Cookie Policy

1. What are cookies?

Cookies are small files stored by your browser when you visit a site. They allow us to recognise you on subsequent visits and may be used for authentication, preferences, analytics or marketing. This policy also covers similar technologies (localStorage, pixels, beacons).

2. Cookie categories used

The site uses three categories. Analytics and marketing cookies activate only after your explicit consent via the banner.

A. Necessary cookies (always active)

Essential for the site to work. They cannot be disabled. They require no consent under the ePrivacy Directive.

• bb_consent_v1 (localStorage) · Beardly Brands · stores your consent preferences so we don't ask on every visit · 12 months.

B. Analytics cookies (optional)

Help us understand how the site is used so we can improve it. Activated only if you press "Accept all" or tick "Analytics" in preferences.

• _ga · Google Analytics 4 · distinguishes unique users · 2 years.
• _ga_<ID> · Google Analytics 4 · keeps session state · 2 years.

C. Marketing cookies (optional)

Enable conversion measurement and optimisation of our Google Ads campaigns (e.g. recognising that you arrived from an ad and submitted the form). Activated only if you press "Accept all" or tick "Marketing" in preferences.

• _gcl_au · Google Ads · cross-device conversion attribution · 90 days.
• _gcl_aw · Google Ads · click-through conversion attribution · 90 days.
• IDE / test_cookie / NID · doubleclick.net (Google) · ad performance measurement and remarketing · up to 13 months.

3. Managing your consent

On your first visit we show a banner with three options: Accept all, Reject, Preferences (granular: Analytics and/or Marketing). Your choice is stored locally and applied immediately. You can change it any time:

• Clear site data in your browser (Settings → Privacy → Cookies / Stored data) — the banner will reappear on the next visit.
• Email [email protected] and we will revoke server-side consent where applicable.

We use Google Consent Mode v2: when you reject marketing/analytics cookies, Google receives only aggregated, anonymous signals — no personal identifiers.

4. International transfers

Google LLC processes analytics and conversion data on servers that may be located in the United States. Transfers rely on the EU-US Data Privacy Framework, to which Google is certified, plus Standard Contractual Clauses approved by the European Commission where required.

5. Third-party cookies

Cookies set by Google (Analytics, Ads, doubleclick.net) are "third-party" cookies — controlled by Google, not by us. Their policies:

• Google Privacy Policy · policies.google.com/privacy
• Google Ads Cookies · policies.google.com/technologies/ads

6. Contact

Questions about cookies or exercising GDPR rights? Email [email protected]. We reply within 30 days.