Legal

Cookie & Storage Policy

Last updated 29 July 2026.

Draft — pending review. This page was written from a technical audit of what the application actually does. The facts in it have been verified against the code, but it has not been reviewed by a lawyer.

What this site stores

Nothing is set until you say yes. Google Analytics is the only thing on this site that sets a cookie, and it does not load at all unless you accept it in the banner. Declining is a real decline — no analytics script is fetched, no cookie is written, and every part of the editor works exactly the same.

If you accept, two Google Analytics cookies are set; both are listed in full below. Beyond those, the site sets no cookies: none for advertising, none for preferences, and no third-party tracking pixels.

The site also uses your browser's local storage to keep your work. That is not the same thing as a cookie — it is never transmitted to a server, and it cannot be used to track you across websites — but it is stored on your device, so it is documented in full below alongside everything else.

Exactly what is stored on your device

visual-ideas-design-v2localStorage

The email design currently open in the editor, so your work survives a page refresh.

Set: When you use the editorLasts: Until you clear browser data
visual-ideas-templateslocalStorage

Designs you have saved as reusable templates.

Set: When you save a template without an accountLasts: Until you clear browser data
visual-ideas-migration-promptedlocalStorage

Remembers that you were already asked whether to copy a local design into your account, so the prompt is not repeated.

Set: Only after signing inLasts: Until you clear browser data
visual-ideas-hide-guest-warningsessionStorage

Remembers that you dismissed the browser-only storage warning banner.

Set: When you dismiss the bannerLasts: Until the tab is closed
firebaseLocalStorageDbIndexedDB

Created by the Google Firebase SDK. Holds your sign-in session so you stay signed in between visits.

Set: Created when the page loads; populated only if you sign inLasts: Until you sign out or clear browser data
firebase-heartbeat-databaseIndexedDB

Created by the Google Firebase SDK to record which SDK versions have been used, for Google's own diagnostics.

Set: Created when the page loadsLasts: Managed by the SDK
visual-ideas-analytics-consentlocalStorage

Records whether you accepted or declined analytics cookies, so the banner is not shown again. Set either way — accepting and declining are both remembered.

Set: When you answer the consent bannerLasts: Until you clear browser data
_gacookie

Set by Google Analytics to distinguish one visitor from another. This is an analytics cookie, not a strictly-necessary one.

Set: Only after you accept analyticsLasts: 2 years
_ga_6WMNPH9DYHcookie

Set by Google Analytics to hold session state for this specific property.

Set: Only after you accept analyticsLasts: 2 years

The two firebase* entries are created by Google's Firebase SDK when the page loads, before and regardless of whether you sign in. The first only contains data once you actually sign in.

Analytics, and what is not here

Google Analytics 4 (property G-6WMNPH9DYH) loads on the live site and reports page views to Google. It runs on production builds only, so it is absent from local development builds. It is the only analytics on the site.

There is no tag manager, no advertising or remarketing pixel, and no other third-party tracking script. There is no _gid identifier, because GA4 does not set one.

Analytics cookies are not strictly necessary, so the ePrivacy Directive requires your consent before they are set. That consent is asked for in the banner, opt-in and defaulting to off: until you press Accept, the Analytics script is never fetched. Your answer is stored in the visual-ideas-analytics-consent key listed above. Clearing your browser data resets it and you will be asked again.

Third-party requests

These external services are contacted when you load pages:

  • Google Analytics
    Loads gtag.js from googletagmanager.com on the live site and sets the two _ga cookies listed above. Your IP address and the pages you visit are sent to Google.
  • Google Fonts
    Typefaces load from fonts.googleapis.com and fonts.gstatic.com. No cookie is set, but your IP address is visible to Google as part of the request.
  • placehold.co
    Placeholder images used by the built-in starter templates. Contacted only when you open a starter template that still uses placeholder images.

How to clear it

Everything listed above can be removed through your browser's "clear browsing data" or "cookies and site data" settings, or via developer tools under Application → Storage. You do not need to ask us, and we cannot do it for you.

Clearing this storage permanently deletes any designs you have not exported. Export your work first — see the documentation for how.

More detail

How this relates to personal data, international transfers, and your GDPR rights is covered in the Privacy Policy.