Skip to content
Cookies and consent
Priority: secondary operational/legal UX — implement with a consent management platform (CMP) such as Cookiebot, Osano, OneTrust, or similar if you use non-essential cookies or trackers.
Last updated: April 29, 2026
This page supports implementation of a cookie banner consistent with PIPEDA (meaningful consent for non-essential tracking where required) and GDPR for visitors from the EEA/UK. It is not a substitute for configuring your CMP correctly or listing every cookie your stack sets.
1. Suggested banner copy (English)
Use variants as needed (short vs. detailed link).
Short notice
We use cookies and similar technologies to run our site, remember preferences, and measure traffic. By clicking Accept all, you agree to non-essential analytics as described in our Cookie notice and Privacy policy. You can change your choices anytime via Cookie settings.
Buttons: Accept all · Reject non-essential · Cookie settings
Longer notice (expandable)
Cookies. We use cookies that are essential for security and basic functionality. With your consent, we also use analytics and marketing pixels to understand how our Site is used. Third-party providers may process data per their policies—for example Google Analytics, Meta (Facebook pixel), and tools loaded via Shopify Web Pixels.
Your choices. Essential cookies cannot be turned off here. You may accept or reject non-essential cookies. You can withdraw consent later.
See our Privacy policy for retention and rights.
2. Categories to disclose in “Cookie settings”
| Category | Purpose | Typical examples |
|---|---|---|
| Strictly necessary | Security, load balancing, consent storage, session | Auth cookies, CSRF, CMP consent string |
| Functional | Remember preferences (language, region) | Preference cookies |
| Analytics | Measure visits, funnels, errors | GA4, Plausible, etc. |
| Marketing | Attribution, remarketing | Ads pixels — only if used |
3. Implementation checklist
- Inventory scripts (tag manager, embedded chat, analytics, video embeds).
- Block non-essential scripts until consent (CMP default deny where required).
- Link to Privacy policy and optional dedicated cookie list page at https://brickspacelab.com/cookies.
- Log consent versions for GDPR accountability if EU traffic is realistic.
- Refresh inventory when adding tools (new analytics, heatmaps, CRM embeds).
4. Do Not Track
Browsers’ “Do Not Track” signals are not uniformly standardized. Describe your approach in the Privacy Policy (many sites state they do not respond to DNT but offer CMP controls).
5. Shopify storefront vs marketing site
Cookie rules apply to your marketing website. Shopify storefronts used by merchants have their own merchant obligations (merchant is often controller). Clarify roles: Brickspace Lab’s Site vs merchants’ stores.