Draft. This page has not yet been reviewed by a lawyer and must be before launch — read it as a statement of intent, not as final legal wording.

Legal

Cookie policy

Last updated 17 September 2026.

1. The short version

PrePro Selects sets three cookies, all of them to keep someone signed in, and keeps a handful of entries in your browser's local storage for the same reason. None of them tracks you, none of them is shared with anyone, and none of them exists on the public pages of this website — a visitor who reads the pricing page receives no cookie at all.

Article 22.2 of the Spanish Information Society Services Act (Ley 34/2002, LSSI) and Article 5(3) of the ePrivacy Directive exempt storage that is strictly necessary to provide a service the user has explicitly asked for. That is why this site shows no consent banner: there is nothing to consent to. Spain's data protection authority, the AEPD, still expects exempt cookies to be described somewhere. This page is that description.

2. Cookies we set

Cookies set by PrePro Selects
Name	Set when	What it does	Lifetime
`sl_staff`	You sign in to the admin app	Keeps your staff session alive. It holds a refresh token that renews the short-lived access token the app works with	30 days, or until you sign out or revoke the session from the app
`sl_guest`	You sign in to a client gallery with the details a production company gave you	Keeps your gallery session	14 days, or until the login is revoked or you sign out
`sl_preview`	A staff member opens "preview as client"	Lets the preview load images the way a read-only client would	2 hours

All three are first-party, strictly necessary, HttpOnly (JavaScript cannot read them) and SameSite=Lax (they are not sent when another site loads our resources). Each is set on the host you signed in to — preproselects.com or a customer's own gallery domain — and never shared between them.

3. Browser storage

Local storage is data your browser keeps for one site only. Ours is never read by another site and is only ever sent to PrePro Selects, with the request it belongs to.

Local storage entries
Key	Where	What it holds	Kept
`sl.token`	Admin app	The one-hour access token that authenticates your requests after you sign in	Until you sign out; replaced each time it is renewed
`sl.g.<workspace>.<project>`	Client gallery	Your gallery session token, so a reload does not ask for the password again	Until you sign out or the login expires
`sl.name.<workspace>`	Client gallery	The first name you typed at "Who is looking?", so you are not asked twice	Until you clear the site's data
`sl.g.<workspace>.<project>.q`	Client gallery	Votes and notes made while the connection was down, waiting to be sent	Until they have been sent

4. What we do not use

No analytics cookies — no Google Analytics, Matomo, Plausible or anything like them. What we know about traffic comes from our own web server logs, kept 14 days.
No advertising or retargeting pixels, no tag manager, no A/B-testing snippet, no session recording, no heat maps.
No third-party fonts, scripts or content delivery networks on any page: every file a page loads comes from preproselects.com.
No embedded video players from YouTube, Vimeo or anyone else.
No consent-management platform, because none is needed.

If any of that changes — if we ever add an analytics tool, for instance — this page changes first, and a consent request appears before the tool does, not after.

5. Embedded galleries

A gallery placed inside a customer's own website with our embed script sets no cookie in your browser. Its session is a token that the embedding page holds and passes with each request; images are fetched through short-lived signed links. Anything the customer's own site stores in your browser is that site's doing and is described in its own cookie notice, not this one.

6. How to remove them

Signing out deletes the session cookie and the token in local storage. Every browser also lets you delete the cookies and site data of preproselects.com from its privacy or site-data settings, and lets you block cookies for the site altogether. If you block them you will not be able to sign in to the app or to a gallery; the public pages work without any cookie.

7. Changes and contact

When this page changes we update the date at the top. Questions about it go to privacy@preproselects.com. How we handle personal data more generally is in the privacy policy.

Last updated 17 September 2026. See also the privacy policy and the legal notice.