LEGAL
Privacy & Cookie Policy
Information about the cookies and similar technologies used by mmshopydevs.com.
1. Introduction
This policy explains what this website stores on your device, what we measure, and how you control it. It applies to https://mmshopydevs.com and is written to describe what the site actually does, not what a generic template says.
The short version: we set no cookies at all unless you accept analytics. Everything the site needs to function is kept in your browser's own storage, is never sent to us, and contains nothing that identifies you.
2. What are cookies?
A cookie is a small file a website asks your browser to keep and send back on every later request. Because it travels with each request, it can be used to recognise a browser over time.
Browsers also offer two other stores, localStorage and sessionStorage. They stay on your device and are never transmitted automatically. This site uses those rather than cookies for everything it controls itself, which is why declining analytics leaves you with no cookies from us at all.
3. What are scripts?
A script is code the site runs in your browser to make it work, like opening the menu, validating the newsletter field, remembering your cookie choice. Our own scripts are served from our own domain. The only third-party script this site can load is Google Analytics, and only after you accept it.
4. What is a web beacon?
A beacon is a small message a page sends to a server to record that something happened, without loading a tracking image or setting a cookie. We use first-party beacons to our own domain to count page views, conversions and reading time.
These beacons carry no identifier for you. They report the page path, the site language, whether the window is phone, tablet or desktop sized, the domain that referred you, and whether this is the first page of the visit. They are added to daily totals, so a visit cannot be reconstructed or traced back to a person.
5. Cookies and storage we use
We group what the site stores by what it is for.
5.1 Technical and functional
Necessary for the site to behave correctly, and used regardless of your analytics choice. This includes remembering the cookie choice itself, and knowing whether a page view is the first of a visit. None of it is shared with anyone.
5.2 Statistical
Our own measurement: page views, which links and forms are used, and roughly how long a page is read. First-party, cookieless, aggregated into daily totals with no identifiers. If you accept analytics, Google Analytics also runs and does set cookies.
5.3 Advertising
If you arrive from a Google Ads click, and only after you accept analytics, we store the click identifier from the URL so we can tell which campaigns lead to enquiries. It is stored for 90 days and holds nothing about you beyond that click. Before you accept, it is held in memory only and is discarded when you close the tab.
5.4 Marketing and tracking
We run no advertising network, no retargeting pixels, no social tracking and no tag manager on this site. Nothing here builds a profile of you or follows you to other websites.
6. What is stored, exactly
Complete list. Anything not on it, we do not use.
Our own storage (no cookies, never transmitted)
| Name | Retention | Purpose |
|---|---|---|
| mm_consent | Until you clear it | Remembers whether you accepted or declined analytics |
| mm_s | Until the tab closes | Marks the first page view of a visit, so visits are not double counted |
| mm_attr | Until the tab closes | Remembers how you arrived (source, campaign, landing page) so an enquiry can be credited |
| mm_adclick | 90 days | Google Ads click ID, stored only after you accept analytics |
Google Analytics, only if you accept (set by Google)
| Cookie | Duration | Purpose |
|---|---|---|
| _ga | 2 years | Distinguishes browsers to count visits |
| _ga_* | 1 year | Keeps session state for the property |
Team only, on /admin and /tools
| Name | Retention | Purpose |
|---|---|---|
| tools_pw | Until sign out | Keeps a signed-in team member signed in. Never set for visitors |
| tools_user | Until sign out | The signed-in team member's name, shown in the CMS |
| tools_role | Until sign out | Whether that account is an editor or an admin |
| tools_pic | Until sign out | Their profile picture URL, shown in the CMS |
7. Consent
Analytics runs only if you accept it. Until you choose, no analytics cookies are set and no advertising click ID is stored. Declining is a real refusal, not a reduced form of tracking: the Google Analytics script is never loaded at all.
Our own cookieless measurement runs either way. It counts pages, not people, and holds nothing that could identify you, which is why it does not require consent.
8. Manage and delete
You can change your mind at any time using the button below. It clears your stored choice and asks again on the next page.
You can also clear cookies and site data for this website in your browser's settings, which removes everything described here. Blocking all cookies is possible in every browser, though it may affect other sites more than this one.
9. Information you send us
Everything above is about your device. This section is about the details you type in, and the one thing we record without you typing it.
The contact form
We receive your name, email address, company, store URL and message, together with the language of the page you used. We use them to answer you, and for nothing else: no marketing list, no profiling, no sale or sharing with anyone for their own purposes.
We also record, automatically, the country, region, city and IP address the enquiry was sent from. That comes from the network connection itself, resolved by our host at the moment you press send; no third-party location service is involved and nothing is placed on your device to obtain it. It tells us which market an enquiry comes from and helps us recognise automated spam. It is not used to identify you personally, and it is not combined with the analytics described above.
The newsletter
We receive your email address and the language of the page you subscribed from. It is used to send the newsletter and to nothing else. Every email carries an unsubscribe link, and unsubscribing deletes the address.
Why we are allowed to hold it
For the contact form: because you asked us to get in touch, which the GDPR treats as steps taken at your request before entering a contract, and for the location and IP, our legitimate interest in knowing where our enquiries come from and in keeping the form free of automated abuse. For the newsletter: your consent, which you can withdraw at any time.
How long we keep it
Enquiries: for as long as the conversation is live, and up to 24 months afterwards so we can pick up a thread that resumes. Newsletter subscriptions: until you unsubscribe. Ask us to delete either sooner and we will.
Who else sees it
Our website and forms run on Netlify, which stores form submissions and delivers the notification email to us; Netlify is a US company and handles data under the European Commission's standard contractual clauses. If you accepted analytics, Google processes that separately, as described above. Nobody else receives what you send us.
10. Your rights
Under the GDPR you may request access to, correction of, or deletion of personal data we hold, object to processing, or request that we transfer it to you. Our own site measurement holds no personal data, so there is usually nothing to retrieve; requests about data you sent us through a form or by email are handled in the normal way.
If you accepted Google Analytics, Google processes that data as described in its own policies, and you can withdraw consent here at any time.
11. Contact
This website is owned and operated by MM Shopy Devs S.L., Barcelona, Spain.
For anything about this policy or your data, email info@mmshopydevs.com or use our contact page.