Overview

Adments uses cookies and similar technologies to enable core functionality, improve user experience, and — because ads will run from launch — track marketing effectiveness. Cookies must be handled in compliance with UK GDPR, EU GDPR, and ePrivacy/PECR regulations.

1. Types of Cookies Used

Strictly Necessary (no consent required)
● Session cookies: Maintain user login across pages and enable dashboard access.
● Security cookies: Protect accounts and forms from misuse (e.g., CSRF, brute-force attempts).

Functional
● Preferences: Store language, role, and region selections.
● “Remember me”: Allow users to stay logged in between visits.
● Payment cookies (Stripe): Required for subscription checkout, Apple Pay, and Google Pay.

Analytics (consent required in UK/EU)
● Google Analytics 4 (GA4): Used to track traffic, conversions, feature engagement, and user drop-off points. IP anonymisation must be enabled.
Marketing (consent required in UK/EU)
● Meta (Facebook) Pixel: Tracks user visits, conversions, and enables retargeting + lookalike audiences.
● TikTok Pixel: Tracks conversions from TikTok ads, supports retargeting and audience building.
● Google Ads Pixel (optional, future use): For tracking paid search campaigns.

2. Consent Management

● A cookie consent banner must be shown to EU/UK visitors.
● Banner includes: Accept All, Reject All, Manage Preferences.
● Non-essential cookies (Analytics, Marketing) must remain blocked until explicit consent is given.
● Consent must be logged and stored anonymously for audit purposes.
● Geo-targeting: Visitors outside EU/UK should not see the consent banner (to avoid unnecessary friction).

3. User Control

● Users must be able to revisit preferences at any time (e.g., “Cookie Settings” link in footer).
● Declining cookies should not prevent access to core features (sign-up, profiles, messaging, subscriptions).

4. Implementation Guidance

● Use Complianz Pro as the Consent Management Platform (CMP).
● Integrate with Stripe (payment cookies always allowed).
● Integrate with GA4, Meta Pixel, and TikTok Pixel — ensure they only fire after consent.
● Provide auto-generated Cookie Policy and integrate with the Privacy Policy.
● Manage all tracking scripts through Google Tag Manager if possible (streamlined setup).

5. User-Facing Disclosure (for Policies)

● Cookie Policy page must list:
○ Type (Necessary, Functional, Analytics, Marketing).
○ Purpose (e.g., “Keeps you logged in” / “Tracks page visits” / “Supports ad retargeting”).
○ Example cookies (e.g., __stripe_mid, _ga, _fbp, _ttp).
○ Whether consent is required.
● Policies must clearly state that Adments does not sell personal data and that cookies can be controlled in browser settings.