Cookies are small values stored by a browser. Similar technologies include local storage, pixels, and software-development kits. This policy calls all of them “cookies” when they serve a similar purpose.
Localized website pages load Google Tag Manager container GTM-552HBMTS. The container is a delivery mechanism for measurement and marketing tags; the tags configured inside it determine which additional providers, browser storage, and events are used.
Secure email handoffs under /auth do not load the container. Account and checkout features separately use strictly necessary cookies for authentication, security, fraud prevention, and keeping a requested session working. GTM tags must never collect passwords, payment fields, license keys, recovery inputs, or other member content. Non-essential tags must not run where consent is required until the corresponding consent control is available.
Strictly necessary
Required for security, authentication, checkout, load balancing, and remembering privacy choices. These cannot be switched off through a consent tool because the requested service would not work reliably without them.
Preferences
Remember optional choices such as language or interface settings. Used only when the feature needs them.
Analytics
Help us understand page performance and aggregate usage. Optional and off until the required consent is available.
Marketing and attribution
Measure a campaign or referral. Optional and controlled by consent where required. Advertising trackers are not permitted inside the signed-in account.
Where optional cookies are available, the site presents controls to accept, reject, or change categories. Withdrawing consent must be as easy as granting it.
You can also delete or block cookies in browser settings. Blocking necessary cookies can prevent account or checkout functions from working.
We honor browser-based opt-out signals such as Global Privacy Control where applicable law requires them. A signal does not disable cookies strictly necessary to deliver a feature you request.
Cookie names, providers, purposes, and durations must be listed in the live consent manager before optional tracking is enabled. Session cookies expire when the session ends; persistent cookies remain only for the period stated in that inventory or until you delete them.
We update this policy when cookie use changes. Material changes are reflected in the revised date and, where needed, a new consent request.
Questions: privacy@popcornsecurity.com. For the broader picture, read our Privacy Policy.