Cookie Policy
AI-Powered Event Decor, Designed in Seconds
Effective Date: June 10, 2026
Last Updated: July 13, 2026
Poppy Blum LLC | Minnesota, United States
Relationship to our Privacy Policy
Cookie and storage practices are summarized in Section 8 of our Privacy Policy. This Cookie Policy provides a dedicated, detailed list of the technologies we use on poppyblum.com so you can understand what is stored on your device and how to control it.
1. What Are Cookies and Similar Technologies?
Cookies are small text files placed on your browser or device when you visit a website. Similar technologies include local storage, session storage, and pixels. We use these technologies to operate Poppy Blum, keep you signed in, prevent abuse, process payments, and (when enabled) understand how the product is used.
We advertise Poppy Blum on other platforms. With your permission, we use advertising and marketing cookies to measure whether those ads work. These are described in Section 2 and Section 3.
Two things must both be true before any advertising cookie is set: advertising must be switched on for the Service, and you must choose Accept all in our cookie banner. If either is not true, including any period when we are not running ads, no advertising cookie is set and none of the providers below are loaded at all. We disclose them here in advance so this policy is accurate before, not after, the fact.
2. Cookie Categories We Use
We group technologies into the following categories:
- Strictly necessary: required for authentication, security, or core product functionality you request.
- Functional: support payments and authenticated product features.
- Analytics: help us understand usage and improve the Service when analytics are enabled in our production environment.
- Advertising and marketing: let us measure the performance of ads we run on other platforms, for example by recording that a signup followed an ad. These are set by Google Tag Manager and the conversion tags it loads (Meta, Google Ads, Pinterest), and may be used by those providers to build a profile of your interests and show you relevant ads across other sites.
Analytics and advertising cookies are optional and are governed by a single choice in our cookie banner: choosing Accept all enables both, and Reject all enables neither. Strictly necessary and functional cookies are always on, because the Service cannot run without them.
3. Cookies We Use
We group the cookies set on poppyblum.com by category and provider. Exact cookie names and durations vary by provider, browser, and configuration.
Category
Provider
Purpose
Category
Provider
Purpose
Category
Provider
Purpose
Category
Provider
Purpose
Category
Provider
Purpose
Category
Provider
Purpose
Category
Provider
Purpose
| Category | Provider | Purpose |
|---|---|---|
| Strictly necessary | Supabase Auth (first-party) | Maintains your authenticated session after sign-in. |
| Strictly necessary | Stripe (third-party, on hosted checkout) | Fraud prevention and payment processing when you use Stripe Checkout or the Customer Portal. |
| Analytics | Third-party analytics (when enabled) | Session identifiers and analytics state when analytics are enabled. |
| Advertising and marketing | Google Tag Manager (Google) | Loads the conversion tags below. GTM is a tag container: it sets no advertising cookies by itself, but it is the mechanism that delivers the tags that do. Loaded only after you Accept all. |
| Advertising and marketing | Meta (Facebook / Instagram) conversion tag | Measures whether a signup followed a Meta ad, and may be used by Meta to attribute conversions and show you relevant ads on its platforms. |
| Advertising and marketing | Google Ads conversion tag | Measures whether a signup followed a Google ad, and may be used by Google for conversion attribution and ad personalization. |
| Advertising and marketing | Pinterest conversion tag | Measures whether a signup followed a Pinterest ad, and may be used by Pinterest for conversion attribution and ad personalization. |
What we send to advertising providers: when you accept advertising cookies, we record a sign-up conversion event after you confirm your email. We do not send your event designs, canvas boards, shopping lists, or payment details to any advertising provider.
Fonts:We use Next.js font optimization to self-host all fonts locally. No requests are made to Google's font CDN.
Sentry: Our error-monitoring SDK may use browser storage to associate error reports with a session. We configure Sentry with sendDefaultPii: false on the web app. See sentry.io/privacy.
4. localStorage and sessionStorage
These are not cookies, but they store data in your browser. Under ePrivacy and GDPR transparency rules, we list them here because they affect your device.
Type
Purpose
Sent to Poppy Blum servers?
Type
Purpose
Sent to Poppy Blum servers?
Type
Purpose
Sent to Poppy Blum servers?
Type
Purpose
Sent to Poppy Blum servers?
Type
Purpose
Sent to Poppy Blum servers?
| Type | Purpose | Sent to Poppy Blum servers? |
|---|---|---|
| localStorage | Offline draft backup of in-progress canvas work. | No. Server autosave uses a separate authenticated checkpoint. |
| localStorage | Stores your cookie choice (accept or reject) for the optional analytics and advertising categories. | No. |
| sessionStorage | Records that the sign-up conversion event has already been sent, so a page reload does not count you twice. Written only if you accepted advertising cookies. | No. |
| sessionStorage | Session-only recovery of your intake form if a generation fails mid-submit. | No. |
| sessionStorage | One-time status message after a successful generation. | No. |
5. What We Do Not Use
- Advertising cookies for anyone who has not accepted them (reject, and none are set);
- Any advertising or analytics technology before you make a choice in the cookie banner;
- Affiliate tracking cookies (affiliate programs are not active as of the Last Updated date above).
We also do not sell your personal data, and we never share your event designs, canvas boards, shopping lists, or payment details with an advertising provider.
6. Legal Basis and Consent
Strictly necessary and functional cookies described above are used based on our legitimate interest in operating a secure, functional service and, where applicable, to perform the contract you request (e.g., keeping you signed in, processing a payment).
Analytics cookies are used only when analytics are enabled in our production environment. Our third-party analytics provider captures page views, page-leave events, UI interaction autocapture, and custom product events (such as generation started/completed and tier). Analytics events are not linked to your email by default.
Advertising and marketing cookies are used only with your consent. We show a cookie banner on your first visit. Neither the analytics provider nor the Google Tag Manager container (and therefore none of the Meta, Google Ads, or Pinterest conversion tags) loads until you choose Accept all. Choosing Reject all means none of them are ever loaded and no advertising or analytics cookie is set.
A single choice governs both optional categories. You can change it anytime via Cookie settings in the site footer, or by emailing hello@poppyblum.comwith “Cookie Opt-Out.” Your preference is stored locally in your browser, so clearing site data will make the banner appear again.
7. How to Manage or Delete Cookies
7.1 Browser controls
Most browsers let you block, delete, or be notified about cookies. Instructions vary by browser. Check your browser's help documentation for “cookies” or “site data.” Blocking strictly necessary cookies will prevent you from signing in or using paid features.
7.2 Clear site data
To remove Poppy Blum localStorage and sessionStorage keys, clear site data / storage for poppyblum.com in your browser settings. This may remove draft recovery data and your analytics preference.
7.3 Analytics and advertising opt-out
The fastest way to opt out is Cookie settings in the site footer. Choose Reject all and we stop loading the analytics and advertising tags. You can also email hello@poppyblum.comwith “Cookie Opt-Out” in the subject line, and we will document your preference and, where technically feasible, exclude your visits going forward.
7.4 Third-party opt-outs
Rejecting in our banner stops us from loading these providers at all. If you have already accepted, or want to limit ad personalization on the providers' own platforms, use their controls:
- Google (Ads, Tag Manager): adssettings.google.com and policies.google.com/technologies/partner-sites
- Meta (Facebook / Instagram) ad settings: facebook.com/adpreferences/ad_settings
- Pinterest privacy settings: pinterest.com/settings/privacy
- Stripe: stripe.com/privacy
Industry opt-out tools let you opt out of many advertising networks at once: optout.aboutads.info (Digital Advertising Alliance), optout.networkadvertising.org (Network Advertising Initiative), and youronlinechoices.eu (Europe).
7.5 Global Privacy Control
We honor the Global Privacy Control (GPC) signal. GPC is a setting in some browsers and extensions that tells every site you visit not to sell or share your personal information. If your browser sends it, we treat it as a rejection: analytics and advertising cookies stay off, and we do not show you the cookie banner, because you have already answered. See globalprivacycontrol.org to turn it on.
GPC takes priority over an earlier choice made in our banner. If you accepted cookies here and later switch GPC on, the newer signal wins and we stop loading the optional tags.
8. Changes to This Cookie Policy
We may update this Cookie Policy when we add features, integrations, or storage technologies (for example, affiliate tracking or a cookie consent tool). We will update the “Last Updated” date and, for material changes, notify registered users by email where appropriate. The current version is always posted at poppyblum.com/cookie-policy.
9. Contact Us
Questions about cookies or this policy? Email hello@poppyblum.com with the subject line “Cookie Policy Inquiry.” For broader privacy rights, see our Privacy Policy (Section 9).