1. What this policy covers
This policy explains every cookie and similar storage technology used on the eSora Studio website (www.esoralabs.com), operated by eSora Labs Ltd. for its eSora Studio division. It is deliberately short, because this Site uses very little: two strictly necessary localStorage entries, and nothing else. There are no analytics cookies, no advertising cookies, no social-media pixels, no tag managers, and no third-party embeds that set cookies.
Cookie choices on this Site are separate from agreeing to our Terms of Use, and they apply to this website only — a choice made on a different eSora property does not carry over here, and vice versa.
2. The complete inventory
| Name | Category | Storage method | Purpose | Duration | Recipients |
|---|---|---|---|---|---|
| esora-consent | Strictly necessary | localStorage (your device) | Records your cookie choice: categories, timestamp, notice version, and whether it was set via Global Privacy Control. No unique identifier or fingerprint is created. | 12 months, then we re-ask | None — never leaves your device |
| esora-cfg | Strictly necessary | localStorage (your device) | Remembers your quote-configurator selections so the contact form can be pre-filled if you return to it. Cleared when you submit or reset the wizard. | Until you submit or clear it | None — never leaves your device |
| Analytics cookies | Optional — analytics | — | None currently deployed. | — | — |
| Marketing cookies | Optional — marketing | — | None currently deployed. | — | — |
Separately, the providers that serve the Site’s font and code files — Google Fonts, Fontshare, and jsDelivr — process standard connection data (IP address, user-agent) in their server logs to deliver those files. That is infrastructure logging, not a cookie, and we do not receive those logs. See the Privacy Policy, section 6.
3. Strictly necessary storage
Strictly necessary means the Site cannot honour your choices without it: the consent record is what stops the banner from reappearing on every page, and the quote draft is what makes the configurator useful across pages. Neither entry is accessible to us, neither is transmitted anywhere, and neither is used to identify, profile, or track you across sites. We do not classify analytics or advertising as “necessary”, and we never will.
4. Optional categories — currently none deployed
Our consent system offers two optional categories — Analytics and Marketing — and both are off by default. Honest status: we currently run neither. If we introduce analytics or marketing technology in the future, the script will be gated through the consent API so it cannot load unless you have affirmatively allowed the category, and this policy will be updated with the provider, purpose, and duration before it launches. Accepting an optional category today therefore changes nothing on the current Site — there is nothing for it to switch on — and rejecting it blocks nothing that does not exist.
Closing the consent banner, scrolling, or simply continuing to browse never counts as permission. When consent state is missing, invalid, expired, or unavailable, optional tracking stays off.
5. How to change or withdraw your choices
Withdrawal is as easy as acceptance — your privacy controls, in one place:
- Cookie settings control. Every page footer has a Cookie settings control that reopens the preference centre, where you can change or withdraw any optional category.
- First-visit banner. New visitors get a banner with three comparably prominent choices: Accept all, Reject optional, or Manage preferences.
- Browser controls. You can delete the stored entries at any time through your browser’s site-data settings, or send a Global Privacy Control signal (section 7).
If you withdraw an optional category after a future tool has run, the consent API stops the relevant tracking from that point on and removes storage we control; any associated deletion obligations are handled through the process on the Privacy Requests page.
6. Expiry and renewal
Your consent record lives for 12 months from the date you made the choice, after which the banner reappears and we ask again. If we change what a category means or add a new purpose, the notice version changes and your old record is treated as expired — new purposes never silently inherit old consent. If you rejected optional tracking, we will not pressure you: the banner only returns when the record expires or the notice genuinely changes.
7. Global Privacy Control
This Site honours the Global Privacy Control (GPC) signal. If your browser sends it and you have not already made a choice here, we treat it as “Reject optional”, record that choice, and show a brief notice telling you the signal was honoured. We treat GPC as an opt-out of optional tracking on this Site; it is not used as permission for anything else, and it does not affect the strictly necessary storage in section 3.
8. Changes and contact
We update this policy before any new cookie or storage technology is deployed. The version and dates at the top of the page identify the current published edition. Questions: info@esoralabs.com (attention: “Privacy”).