COOKIE POLICY
Last updated: 2026-09-16
In compliance with article 22.2 of Spanish Law 34/2002 of 11 July on information society services and electronic commerce (LSSI), we inform you that this website uses cookies (small files of information that the server sends to the device of whoever accesses the page).
Other than those that are strictly necessary, we install no cookie before you give us your consent.
TYPES OF COOKIES USED BY THIS WEBSITE:
We distinguish between first-party cookies (those we install ourselves under the wairo.io domain) and third-party cookies (those installed by an identified provider that supplies a service to us).
Cookies on wairo.io (the public site)
Technical or necessary cookies
These are essential for the site to work: keeping you signed in, protecting the site against automated access and enabling payment. They are exempt from consent under article 22.2 LSSI. If you disable them in your browser, the site will not work correctly.
| NAME | OWNER | PURPOSE | DURATION |
|---|---|---|---|
__session | First party (Clerk), domain wairo.io | Keeps you signed in. The cookie lasts one year; the token it contains is renewed automatically every few minutes. | 1 year |
__session_8Edli9C4 | First party (Clerk), domain wairo.io | Same purpose as above. The suffix identifies the authentication instance. | 1 year |
__client_uat | First party (Clerk), domain .wairo.io | Indicates whether a session is active and since when, so it can decide whether to renew it. Being on the main domain, it is the same cookie on the public site and in the panel. | 1 year |
__client_uat_8Edli9C4 | First party (Clerk), domain .wairo.io | Same purpose as above. The suffix identifies the authentication instance. | 1 year |
__refresh_8Edli9C4 | First party (Clerk), domain wairo.io | Allows the session to be renewed without signing in again. | 1 year |
__client | First party (Clerk), domain .clerk.wairo.io | Holds the rotating client token with which Clerk identifies this browser to its authentication service. | 1 year |
clerk_active_context | First party (Clerk), domain wairo.io | Determines which account or context is active. | Session |
__cf_bm | Third party: Cloudflare, Inc. (via Clerk), domain .clerk.wairo.io | Distinguishes people from automated access and protects the authentication service. | 30 minutes |
_cfuvid | Third party: Cloudflare, Inc. (via Clerk), domain .clerk.wairo.io | Temporarily identifies the client in order to apply security limits. | Session |
__stripe_mid | Third party: Stripe Payments Europe, Ltd. | Payment fraud prevention. Installed only in the cart and on the payment screen, not anywhere else on the site. | 1 year |
__stripe_sid | Third party: Stripe Payments Europe, Ltd. | Fraud prevention during the payment session. Installed only in the cart and on the payment screen. | 30 minutes |
wairo_consent | First party | Stores your decision about cookies (accepted or rejected) so we do not have to ask again on every page. | 6 months |
Functional cookies
These remember a preference you chose yourself. They are not essential for the site to work — without them you would see the default language instead of yours — which is why they are listed apart from the technical ones, although they are likewise exempt from consent under article 22.2 LSSI: they do no more than store a choice you made explicitly. Each domain has its own and they are not shared: the public site's and the panel's are different cookies.
| NAME | OWNER | PURPOSE | DURATION |
|---|---|---|---|
NEXT_LOCALE | First party | Remembers the language you chose, so the site is shown in it when you return. | 1 year |
bo_locale | First party, domain studio.wairo.io | Remembers the language chosen in the panel. A different cookie from the public site's. | 1 year |
Cookies on studio.wairo.io (the operator and photographer panel)
The management panel is served from its own domain, studio.wairo.io, and therefore has its own consent: a decision you make on wairo.io does not carry over to the panel, or the other way round. The cookies are not the same either.
| NAME | OWNER | PURPOSE | DURATION |
|---|---|---|---|
__session | First party (Clerk), domain studio.wairo.io | Keeps the operator or photographer signed in. | 1 year |
__session_8Edli9C4 | First party (Clerk), domain studio.wairo.io | Same purpose as above. The suffix identifies the authentication instance, which is the same one the public site uses. | 1 year |
__refresh_8Edli9C4 | First party (Clerk), domain studio.wairo.io | Allows the session to be renewed without signing in again. | 1 year |
__client_uat | First party (Clerk), domain .wairo.io | Indicates whether a session is active and since when. Being on the main domain, it is the same cookie as the public site's. | 1 year |
__client_uat_8Edli9C4 | First party (Clerk), domain .wairo.io | Same purpose as above, and likewise shared with the public site. | 1 year |
__client | First party (Clerk), domain .clerk.wairo.io | Holds the rotating client token with which Clerk identifies this browser to its authentication service. | 1 year |
clerk_active_context | First party (Clerk), domain studio.wairo.io | Determines which organization is active when an account belongs to several. | Session |
__cf_bm, _cfuvid | Third party: Cloudflare, Inc. (via Clerk), domain .clerk.wairo.io | Protect the authentication service against automated access. | 30 minutes / Session |
wairo_consent | First party | Stores your decision about the panel's cookies. Independent of the public site's. | 6 months |
wairo_studio_ga, wairo_studio_ga_PZW2ZMW3Z6 | Third party: Google Ireland Ltd. | The panel's analytics cookie: distinguishes users in order to measure, in aggregate, how it is used. Installed only if you accept the panel's analytics cookies; if you reject them, nothing from Google is loaded. It carries a different prefix from the public site's, so they are separate identifiers. | 2 years |
The panel sets no NEXT_LOCALE (that one belongs to the public site) and no Stripe cookie at all: photos are not bought in the panel, and payout account onboarding (Stripe Connect, on /settings and /billing) is displayed inside a frame hosted by Stripe. Any cookies Stripe sets there are Stripe's own and live on Stripe's domains, not on studio.wairo.io, so they are not listed in this table.
Analytics cookies
They help us understand how the site is used. They are switched off by default and you can change this whenever you want.
We use Google Analytics 4 (Google Ireland Ltd.). Nothing from Google is loaded until you accept this category: if you reject it, the script is not even downloaded. We never send it your email, your name, or identifiers for your account, your profiles, your orders or your galleries: page addresses are sent as a template (for example /o/[organizationId]/selfie), never with the real identifier.
| NAME | OWNER | PURPOSE | DURATION |
|---|---|---|---|
wairo_web_ga, wairo_web_ga_LPKC8QBMN5 | Third party: Google Ireland Ltd. | Analytics cookie: distinguishes users in order to measure, in aggregate, how the site is used. Installed only if you accept analytics cookies; if you reject them, nothing from Google is loaded at all. The name carries a per-site prefix, so the public site and the panel never share an identifier. | 2 years |
Acceptance of the cookie policy
The first time you visit the site we show you a notice at the bottom of the screen with two equally accessible options, Accept and Reject, and a Configure link for choosing by category. We install no analytics cookie until you choose.
Continuing to browse without choosing does not count as acceptance: the notice stays until you make a decision.
You can change your mind at any time through the Cookie settings link in the footer. Withdrawing consent is as easy as giving it.
When we update this policy in a way that affects the cookies we install, we will ask you again.
How to change cookie settings in your browser
You can restrict, block or delete cookies through your browser. The procedure differs in each one: