarity preferences. | Behaviour recordings, Microsoft, only with consent | Set by Microsoft |
| _clsk | Microsoft Clarity: joins the pages of one visit into one recording. | Behaviour recordings, Microsoft, only with consent | Set by Microsoft |
| MUID, CLID, ANONCHK, MR, SM | Microsoft: on Microsoft's own domains, among other things to recognise a browser across sites. | Behaviour recordings, Microsoft, only with consent; Microsoft's own cookies | Set by Microsoft |
| _fbp | Meta Pixel: recognises your browser by a pseudonymous code, to measure ads. | Marketing, Meta, only with consent | Set by Meta |
| _fbc | Meta Pixel: remembers the click on an ad from Meta you arrived through; only after such a click. | Marketing, Meta, only with consent | Set by Meta |
| Meta's cookies on facebook.com | Meta: on Meta's own domains, among other things to link a visit to a Meta account. | Marketing, Meta, only with consent; Meta's own cookies | Set by Meta |
| _gcl_au | Google Ads: links an inquiry, phone call or WhatsApp message to a visit, to measure ads. | Marketing, Google, only with consent | Set by Google |
| _gcl_aw | Google Ads: remembers the click on a Google ad you arrived through; only after such a click. | Marketing, Google, only with consent | Set by Google |
| Google's cookies on google.com and doubleclick.net | Google: on Google's own domains, among other things for ad measurement and remarketing. | Marketing, Google, only with consent; Google's own cookies | Set by Google |
| sb-*-auth-token | Authentication cookie of the admin area: holds a staff member's signed-in session. | Necessary; admin area only, only after staff sign-in, never during a public visit | Up to 400 days in the browser; the validity of the session itself is managed separately |
Changing your choice
Cookie settings sits at the bottom of every page. There you switch analytics, behaviour recordings and marketing on or off, each on its own. Switching analytics off stops measurement immediately and removes the Google Analytics cookies as far as the website can. Switching behaviour recordings off asks Clarity to stop and erase its cookies, removes the Clarity cookies on our website and reloads the page without Clarity. Switching marketing off asks the Meta Pixel to stop, tells Google that advertising consent was withdrawn, removes the Meta and Google Ads cookies on our website and reloads the page without the pixel and without Google Ads. Cookies on Microsoft's, Meta's and Google's domains cannot be removed by us. After six months we ask again, and sooner if the cookies or the parties setting them change materially.
How we handle your data beyond cookies is in the privacy statement.