1. Overview
Cookies are one type of technology we use. We may also use similar browser storage (such as local storage) for application state where cookies are not appropriate. On Exhibo, the practical impact for most visitors is small: one cookie to stay signed in, one to remember your city filter, and additional cookies only when you pay through Stripe or pass through Cloudflare security checks.
3. How we use cookies
Strictly necessary
These cookies are required for the site to function. Without them you cannot log in, complete checkout, or maintain a secure session. We do not need your consent for strictly necessary cookies under UK PECR where they are essential to a service you request.
Functional
Functional cookies remember choices you make — such as your preferred city — to save you from re-selecting filters on every page. They are not essential but improve usability.
Analytics
We use Google Analytics 4 (measurement ID G-6BY06WWLM5, or the ID set in deployment configuration) to understand aggregate traffic — for example which city hubs and catalogue pages are popular. Google may set first-party analytics cookies and collect device/browser signals under Google's terms. You can opt out with browser controls or Google's Analytics opt-out add-on.
4. Cookie inventory
The table below lists cookies and cookie-like technologies commonly encountered on Exhibo:
| Name | Category | Purpose type | Description | Typical duration |
|---|---|---|---|---|
| exhibo_session | Essential | Authentication | Maintains your signed-in session for gallery, museum, collector, or admin accounts. | Session cookie; extended on activity (typically up to 30 days) |
| exhibo_city | Functional | Preferences | Remembers your selected city filter (Dubai, London, All, etc.) across catalogue pages. | 1 year |
| __stripe_mid, __stripe_sid, and related Stripe cookies | Essential (checkout) | Payment / fraud prevention | Set by Stripe during subscription billing, press package checkout, or artwork purchase to complete payment and detect fraud. | Per Stripe’s cookie policy (typically up to 1 year) |
| Cloudflare __cf_bm, cf_clearance (if proxied) | Essential / security | Security and bot management | Used by Cloudflare to distinguish humans from bots and protect the site from abuse. | Short-lived (minutes to hours) |
| _ga, _ga_*, _gid (Google Analytics 4) | Analytics | Site traffic measurement | Set by Google Analytics to distinguish visitors and sessions for aggregate reporting (property G-6BY06WWLM5 unless overridden). | Up to 2 years (_ga); shorter for session/day cookies |
5. Third-party cookies
Some cookies are placed by services we embed or route traffic through:
- Stripe — processes subscription, press, and artwork payments; sets fraud-prevention and session cookies during checkout.
- Cloudflare — may set security cookies when traffic is proxied for performance and DDoS protection.
- Google Analytics — measures aggregate site usage; see Google’s privacy and cookie policies for details.
These providers act as independent controllers or processors under their own privacy and cookie policies. We do not control their cookie lifetimes or purposes beyond what is needed to integrate their services.
6. Managing your preferences
Browser controls
Most browsers allow you to refuse or delete cookies through settings. Blocking all cookies will prevent login and checkout from working. Consult your browser's help pages for instructions (Chrome, Safari, Firefox, Edge, and others each provide cookie management tools).
City preference
To reset your city filter without clearing all cookies, select All in the global city navigation — this clears the exhibo_city cookie — or delete that cookie manually in your browser's storage inspector.
Sign out
Logging out ends your server-side session. You may also delete the exhibo_session cookie to remove local session state.
7. Legal basis
Under UK GDPR and the Privacy and Electronic Communications Regulations (PECR), we rely on essential-service necessity for strictly necessary cookies and, where applicable, consent for non-essential cookies. Our Privacy Policy describes the broader legal bases for processing personal data collected via cookies.
8. Contact
Questions about this Cookie Policy: privacy@exhibo.art