Cookie Policy
What cookies and similar technologies Makr3D uses for authentication, security, preferences, OAuth, payments, analytics and marketing measurement.
Last updated
1. Scope
This Cookie Policy explains the cookies and similar technologies Makr3D uses, why they are used, and which of them require your consent. It covers the public Makr3D website and the seller dashboard.
2. What cookies are
Cookies are small files placed on a device. Similar technologies include local storage, session storage, pixels, scripts and identifiers used by browsers, payment providers, authentication providers or analytics tools. They can be first-party, set by Makr3D, or third-party, set by a provider such as Clerk or Stripe.
3. Launch cookie categories
| Category | Purpose | Examples | Consent position |
|---|---|---|---|
| Strictly necessary | Authentication, sessions, account access, CSRF protection, security and route protection. | Clerk session and authentication cookies, security tokens, request-protection identifiers. | Needed to provide the service. Usually no opt-in consent required under UK PECR. |
| Seller preferences | Remembering dashboard UI choices and reducing repeated setup friction. | Sidebar open/closed state and similar interface preferences. | Treated as service preference storage. Can be cleared in the browser. |
| OAuth and integrations | Completing secure third-party connection flows. | Etsy OAuth state and PKCE verifier stored temporarily in an httpOnly cookie. | Needed to complete the seller-requested integration connection. |
| Payments and fraud prevention | Payment setup, card storage, checkout, fraud prevention, dispute handling and payment security. | Stripe cookies or identifiers during Stripe-hosted or Stripe-powered payment flows. | Needed for payment and fraud-prevention services. Stripe's own terms may also apply. |
| Analytics | Aggregate site and product usage measurement, referrer reporting and funnel measurement. | Plausible analytics and Google Analytics tags or events. | Consent required. Google Analytics is not exempt under UK PECR. Plausible is cookieless and aggregate-only, which may fall within the narrow statistical exemption; we treat it as consent-based regardless. |
| Marketing measurement | Measuring campaign performance and creator/seller sign-up funnels. | Reddit Pixel and Google Ads page visits and sign-up conversion events. | Consent required. Advertising measurement is never strictly necessary and cannot be set on the basis of browser settings alone. |
| Error monitoring | Finding and fixing production errors, crashes and performance issues. | Sentry event identifiers, logs or similar diagnostics depending on runtime configuration. | Used for service security and reliability. |
4. Advertising and marketing cookies
Makr3D uses conversion-measurement scripts — Reddit Pixel and Google Ads tags — to understand whether creator and seller campaigns are working. These are not strictly necessary, so under UK PECR they require your consent before they are set.
We are rolling out a consent control in which rejecting is as easy and as prominent as accepting, and in which nothing non-essential is pre-enabled. Until it is live you can object at any time by emailing [email protected] and we will stop processing your data for advertising measurement.
Makr3D does not use retargeting, cross-site behavioural advertising or audience-building, and does not use buyer data from a seller's store for any marketing purpose.
5. Third-party providers
Some cookies or similar technologies are provided by third-party services we use to run Makr3D, including Clerk, Stripe, Etsy during authorised connections, Plausible, Google Analytics, Reddit and Sentry. These providers may process data under their own terms for security, fraud prevention, payment compliance, analytics, campaign measurement or service delivery. The Subprocessor List explains the main providers.
6. Managing cookies
Browser settings are not a substitute for consent, and we do not treat them as one. For analytics and marketing measurement you can object at any time by emailing [email protected], and a consent control offering equally prominent accept and reject options is being rolled out.
You can also control cookies through your browser, but blocking strictly necessary cookies may stop sign-in, checkout, dashboard access, OAuth connections or security controls from working.
6a. The Shopify embedded app
Inside the Shopify admin, the Makr3D app authenticates every request with a fresh Shopify session token and does not rely on third-party cookies or on browser storage for sign-in, so it works with third-party cookies blocked and in private browsing.
We are removing analytics and advertising scripts from this surface so that the embedded app loads only what is strictly necessary to run it.
7. Changes
We may update this policy when providers, scripts, analytics, payment flows or consent requirements change.