1. What these technologies are
Cookies are small text records a website can store in a browser. Similar browser storage and request identifiers can perform related functions. Some expire when the browser closes; others remain until their expiry or deletion.
2. What CRI8 uses
- Administrator session cookie: authenticates authorised staff, supports security controls and expires according to the configured session period. It is marked Secure, HttpOnly and SameSite.
- Cart or continuity storage: where enabled, remembers a visitor’s cart or a non-sensitive workflow reference so the requested journey can continue.
- Analytics preference: local storage key
cri8_analytics_consentremembers “accepted” or “declined” so we respect the visitor’s choice. It remains until browser data is cleared or the preference is changed. - Security and network data: hosting and security systems may process an IP address, request headers and short-lived identifiers to deliver pages, enforce rate limits and detect abuse.
Session, cart and security storage is necessary to provide a requested service or protect the platform. Optional analytics does not run until the visitor chooses “Allow analytics”.
3. Analytics and third parties
If allowed, CRI8 sends page paths and internal-link activity to a same-origin, privacy-minimised endpoint that rejects direct identifiers. The event does not include a user or advertising identifier, name, email address, phone number, form data or customer reference. No third-party advertising or cross-site behavioural tracker is currently enabled. If we introduce third-party analytics, embedded media or advertising technology, we will update this notice and present required controls before activation.
4. Your controls
You can inspect, block or delete cookies in browser settings. Blocking essential storage may prevent admin login, cart continuity or other requested features. “Do Not Track” signals have no uniform legal or technical standard; because we do not currently run behavioural advertising, there is no advertising profile to alter in response.
Contact Create Cri8 through our contact form. Put “Privacy request”, “Refund request”, or “Legal notice” in the subject so it reaches the correct team. Do not send passwords, card details, identity documents, or other unnecessary sensitive information.