Cookies at this bridal boutique in Chelsea: two keys of ours, the rest only if you say yes.

01Three categories, and only one of them runs without asking

A cookie is a small file a site writes into your browser so it can recognise something on the next page load. Local storage does the same job with a longer memory. This site uses both, sparingly, and the difference between the categories is whether you had a say.

Strictly necessary

These are set with no consent because the site cannot do its job without them. There are two. The first records what you chose on the cookie banner, under the key site_consent_v2 — without it, the banner would ask you the same question on every page, which is its own kind of rude. The second is the support chat token, written only once you open the chat and send a message, so that closing the tab and coming back shows the same conversation instead of a blank one. Neither is used for advertising and neither is read by anybody outside the salon.

Analytics

Aggregate counting: how many people reached the silhouette index, how many opened the appointment page, how far down a page they got before leaving. It tells us whether the crepe column section is being read or ignored. It runs only after you press Allow, and it is governed by the analytics_storage signal. Decline and we are left with the server log, which counts requests and knows nothing about you.

Advertising

Google Ads and Microsoft Advertising bring paid traffic to this bridal shop in NYC every week. The advertising cookies exist to connect a click that cost money to an inquiry that arrived afterwards, and to stop the same ad being shown to somebody who has already booked. They are governed by ad_storage, ad_user_data and ad_personalization, and not one of them is written before you allow storage.

We run no social widget, no embedded video player, no font that phones home beyond the Google Fonts stylesheet, and no live chat from a third-party vendor. The chat on this site is ours and talks to our own server.

02Every cookie and storage key, named

The first two rows are always present. Everything below them appears only after Allow, and disappears from your browser when you withdraw. Lifetimes for the platform cookies are set by the platform, not by us, and we quote their published maximums.

If you find a key in your browser on spinabride.us that is not in this table, that is a defect and we want to hear about it. Send the name to [email protected] and we will either explain it or remove it.

03The click identifiers that arrive with a paid visit

Google Ads and Microsoft Advertising run traffic to this site now, and Meta Ads may send visitors from Facebook and Instagram too. Somebody searching for wedding dresses in New York, or for a bridal boutique in Chelsea, may well land here through one of those paid ads rather than through a search result we did not pay for.

Each platform bolts a parameter onto the end of the link it sends you through:

• gclid from Google Ads, and occasionally wbraid or gbraid on iOS traffic.
• msclkid from Microsoft Advertising, which is what Bing search ads use.
• fbclid from Meta Ads, on Facebook and Instagram.

The parameter is not a cookie. It rides in the page address, and it is the thing that lets a platform match the click it charged us for against the inquiry that came in ten minutes later. When advertising storage is denied, the parameter still sits in the URL — we cannot strip what the platform attached — but nothing writes it to your device and no identifier is built from it on this site. Delete it out of the address bar if you want it gone. The page behaves identically.

What we do not do with any of this: build a custom audience out of the people who fill in the inquiry form, upload an email address or a phone number to a platform for matching, or run a retargeting pixel that shows you a gown across the rest of the internet for the next month. A bride who is deciding on a silk crepe column does not need to be chased.

04Consent Mode v2 and the four signals

This site implements Google Consent Mode v2. Before you touch the banner, on the very first request, all four signals are set to denied:

• ad_storage — denied
• ad_user_data — denied
• ad_personalization — denied
• analytics_storage — denied

In that state no advertising or analytics cookie is written at all. Any tag that loads runs cookieless, which means it can send an anonymous aggregated ping and nothing that identifies you or your device.

Press Allow and the four are updated to granted at that moment, and the tags start writing the cookies listed in the table above. Press Decline, or allow today and withdraw next week through Cookie settings, and every one of the four is set back to denied immediately. There is no grace period and no "we will stop at the end of the campaign". The signal flips, the tags see it, the storage stops.

Global Privacy Control is treated as a decision already made. If your browser sends the Sec-GPC header, the four signals stay denied, no advertising identifier is written, and we do not pester you with the banner in the hope of a different answer.

05Giving permission, and taking it back

The banner sits along the bottom of the page on your first visit. It does not cover the content, it does not block the site, and there is no page behind it waiting for you to agree before you can read about the appointment. Two buttons: Allow and Decline. Both are the same size and neither is hidden behind a settings screen.

Closing the banner without pressing either is not consent. Scrolling is not consent. Continuing to browse is not consent. Nothing beyond the strictly necessary keys is written until you press Allow with your own finger.

To change the answer afterwards, use Cookie settings in the legal row at the foot of every page on this site, or the button in the at-a-glance panel further up this page. Pressing it clears the stored choice, sets the four Consent Mode signals back to denied and brings the banner back so you can answer again. The record of your choice expires by itself after 12 months, at which point the banner returns anyway.

You can also clear cookies and site data for spinabride.us in your browser settings, which has the same effect from our side: the stored answer is gone, so the banner asks again. Every current browser lets you block third-party cookies outright, and if you do, the platform cookies in the table never appear regardless of what you press here.

06What breaks if you decline: nothing you came for

Decline and the site works exactly as it does for everyone else. Every page loads. The silhouette index shows its photographs, the appointment steps read the same, the inquiry form sends and a stylist answers it, the phone number still dials, and the support chat still opens and holds your conversation because its token is strictly necessary rather than advertising.

What stops is measurement. We lose the ability to tell which campaign your visit came from, so a click we paid for looks identical to one we did not. Analytics counts you only in the server log, which sees a request and a timestamp. The ad platforms receive no conversion for you, which means they keep showing our ads to people like you rather than learning not to.

That is our problem, not yours, and it does not change a thing about the appointment. The 90 minutes are the same, the rail is the same, and the price basis is the same one confirmed in the salon. We do not withhold a feature, a discount or a booking slot over a cookie choice, and doing so would be unlawful under California law in any case.

07The platforms' own documents

Once a platform receives data it handles it under its own terms, which we do not control and cannot change. Read them at the source rather than taking our summary for it:

• Google Ireland Ltd / Google LLC — privacy policy at policies.google.com/privacy, and how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
• Microsoft Ireland Operations Ltd — the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd — the Meta privacy policy at facebook.com/privacy/policy.

None of those companies has reviewed, approved or verified SPINA Bride, this website or the gowns on the rail. They sell advertising space and we buy some of it. Anyone who tells you a platform endorses a bridal shop is selling something else.

Our own side of the story — what the inquiry form records, the legal bases, the retention periods and the route to a data request — is on the privacy notice. The booking terms, including the 48-hour reschedule window and the 7-day inspection at collection, are on the terms page.

08Asking about one specific cookie

If you want to know why a particular key is in your browser, write to [email protected] with the name of it. A stylist will find out and answer; if the answer is that it should not be there, we say that too and remove it. Phone +1 646-630-7052 during appointment hours if you would rather ask out loud, and post reaches us at 132 10th Ave, New York, New York 10011, United States.

Questions about cookies are answered on the same clock as a data request: within 10 days. Complaints go to your state Attorney General, and in California also to the California Privacy Protection Agency. Visitors reaching the site from Europe may complain to the supervisory authority where they live.

This notice takes effect on 30 September 2026. When the inventory changes — a tag added, a tag dropped, a lifetime altered by a platform — the table above is edited and the effective date moves with it.