OohYeah legal
Cookie Policy
Control optional functional, analytics, and advertising technologies.
Last updated: August 28, 2026 · Version: 2026-08-28-draft-1 · Effective: Pending owner approval
Your choices
Necessary technologies are always on for security, authentication, checkout, and your privacy choice. Functional, analytics, and advertising technologies stay off until you consent. The same protective default is applied worldwide, including in regions that require opt-in consent. You may change your choice at any time.
Google Consent Mode v2 and tag blocking
Before you choose, Google Consent Mode v2 denies ad storage, analytics storage, ad user data, and ad personalization. We update those signals only for categories you allow. New analytics or advertising tags must be registered in this policy and configured to respect the same consent state before release.
Cookie and provider register
| Technology | Provider | Category | Purpose | Duration | Party |
|---|---|---|---|---|---|
| oohyeah_cookie_preferences | OohYeah (first party) | Necessary | Stores the consent choices made in this dialog | 1 year | First party |
| next-auth.* / payload-token | OohYeah authentication (first party) | Necessary | Session, sign-in, and account-security state | Session or provider-defined | First party |
| rc::a / rc::c | Google reCAPTCHA | Necessary | Fraud and abuse prevention when a protected form is used | Session or provider-defined | Third party |
| PayPal checkout technologies | PayPal | Necessary | Payment checkout and fraud prevention after a buyer begins checkout | Provider-defined | Third party |
| Google sign-in technologies | Functional | Optional Google account sign-in after a visitor chooses it | Provider-defined | Third party | |
| Facebook sign-in technologies | Meta | Functional | Optional Facebook account sign-in after a visitor chooses it | Provider-defined | Third party |
| Intercom messenger technologies | Intercom | Functional | Optional support messaging where enabled after consent | Provider-defined | Third party |
Providers that are not tracking categories
Google Maps, Google Drive, and other provider services may process information only when a visitor actively uses that feature. They are disclosed in the Privacy Policy and their own notices govern their services. This register is reviewed before a production release; a provider is not described as analytics or advertising unless that tag is actually enabled.