MANDO GALLEGOS PHOTOGRAPHY
Cookie & Tracking Policy
Effective October 21, 2026 · Version 2026-10-21
This policy explains cookies, browser storage and tracking used by the Mando Gallegos Photography website. Cookie preferences control optional Google and Meta tools. Cloudflare hosting, security and platform performance analytics operate separately as described below.
Email [email protected] for questions or privacy requests.
Storage supporting features you choose
Secure studio sign-in uses session cookies. Private galleries may use an access cookie when a PIN is required. Browser storage preserves wedding coverage selections, certain gallery choices and feature state. Inquiry retries use a random request identifier rather than storing your message in that identifier.
A versioned privacy-preference record stores your Google and Meta choices in this browser until you change them or clear site data. Blocked storage, private browsing and browser settings may limit persistence. Clearing site data may remove saved selections or sign you out.
Optional Google Analytics
If you enable Google Analytics, it measures visits and limited booking-link or link-in-bio actions on eligible marketing pages. The site removes query strings and fragments from its supplied page URL, sends only a referring website’s origin, disables Google signals and advertising-personalization signals in its own configuration, and does not send inquiry or booking field values.
As verified on October 21, 2026, enhanced measurement, Google Signals, granular location and device collection, and ads personalization are off in the reviewed property. The four account-sharing choices are off. Email redaction and redaction of fourteen specified URL query-parameter keys are enabled as additional safeguards; redaction is best effort and does not cover every possible personal detail. Country and region information and basic technical identifiers may still be processed when Analytics is allowed.
Event-level retention is two months; user-level retention is fourteen months with the period resetting on new activity. These controls do not remove most aggregated reports. The site’s restrictions do not describe every independent use of Google services.
Optional Meta advertising
If you enable Meta advertising, the pixel reports visits on eligible public marketing pages. Its SDK can receive page and browser information, use first-party cookies and associate events with Meta users for advertising and measurement. As verified on October 21, 2026, account-side automatic advanced matching, automatic events, the additional page/product-information option and measurement on customer devices are off. Turning off that extra enrichment does not prevent all basic page or browser information from being processed when you allow the pixel.
The site’s initializer sends PageView, disables automatic configuration and does not start on URLs containing a query string or fragment. Account enrichment settings are separate from those source controls. Optional sharing with Meta may be treated as advertising sharing under applicable privacy laws. Reject Meta advertising in Cookie preferences if you do not want the optional tool to run.
Your choices and privacy signals
Both optional tools stay off until you allow them. Forms, booking, wedding coverage, private links and legal pages do not load Google or Meta SDKs, including when you previously allowed them. Rejecting optional tools does not prevent inquiries or booking. Supported Global Privacy Control and Do Not Track signals keep them off.
Use Cookie preferences in the footer to allow both, reject both or save separate choices. You can return to the same controls to withdraw permission. The website removes accessible Google/Meta identifiers and refreshes a page when needed to remove a loaded tool. A change cannot retract information already received by a provider.
Browser controls can block or clear site data. If a choice cannot be saved, the preference control explains that it applies only to the current page. Without JavaScript the optional Google and Meta tools remain off. New optional purposes requiring permission will need a fresh choice.
Cloudflare hosting and performance analytics
Cloudflare handles requests, website security and delivery. Cloudflare Pages also injects a separate Web Analytics performance beacon, including on pages where the optional Google and Meta tools do not run. Cloudflare describes this service as cookieless performance and traffic analytics. It is not switched off by this website’s Google/Meta choices.
Hosting and security processing can involve network addresses, requested URLs and technical logs independently of browser cookie consent. The optional-tools controls do not promise to stop essential security processing or the separate platform beacon.
Payments and external destinations
Stripe hosted checkout, external client galleries, Instagram and gift-payment destinations apply their own cookie and privacy practices when you visit them. Review the provider’s notices on those services. Contact the studio at [email protected] about this website’s tracking or a privacy concern.