Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites recognize you on return visits and remember your preferences. Cookies are widely used to make websites work more efficiently and provide better user experiences.

2. How We Use Cookies

Popcorn CMS uses cookies in two categories: essential and non-essential.

3. Essential Cookies (Always Active)

Essential cookies are required for Popcorn CMS to function properly. These cookies are necessary for authentication, security, and core functionality. You cannot disable these cookies without affecting service functionality.

• Authentication & Session Cookies: Managed by Auth0, these store session information to keep you logged in and authenticated
• CSRF Protection: Prevents cross-site request forgery attacks
• User Preferences: Remember settings like dark mode, language, and layout preferences
• Load Balancer Cookies: Google Cloud Load Balancer uses cookies to distribute traffic efficiently

4. Non-Essential Cookies (Requires Consent)

Non-essential cookies are optional and used to enhance your experience. We only load these cookies after you provide explicit consent via our cookie banner.

• Google Places API: When you consent, we load the Google Places JavaScript library to enable address autocomplete functionality in forms. This cookie allows Popcorn CMS to:
  • Autocomplete addresses as you type in address fields within dynamic content forms
  • Convert addresses to geographic coordinates (latitude/longitude) for location-based content
  • Enable mapping and location features on published sites using the stored geographic data
• Future Analytics (if enabled): If we add analytics in the future, these would be non-essential and require consent

5. Third-Party Cookies

We may use cookies from third-party services we integrate with:

• Auth0: Authentication provider (essential cookies for login)
• Google Cloud: Infrastructure provider (load balancing, CDN)
• Stripe: Payment processor (for billing and checkout)
• Google Places: Address autocomplete (non-essential, requires consent)

These third parties have their own cookie policies. We recommend reviewing their privacy policies for details on how they use cookies.

6. Managing Your Cookie Preferences

Consent Banner: When you first visit Popcorn CMS, a cookie consent banner appears at the bottom of your screen. You can:

• Accept: Allow non-essential cookies (Google Places API will load)
• Reject: Decline non-essential cookies (address autocomplete will not be available)

Browser Settings: You can also control cookies through your browser settings:

• Chrome
• Firefox
• Safari
• Edge

Note: Disabling essential cookies may prevent Popcorn CMS from functioning properly, including preventing you from logging in or using core features.

7. How Long Do Cookies Last?

Session Cookies: Deleted when you close your browser

Persistent Cookies: Stored on your device and remain until they expire or you manually delete them (typically 1 month to 1 year)

Consent Preference Storage:Your cookie preference is currently stored in your browser's local storage on this device and remains until you clear browser storage or update your preference.

8. Google Places API and Your Data

When you consent to non-essential cookies and use address autocomplete:

• Your typing is sent to Google Places API in real-time for suggestions
• Google may collect usage data according to their privacy policy (see Google Privacy Policy)
• The address and coordinates you select are stored by Popcorn CMS for content management
• This data is used only to provide location-based features in your content

9. GDPR and Cookie Consent

Popcorn CMS complies with GDPR cookie requirements. We only load non-essential cookies (Google Places) after you explicitly consent. Essential cookies are exempt from consent requirements because they are strictly necessary for the service to function.

Users in the EU have the right to withdraw cookie consent at any time by clearing their browser cookies or contacting us at stesmi+popcorn@gmail.com.

10. Do Not Track (DNT)

While Popcorn CMS respects Do Not Track browser signals, we cannot guarantee that all third-party services (Auth0, Google, Stripe) honor DNT requests. Please review their privacy policies for more information.

11. Contact Us

If you have questions about our cookie policy or want to withdraw consent, please contact:

Email: stesmi+popcorn@gmail.com