Cookies.
Your call.

Essential storage

The smail_consent_v1 cookie remembers your choice, policy version and expiry for 180 days. It is shared only between smail.cards, www.smail.cards and app.smail.cards. The staging website and postcard maker use separate staging cookie names and choices; external analytics providers stay off there. Development sites use a host-only cookie. Earlier choices do not grant permission for these tools. After an optional grant, this choice cookie also retains a random withdrawal token, including after rejection, so we can enforce your choices across earlier visits after their short-lived journey identifiers expire. The token is used only to enforce and retry withdrawal; it is not used in reports or sent to Google, Microsoft or other providers.

Sign-in, guest drafts, checkout, access controls and other storage needed for a service you request continue to work. Rejecting optional storage does not delete your drafts or sign you out.

When you choose an interface language, the smail.language cookie remembers your requested interface language on that website host for one year. This functional choice is separate from currency and from optional analytics and advertising consent. It does not translate your photos, artwork or messages.

Analytics, only with permission

Our first-party analytics counts public page visits, card impressions and selections, creation milestones, search use and loading problems. Search words, photos, messages, names, addresses, email, payment details and full URLs are excluded. Public campaign labels help us understand how visitors find Snailmail.

When analytics is enabled and configured, Google Analytics 4 measures public marketing visits and Microsoft Clarity helps us understand public marketing page use. Third-party tools do not run in the postcard editor, uploads, customisation, recipient links, checkout, accounts or administration. They are also withheld on pages with private or unknown query parameters or a fragment. Only validated campaign labels and separately consented advertising click identifiers are eligible. Clarity content is masked.

Analytics storage includes smail_journey_v1 (30 minutes of inactivity) and smail_ga_v1 and smail_market_v1 and smail_card_v1 (30 minutes) and smail_campaign_v1 (up to 30 days). Configured Google Analytics may use _ga and _ga_* (up to two years); configured Clarity may use _clck (one year) and _clsk (one day). Providers remain off when configuration is absent or analytics is disabled.

Learn more from Google’s privacy policy and Microsoft’s privacy statement.

Advertising is a separate choice

When configured, Google advertising measurement connects consented campaigns to completed orders. Google click identifiers are accepted only with advertising permission and are excluded from public analytics events and the data layer. Optional advertising storage can include smail_click_v1 and Google _gcl_* cookies (up to 90 days). No Instagram or TikTok tracking is connected.

Change your mind. Anytime.

Open cookie settings here or through the website footer. “Reject optional” withdraws both categories immediately, stops optional collection and clears our optional identifiers. Where an external tool has already loaded, the page reloads to remove its runtime. Essential sessions and drafts remain available.

Your choice is shared by this browser across our website and postcard maker. Another browser or device may ask again. If storage is blocked or a choice expires, optional tools remain off. Closing the notice, scrolling or continuing to browse does not give permission.

Personal data and the postcard maker

Read our Privacy and AI Notice for service providers and the information needed to make, pay for and deliver your postcard. Contact hello@smail.cards with a cookie or privacy question.