GALLERYLAB · 2026-10-03

Cookies and local storage

Pre-launch draft. Provider and processor details must be completed and legally reviewed before live subscription sales.

We use only storage needed for the service. There are no advertising cookies, analytics trackers or marketing profiles.

• gallerylab_session — HttpOnly session cookie, 7 days; sign-in state.
• gallerylab_oauth — HttpOnly, 10 minutes; Google sign-in protection.
• gallerylab.language — browser local storage; language preference until browser storage is cleared.
• gallerylab.language-return — temporary per-tab storage to restore your editor selection after a language switch; removed on return and ignored after 30 seconds.

Embedded visitor galleries need no sign-in or third-party cookies. Blocking language storage does not prevent walkthroughs. Google and Stripe apply their own privacy rules when you open their sites.

Using Save to shortlist stores only selected artwork IDs in this browser under gallerylab.shortlist:<exhibition>:<path>. They are not sent to the gallery. Remove selections individually or clear this site’s browser data; there is no automatic expiry. With storage blocked, the shortlist lasts only while the page is open.