This is a draft. It has not been reviewed by a lawyer, and every bracketed placeholder below has to be filled in before the site takes a single euro. Delete this note once both are done.
What runs whatever you answer
Three things, none of which measure you, and all of which the site cannot work without.
cube_identity — a cookie that ties a hold, the payment that follows it and the cube it produces to the same browser, so the cube you paid for is handed to you and not to somebody else. It carries a random id signed by our server and nothing about you. It is httpOnly, so no script can read it, here or anywhere else. It lasts one year. Without it you can look at the Cube and you cannot buy one.
cube_admin — a cookie set only when the operator signs into the back office, and only on that person's browser. httpOnly, eight hours.
the-cube.consent — not a cookie: one word in your browser's local storage, remembering whether you accepted or refused the measurement below. It exists so the question is only asked once. Refusing is stored exactly like accepting.
What runs only if you accept
Measurement, through a Google Tag Manager container that loads one tag and nothing else: Google Analytics 4. The container itself sets no cookie — it is a loader, and what it loads is the only thing that writes anything. GA4 sets two, both first-party, both on this domain:
_ga — tells one browser apart from another, so somebody who comes back tomorrow is counted as a returning visit and not as a second person. Thirteen months.
_ga_<MEASUREMENT ID> — holds the state of the visit you are in, so a page opened after a pause is not counted as a fresh arrival. Thirteen months.
Neither carries your name, your address, or anything you typed into this site. No advertising feature is enabled on the property: Google Signals is off, ads personalisation is off, no _gcl_* cookie is set, and nothing measured here reaches an advertising product.
The container is held back by Google Consent Mode, and the default is refusal. That default is written into the page before the container is allowed to start, so nothing is measured and no cookie is set while you have not answered, or after you have said no.
What it is for: counting visits, and seeing which layers of the Cube people reach and where they stop. What it is not for: advertising. We sell cubes and nothing else, and no data from this site is sold or handed to an advertiser.
Fraud prevention is the one signal left on regardless — refusing it would break the payment it protects, and it stores nothing that identifies you across sites.
Changing your mind
Use the control at the foot of this page. It flips the same switch the banner does, takes effect immediately, and can be used as often as you like. Refusing after having accepted stops the measurement from that moment; it cannot retrieve what was already counted, and Google's own cookies stay on your machine until you or your browser clear them.
Stripe
Payment is handled by Stripe. When the payment form loads, Stripe sets its own cookies from its own domain, mainly to detect fraud. We cannot read them, payment does not work without them, and they are governed by Stripe's own privacy policy at https://stripe.com/privacy.
Blocking them yourself
Your browser can block or delete every one of them from its own settings, and it always wins over anything on this page. Blocking cube_identity leaves you free to look at the Cube and unable to buy a cube in it.
Contact
Questions about this page: contact@getthecube.xyz. See also the Terms of Sale and Use.