The consent banner and Consent Mode v2
If you visit from the European Economic Area, the United Kingdom or Switzerland, a banner asks on your first visit whether we may use Google Analytics, and analytics stays off until you accept. Elsewhere, analytics runs by default and you can turn it off at any time with the Cookie settings link in the footer or a Global Privacy Control signal. We implement Google Consent Mode v2: analytics and advertising storage default to denied before any Google script loads, and onlyanalytics_storage is switched to granted. We never enable ad storage, ad user data, or ad personalization. Your choice is saved in your browser under qbank-analytics-consent; the region used to decide whether to show the banner is saved under qb_consent_region.
Cookies and storage we use
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
sb-*-auth-token (and sb-* helpers) | Supabase | Essential | Keeps you signed in and protects your session | Session to about 1 year; cleared on sign-out |
qbank-analytics-consent | QueBank (localStorage) | Essential | Remembers whether you accepted or declined analytics | Until you clear it |
qb_consent_region | QueBank | Essential | Remembers whether your region requires opt-in consent for analytics | 180 days |
qbank_marketing_attribution | QueBank (localStorage) | Essential / attribution | Stores the UTM parameters and referrer from the link you arrived on so a purchase can be credited to a campaign | Until you clear browser storage |
_ga, _ga_* | Google Analytics | Analytics (consent only) | Distinguishes visitors and sessions for aggregate usage statistics; set only after you accept | _ga: 2 years; _ga_*: 2 years |
sentry-* / sentryReplaySession (sessionStorage) | Sentry | Essential (reliability) | Ties error reports and masked replays to one browser session so we can fix bugs | Session |
__vercel_* (e.g. __vercel_live_token, BotID challenge tokens) | Vercel | Essential (security) | Bot detection on checkout and password reset; edge routing | Minutes to session |
__stripe_mid, __stripe_sid | Stripe | Essential (payments, fraud prevention) | Set by Stripe inside the payment form to prevent fraud | Session to 1 year |
Vercel Analytics and Speed Insights are cookieless. Names and lifetimes set by third parties can change; we update this table when we notice a change.
Changing your choice
Open (also in the footer of every public page) to re-open the banner and accept or decline. Declining after accepting stops new Google Analytics data at once; you can remove existing _ga cookies in your browser settings. Blocking essential cookies will sign you out and break checkout.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a decline: the banner does not appear and analytics stays off unless you open Cookie settings and explicitly accept.
Questions
See the Privacy Policy for how analytics data is used, or email support@que-bank.com.