Draft for administrator review — this text is not approved and must not be treated as final legal advice.
Cookies and embedded media
Version 1 · DRAFT
Necessary first-party storage
The store uses first-party cookies required for passwordless account sessions, security and cart continuity. These are not used to build third-party advertising profiles.
A separate first-party SameSite=Lax preference records whether this device may load embedded media. Refusing it does not prevent shopping, account creation, checkout or direct store-hosted video.
YouTube and Vimeo
Before consent, an embedded video shows a poster, its provider and an accessible load action. The store does not preload a YouTube or Vimeo iframe, script or connection merely because the product page is opened.
After the visitor chooses to load it, YouTube or Vimeo may receive the IP address, device information and interaction data under that provider’s terms. Consent can be withdrawn by clearing or changing the media preference.
Direct media and changes
Images and direct product video delivered from GirlsCodeToo-controlled storage do not require third-party embed consent, although ordinary server security and delivery records may still be processed.
This notice is versioned with the other legal documents. A substantive content change creates a new draft and invalidates the previous approval until an Entra-authorised administrator records a new decision.