Transparency & Tracking Disclosure

Cookie Policy

VERSION 2.5•EFFECTIVE DATE: OCTOBER 2026•GRANDLINE STUDIO

This Cookie Policy explains how Grandline Studio (“we”, “us”, or “our”) uses cookies and similar local storage technologies when you visit our website, interact with our interactive project scoper, or access the Client Operating System.

Attribution & Telemetry
We utilize Meta Pixel attribution for campaign tracking and privacy-first cookieless Vercel Web Analytics.
Strict Security Cookies
Cookies are used strictly for session authorization, CSRF protection, and multi-tenant portal integrity.
Client Control
Full autonomy to clear, disable, or inspect stored tokens directly via your browser developer tools.

01.What Are Cookies & Storage Technologies?

Cookies are small text files placed on your computer, smartphone, or tablet when you browse websites. Similar technologies include HTML5 LocalStorage, SessionStorage, and cryptographic tokens used by modern web browsers to remember your preferences, keep you logged into secure workspaces, and ensure network safety.

02.Categories of Cookies We Use

Under global privacy directives (EU ePrivacy Directive, GDPR, and California CPRA), we classify all stored keys into three distinct functional categories:

A. Strictly Necessary & Security Cookies

Mandatory

These cookies are essential for you to navigate our website and securely access authenticated areas, such as the Client Portal and Administrative Cockpit. Without these cookies, services like cryptographic session locking and client authentication cannot be provided.

B. Functionality & Preference Storage

User Controlled

These storage keys remember your interface preferences (such as Dark/Light theme mode, currency display selection in USD/INR, and completed onboarding walkthrough states) so you do not have to reset them each time you visit.

C. Technical Performance & Edge Telemetry

Anonymized

Used by our edge routing layer (Vercel Edge Network) and performance monitors (Vercel Web Analytics & Speed Insights) to detect latency, cache edge assets globally, balance traffic, and verify Core Web Vitals using a privacy-friendly, cookieless telemetry model.

D. Campaign Attribution & Social Marketing Telemetry

Attribution

Used in connection with Meta Pixel (ID: 1080353144709918) to measure inbound engagement from our Instagram and Facebook creative showcases, verify page views, and optimize campaign delivery. We do not sell this data or share it with data brokers.

03.Specific Cookies & LocalStorage Inventory

Below is an itemized audit of the exact keys set within the Grandline Studio domain:

Key NameCategoryProviderPurposeDuration
grandline_session_liveNecessaryGrandlineFirst-party session cookie verifying active browser presence; enforces 15m idle security timeout.Session
_fbpAttributionMetaFirst-party browser identifier stored by Meta Pixel to measure site visits and campaign delivery.90 Days
_fbcAttributionMetaClick identifier set when arriving via Instagram or Facebook ads containing an fbclid query parameter.90 Days
sb-*-auth-tokenNecessarySupabaseCryptographic JWT session token for authenticated client and administrative portal access.~7 Days
veyra_auth_profile_sessionNecessaryGrandline (Local)Secures authenticated client/staff identity within the multi-tenant portal state.Session / 15m idle
veyra-themePreferenceGrandline (Local)Stores high-contrast dark or light interface preference to prevent flash of unstyled theme.1 Year
veyra_preferred_currencyPreferenceGrandline (Local)Stores manual currency override (USD, INR, EUR, GBP) for project scoper and proposals.Persistent
grandline_portal_tour_seen_*PreferenceGrandline (Local)Tracks completion state of the interactive client onboarding walkthrough modal.Persistent
__cf_bm / _vercel_jwtSecurityVercel EdgeEdge DDoS mitigation, bot defense, and serverless compute token verification.30 Minutes

04.Third-Party Telemetry & Analytics Services

We maintain a strict disclosure standard regarding third-party technology integrations:

  • Meta Pixel (Meta Platforms, Inc.): We integrate Meta Pixel (Dataset ID: 1080353144709918) to evaluate the reach of our Instagram and Facebook campaigns and attribute inbound inquiries. Meta Pixel drops first-party cookies (_fbp, _fbc) to track page visits and referral channels. You can adjust your Meta advertising settings directly via your Facebook Ad Preferences .
  • Vercel Web Analytics & Speed Insights: We employ Vercel's privacy-first analytics suite to monitor frontend latency and Core Web Vitals (LCP, CLS, INP). These services operate completely cookieless and do not collect or store persistent personal identifiers.
  • Google Fonts & Media CDNs: Typography assets are downloaded at build time and self-hosted on our own edge infrastructure. No external runtime connections or cookies are exchanged with Google Fonts servers.

05.How to Manage, Block & Delete Cookies

You maintain total control over stored cookies. You can adjust your browser settings to decline all cookies, receive a warning before a cookie is stored, or delete cookies already on your device:

  • Chrome / Brave: Settings → Privacy and Security → Cookies and other site data
  • Safari: Preferences → Privacy → Manage Website Data
  • Firefox: Options → Privacy & Security → Cookies and Site Data

*Please note that disabling strictly necessary cookies may disable authenticated features within the Grandline Client Portal and Administrative Cockpit.

06.Contact Regarding Cookie Governance

If you have questions regarding our cookie practices or technical privacy implementations, contact our engineering privacy leads:

Entity: Grandline Studio