# Cookie policy

> Which cookies and storage entries snapshots-quiz.app uses, what Google Analytics 4 with Consent Mode v2 does, and how to withdraw consent. The app sets none.

Last updated: 2026-09-14

**Provider:** DigitalFreedom — a brand of DigitalFreedom Global LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States · <hello@digitalfreedom.co.za>

## 1. What this policy covers

This policy explains what `snapshots-quiz.app` stores on your device and what it reads from it. Read it together with the [privacy policy](https://snapshots-quiz.app/privacy/), which covers everything else.

**Short version:** one analytics tool, Google Analytics 4, and it writes nothing to your device until you say yes. Everything else stored here is what the site needs to work — your cookie choice and your theme. There is no advertising pixel, no Meta Pixel, no Google Ads tag, no A/B testing tool, no session recorder, no social plugin, no embedded video and no third-party font.

## 2. What cookies are

Cookies are small text files a website places on your device. Similar technologies do the same job by other means: **local storage** in your browser, **pixels** or web beacons embedded in a page, **fingerprinting** that identifies a device from its configuration, and **SDKs** inside mobile apps.

Legally, what matters is not the technology but the access: § 25(1) TDDDG and Art. 5(3) of Directive 2002/58/EC require your consent for storing anything on your device or reading anything already there, unless it is strictly necessary for a service you expressly requested.

## 3. What this site stores

| Name | Set by | Type | Purpose | Retention | Consent needed |
|---|---|---|---|---|---|
| `_ga` | Google (GA4) — first party | Cookie | Distinguishes visitors so sessions and page views can be counted | up to 24 months | **Yes** |
| `_ga_<container-id>` | Google (GA4) — first party | Cookie | Holds the session state for this property | up to 24 months | **Yes** |
| `cookie-consent` | This site | Local storage | Remembers whether you accepted or declined, so you are not asked again | until you clear it | No — § 25(2) no. 2 TDDDG |
| `theme` | This site | Local storage | Remembers light or dark mode | until you clear it | No — § 25(2) no. 2 TDDDG |

No other cookie is set. No third party other than Google receives anything from this site.

## 4. Google Analytics 4 with Consent Mode v2

### 4.1 Who and what

Provider: **Google Ireland Ltd.**, Gordon House, Barrow Street, Dublin 4, Ireland. We use GA4 to see which pages are read and which are not. The measurement is aggregated; we do not use GA4 to recognise individuals, we do not link it to any player name, and no GA4 signal reaches the app.

### 4.2 Before you decide

The site loads with **Consent Mode v2 and every storage category set to `denied`** — `ad_storage`, `ad_user_data`, `ad_personalization` and `analytics_storage`. In that state Google's tag sends **cookieless aggregated pings**: no cookie is written, no identifier is stored on your device, and the signal cannot be resolved to you. Legal basis for that processing: Art. 6(1)(f) GDPR, our legitimate interest in knowing the aggregate reach of the site. **No consent is required for it, because nothing is stored on or read from your device.**

Being open about the trade-off: the tag itself is loaded from `googletagmanager.com` at page load, which means Google sees the request and your IP address at that moment. If you would rather that did not happen, a content blocker prevents it, and the site works without it.

### 4.3 After you accept

Clicking **Accept** sets `analytics_storage` to `granted`. Only then are the `_ga` cookies written and standard GA4 events recorded. Legal basis: Art. 6(1)(a) GDPR together with § 25(1) TDDDG.

### 4.4 After you decline

Clicking **Decline** keeps every category denied. Nothing is written to your device, and the state is remembered so you are not asked again.

### 4.5 Retention and transfers

GA4 retains event data for 14 months. Google processes data in the EEA and transfers to Google LLC in the United States on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and its participation in the EU-US Data Privacy Framework. Google's own policy: <https://policies.google.com/privacy>.

## 5. Your choice, and changing it

- The banner appears on your first visit. **Accept** and **Decline** are equally reachable, equally prominent, and nothing is pre-ticked.
- You can reopen it any time with the **Cookie settings** link in the footer, and change your answer as often as you like.
- Withdrawal is as easy as consent and takes effect immediately for the future. It does not make the earlier processing unlawful.
- Your browser can block or delete cookies independently of this site, and **Do Not Track** and **Global Privacy Control** signals are respected: where one is present, we treat it as a refusal.

## 6. The app sets no cookies

The Snapshots iOS app contains none of the above. There is no analytics SDK, no crash-reporting SDK, no advertising SDK, no advertising identifier, and no App Tracking Transparency prompt, because there is nothing to ask for. What the app stores on your device — the player record, the solved puzzles, the downloaded images and your settings — is what the game needs to run, and it stays on the device. This is set out in § 8b of the [privacy policy](https://snapshots-quiz.app/privacy/).

## 7. Regional notes

- **EU/EEA:** ePrivacy Directive 2002/58/EC and the GDPR; non-essential storage requires prior opt-in consent. In Germany § 25 TDDDG governs the device access itself.
- **United Kingdom:** PECR and the UK GDPR; prior consent for non-essential cookies.
- **United States:** analytics use here is neither a "sale" nor "sharing" under the CCPA/CPRA, because nothing is passed on for cross-context behavioural advertising. Global Privacy Control is honoured regardless.
- **Canada:** PIPEDA; meaningful consent, implied only where the purpose is obvious and the data not sensitive.
- **Brazil:** LGPD; consent for non-essential storage.

## 8. Changes

We update this policy when a tag is added, removed or renamed. The "Last updated" date at the top reflects the latest revision.

## 9. Contact

DigitalFreedom Global LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States — hello@digitalfreedom.co.za, data protection: data-protection@digitalfreedom.co.za, <https://data-protection.digitalfreedom.co.za>.

---

© 2025–2026 DigitalFreedom Global LLC. All rights reserved.
