Cookies
Cookies are small files a website stores in your browser. Here is every kind we use and how to change your mind.
Last updated: 8 November 2026
Your choice
Analytics and advertising cookies stay off unless you choose to allow them. Our own pages set no cookies while you read them; the only one we add is the small cookie that remembers your choice.
Strictly necessary
These make the site work and keep it secure, so they don't need consent.
| Name | Purpose | Lasts |
|---|---|---|
sm_consent | Remembers your cookie choice. Only set when you choose in the cookie banner | 6 months |
sm_sess | Keeps you signed in while you make your book (and our staff in our admin area), and protects forms from forgery. Only set once you sign in, order, or use a form | Up to 30 days |
sm_invite | Holds a family invitation link for a few hours while a relative joins, so the link doesn't stay in the address bar | 6 hours |
sm_contrib | Lets a relative carry on adding to a book from the same device | 90 days |
sm_review | Holds the private link from our "How did we do?" email while you leave a review, so the link doesn't stay in the address bar | 2 hours |
__cf_bm, cf_clearance | Set by Cloudflare, which protects this site, to tell people from automated traffic | Usually 30 minutes |
Other things stored in your browser
| Name | What it is | Lasts |
|---|---|---|
sm_att (session storage, not a cookie) | If you arrive from one of our adverts or links, remembers which one (for example utm_source) so it can be saved with an order. It is never sent anywhere unless you place an order, and advert click IDs are only kept if you accept marketing cookies | Until you close the tab |
| Cloudflare Turnstile | A security check on our forms (ordering, signing in, gift cards, joining a family book) that tells people from automated programs. It runs in a frame from challenges.cloudflare.com and doesn't set cookies on our site | While the form is open |
Analytics (only with your consent)
Google Analytics tells us how many people visit and which pages help. It is loaded through Google Tag Manager together with our advertising measurement, so it only runs if you allow advertising cookies too; choosing analytics on its own loads nothing. We use Google's Consent Mode, so these cookies are only stored if you agree.
| Name | Purpose | Lasts |
|---|---|---|
_ga, _ga_* | Counts visits and pages viewed (Google Analytics) | Up to 2 years |
Marketing (only with your consent)
These help us see whether our Facebook and Instagram adverts lead to orders, so we spend less on adverts that don't help anyone. The Meta pixel is loaded through Google Tag Manager only after you agree.
| Name | Purpose | Lasts |
|---|---|---|
_fbp, _fbc | Meta (Facebook and Instagram) advert measurement | Up to 90 days |
sm_signup | Set only if you have accepted marketing cookies, when redeeming a gift card creates your account. It lets the next page of ours you visit count one new sign-up (no name or email), then it is deleted | Up to 1 day |
Some of these are set through our own domain by our measurement server, but they are still only used if you consent. We never send the contents of your book to Google or Meta.
More information
See our privacy notice for how we handle personal information. You can also delete cookies in your browser settings at any time.