Every cookie and record this site declares.
Talea’s own cookies and browser records, and Google’s for optional analytics. Payment runs on Paddle’s hosted checkout — Paddle is the Merchant of Record. One category is optional. Some storage is not yet verified; it is listed below as open, not guessed.
Each record is used only when its feature runs — signing in, social sign-in, a cart, a cookie choice. Not every visitor has every record. Counts here are declared entries, not the number of cookies in any one browser.
Last updated 23 October 2026 · Inventory v3
Checking your saved choice…
Analytics is off until it’s confirmed.
What optional analytics does.
Optional analytics covers two providers: Google Analytics (GA4), and Talea’s own campaign reporting. Its purpose is understanding which campaigns bring visitors and purchases. Nothing is measured until your acceptance has been saved.
- Google Analytics counts page views and how visitors move through the site.
- If a tagged link brings you to any page — a product page included — Talea’s service records its generic campaign label against a random identifier for this browser.
- That first campaign stays with this browser as you move around the site, including into checkout. A later tagged link does not replace it.
- When you sign in, that first campaign can be linked to your Talea account. When payment for an order from this browser is confirmed, the order can be linked to the same campaign.
- A purchase means a confirmed, paid order — not opening checkout or pressing a payment button.
- Signing in does not give permission. Only accepting analytics does.
- Your choice applies to this browser. Signing in on another device or browser does not carry the campaign over.
- Refusing, withdrawing or a measurement failure never affects browsing, checkout, licences or access to your orders.
- Talea does not send its campaign-to-account or campaign-to-order links to Google or Meta, and sends no purchase event to Google.
- This site runs no advertising and no ad pixels.
Campaign reporting begins only after you accept. Before that, nothing about the campaign is saved. Talea does not count every visit or purchase from a campaign, and does not count unique people. A visit or purchase from a tagged link goes unreported if:
- You leave the tagged page before choosing.
- You refuse analytics.
- A blocker stops the measurement scripts.
- Your browser clears its cookies before you sign in or buy.
- You buy on another device or browser.
How long each thing lasts.
Four purposes, four lengths — but they are connected. Campaign attribution, including any link to your account or a paid order, ends when the consent behind it ends, and is erased if you withdraw or ask Talea to erase your account’s attribution. Your orders, payments, invoices and licences are separate necessary records and stay available. Talea’s evidence of your decision outlasts the decision by six calendar months so it can show what you agreed to. Clearing your browser removes what is stored there, not what Talea’s service or Google holds. None of them keeps optional measurement running after you refuse.
- Your choice, in this browserUp to 6 calendar monthsEnds sooner if this notice changes materially, or if the browser clears its cookies. Then you are asked again.A cookie holding a random receipt identifier. The decision itself is held by Talea’s service.
- Campaign identity and its linksUntil 6 calendar months from capture, or until the consent behind it expires — whichever is earlierCovers the campaign and any link to your account or paid orders — none of it outlasts the identity or its consent. Removed when you withdraw, or when you ask Talea to erase your account’s attribution; the orders themselves are kept.Only exists if you accepted analytics. Clearing browser cookies removes the identifier here, not what Talea’s service holds until its deadline.
- Talea’s record of your decision6 calendar months after the decision expires, is replaced, is withdrawn or stops applying — whichever comes firstHolds the decision, its time, its expiry and the notice version — no IP address and no user agent. Records past their deadline are deleted daily.Kept so Talea can show what you agreed to, and when. This covers Talea’s consent evidence only: ordinary network requests, hosting logs and Google can still process an IP address.
- Google Analytics data2 months for event- and user-level dataThat limit is Google’s setting for individual-level data. It does not cover every aggregate report Google builds from it.Separate from Talea’s own records above; reset on new activity is off.
Strictly necessary
Signing in, social sign-in, keeping a cart, remembering your cookie choice and, during the private beta, remembering that your browser was admitted. Each is set because you used that feature — none of it measures you.
Switching these off would break the thing you came for: sign-in could not complete or would not hold between pages, a cart could not survive a reload, and the site could not remember a refusal.
- __Secure-authjs.session-tokenTaleaFirst-party cookie
On local HTTP: authjs.session-token. Long sessions may be split into numbered chunks (.0, .1…).
Keeps you signed in across pages so your licenses, orders and downloads stay reachable.
- What it stores
- An encrypted session containing your identity and backend tokens
- Kept for
- 30 days, renewed while you use the site; cleared when you sign out
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- __Host-authjs.csrf-tokenTaleaFirst-party cookie
On local HTTP: authjs.csrf-token
Stops another site from starting or completing a sign-in as if it were you.
- What it stores
- A sign-in protection token
- Kept for
- Until the browser session ends
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- __Secure-authjs.callback-urlTaleaFirst-party cookie
On local HTTP: authjs.callback-url
Brings you back to where you were — a product, your cart — once sign-in finishes.
- What it stores
- The page to return to after signing in
- Kept for
- Until the browser session ends
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- talea_social_flowTaleaFirst-party cookie · set by the server
Completes social sign-in safely: the reply is accepted only from the browser that began it. It is sent only to the sign-in callback address.
- What it stores
- A random handle for the social sign-in you just started, which only the browser that started it holds
- Kept for
- 10 minutes, and cleared as soon as the provider sends you back
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- talea_social_returnTaleaFirst-party cookie · set by the server
Brings you back to where you were — a product, your cart — after social sign-in. It is sent only to the sign-in callback address.
- What it stores
- The page to return to once social sign-in finishes
- Kept for
- 10 minutes, and cleared as soon as the provider sends you back
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- cartTokenTaleaFirst-party cookie
Keeps a cart together before you sign in.
- What it stores
- An identifier for an anonymous cart on Talea’s server
- Kept for
- Until the browser session ends; cleared when the cart merges into your account
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- talea.cart.v1TaleaLocal storage
Puts items back in your cart if restoring them to the server didn’t finish.
- What it stores
- Product identifiers waiting to be restored to your cart
- Kept for
- No fixed expiry while a retry is still needed; removed once restored, or when the server cart takes precedence
- Controlled by
- Talea
- Where it goes
- Stays in this browser.
- __Host-talea_consentTaleaFirst-party cookie · set by the server
On local HTTP: talea_consent
Lets the site look up your cookie choice so you are not asked on every page.
- What it stores
- An opaque random receipt identifier. Your decision, its time, its expiry and the notice you saw are held by Talea’s service — that consent evidence contains no IP address and no user agent.
- Kept for
- Up to 6 calendar months, matched to your decision
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified.
- __Host-talea_consent_denialTaleaFirst-party cookie · readable by the page
On local HTTP: talea_consent_denial
Coordinates your latest explicit choice across tabs and keeps analytics off until any positive choice is saved and confirmed. A late acknowledgement cannot overwrite a newer choice. It never grants permission to measure by itself.
- What it stores
- Exactly a random action identifier, the action and its analytics choice; no dates or analytics identifier
- Kept for
- 185 days from each explicit choice, using Max-Age=15984000 with no Expires timestamp. Reads, retries and background checks never renew it.
- Controlled by
- Talea
- Where it goes
- Sent to Talea’s origin with requests; not used for analytics.
- __Host-talea_consent_ackTaleaFirst-party cookie · readable by the page
On local HTTP: talea_consent_ack
Matches a confirmed positive action to the latest choice without changing that choice. It never grants permission to measure without a valid server receipt.
- What it stores
- Exactly the random identifier of your positively confirmed action; no dates or analytics identifier
- Kept for
- 185 days from an explicit positive choice confirmed by Talea’s service, using Max-Age=15984000 with no Expires timestamp. Reads, retries and background checks never renew it.
- Controlled by
- Talea
- Where it goes
- Sent to Talea’s origin with requests; not used for analytics.
- talea_beta_admissionTaleaFirst-party cookie · set by the server
Shows during the private beta that this browser was admitted with an invitation, so the storefront opens instead of the beta page. It is not used for analytics.
- What it stores
- An opaque random admission proof. Talea’s service holds the matching admission and its expiry; the cookie holds no invitation key, name or email address.
- Kept for
- 7 days from your admission, matching the deadline Talea’s service sets; using the site never extends it
- Controlled by
- Talea
- Where it goes
- Sent to Talea’s service with requests; not used for analytics. Hosting countries not yet verified.
Analytics
Google Analytics (GA4), plus Talea’s own campaign reporting — which campaigns bring visitors, accounts and paid orders. Off until you accept, and only switched on once your acceptance has been saved. Refusing changes nothing about how the shop works.
- _ga, _ga_*GoogleFirst-party cookies
Google Analytics counts manual page views on public pages. Account, sign-in, pairing and checkout pages are excluded. The cookies sit on Talea’s own domain, but Google is the external provider that processes what they measure.
- What it stores
- A random client identifier and the start time of your session
- Kept for
- Cookie: up to 6 calendar months, matched to your acceptance. Google keeps event- and user-level data for 2 months.
- Controlled by
- Where it goes
- Analytics requests go to Google, which can process your network IP address. Talea does not send Google your account or order links. Processing countries and transfer arrangements are not yet verified.
- __Host-talea_visitorTaleaFirst-party cookie · set by the server
On local HTTP: talea_visitor
Keeps the first campaign that brought this browser, from any tagged page, as you browse and check out. When you sign in, it can be linked to your Talea account; when payment for an order from this browser is confirmed, that order can be linked to the same campaign.
- What it stores
- An opaque random browser identifier. The generic campaign label, and any account or paid-order link you consented to, are held by Talea’s service.
- Kept for
- 6 calendar months from capture, or the expiry of the consent behind it — whichever is earlier. Removed on withdrawal or account-attribution erasure, together with any account or order links.
- Controlled by
- Talea
- Where it goes
- Talea’s service. Hosting countries not yet verified. Not shared with Google.
Not yet verified.
This disclosure is current, not complete. The items below have not been verified yet, so this page does not name their storage, lifetimes or countries. It will be updated when they are.
- Paddle hosted checkoutPaddle is the Merchant of Record — the seller and tax registrant for every order; Talea is the product supplier. Its hosted checkout may use its own storage when the payment step opens. Those names, purposes, lifetimes and transfers are not yet verified.
- Network edgeStorage set by the hosting network itself — for example, for security — has not been verified. None is listed by name.
- Hosting countriesThe countries where Talea’s service and its providers process data are not yet verified. No country is claimed here.
Cookies you will not find here.
- No advertising, retargeting or ad pixels, and no Meta integration.
- Talea does not sell personal data, and does not send its campaign-to-account or campaign-to-order links to Google or Meta. No purchase event is sent to Google.
- No social-media embeds or share widgets.
- No session recording, heatmaps, scroll tracking or A/B testing tools.
- No cookie wall: rejecting leaves browsing, the cart, checkout and your account fully usable.
- No fingerprinting to work around a refusal, and no dark-pattern nudge toward accepting.
Withdrawing is as easy as accepting.
Cookie settings sits in the footer at the bottom of every page that can use optional analytics, beside the privacy notice and cookie policy links — and the button below opens it from here. Email preference pages run no optional analytics, so they have none. Reopening it and pressing Reject all — or switching analytics off and saving — is the same effort as reopening it to accept.
Refusing, or switching off and saving, stops optional measurement straight away — before the change has even reached Talea’s service. If that save fails, analytics stays off on the page and the panel offers to try again. Where this browser accepts the refusal-protection cookie, later pages also keep analytics off until the save goes through; where the browser blocks it, the panel says so, and a reload may ask again. A failed save never switches analytics back on.
Accepting works the other way round: nothing is measured until Talea has saved your acceptance and read it back. Until then the panel says “Saving”, never “Saved”.
Withdrawing removes the optional links — the campaign, and its connection to your account and to any paid orders. It does not remove a purchase: your orders, payments, invoices and licences are necessary records, kept for their own purposes, and stay in your account.
Your choice is remembered in this browser for up to six calendar months. It ends sooner if this notice changes materially, or if the browser clears its cookies — private browsing and routine clearing both do that. Then you are asked again: Talea does not fingerprint browsers, and signing in does not restore a choice.
If your browser sends an opt-out signal (Global Privacy Control), analytics starts refused and the panel says so. You can still switch it on deliberately for this site. Every visitor, everywhere, sees the same panel at the same standard — there is no lighter regional version.
Your browser’s own settings can clear or block all of this, including the strictly necessary items. Blocking them will break sign-in and the cart — Talea has no way to work around that, and does not try to.