1. Default state
Optional services are denied by default. Rejecting them does not block the core website. We do not use a consent choice to create an advertising profile.
Cookies are small values stored by a browser. Similar technologies include local storage and access to information on a device. A server-side service that neither stores nor reads information on a visitor’s device is not a cookie-banner service merely because it appears in our private dashboard.
2. Necessary storage
volumekeys_privacy_choices_v6 is local storage that records the selected service switches, consent version and time for up to 180 days. It is necessary to remember and enforce your choice. The entry is replaced when you save a new choice and removed when it is invalid or expired.
Two further entries are created only when you request the corresponding function. volumekeys-language is session storage that remembers the language you selected until you close the tab. volumekeys.demo.output-pair-names.v1 is local storage that keeps the names you enter in the interactive menu demonstration on this device for up to 180 days after the last change. Neither is used for measurement or sent to us. You can delete both through your browser controls.
3. Studiomood Intelligence
Status: active after explicit opt-in. When you select SI, studiomood_si_analytics_session_v1 can store a random 128-bit pseudonymous session identifier and expiry time in local storage. The identifier is accepted for no more than 180 days; a later consented measurement replaces it after expiry, and withdrawal removes it where local storage is available.
The SI browser script is served from VolumeKeys. It does not place an analytics cookie. It sends the events listed in the privacy policy to a same-origin endpoint only after consent.
Consented SI events and sessions are stored in the existing VolumeKeys Cloudflare D1 database. Scheduled weekly maintenance applies a 400-day cutoff, so records are deleted on the next scheduled run after crossing that cutoff. Successful recurring production-run evidence remains a verification requirement.
vk_hero_surface_180d can store which of two homepage designs was shown and its expiry time for up to 180 days only while SI is enabled and selected. Without that active service and consent, the design is chosen only for the current page view and is not stored. The entry contains no user identifier, profile or behavioural history and is removed when SI consent is withdrawn.
4. Cloudflare Web Analytics
Status: prepared and disabled. The Cloudflare dashboard currently labels the VolumeKeys site entry “Automatic setup”, but the website flag is off and the enforcing Content Security Policy does not currently permit the beacon domains. Activation requires a future consent-version increase, a VolumeKeys-specific site tag, a consent-only dashboard setup and an explicit opt-in.
Cloudflare states that this service does not use cookies or local storage. It remains a separate switch because connection and measurement data is sent to Cloudflare. Cloudflare documents seven days of unsampled Web Analytics data and a ten-percent sample available for six months.
5. Google Analytics and advertising
Google Analytics 4 loads only after its separate opt-in. _ga and _ga_* can distinguish browsers and sessions for up to 180 days under our configuration.
Google Ads and Meta identifiers are not configured on the date shown below. If enabled later, Advertising consent can allow _gcl_*, _gcl_au, _fbp and _fbc for attribution and audiences. Recognizable first-party copies are expired when Advertising consent is withdrawn.
6. YouTube
The local poster creates no YouTube connection. No production YouTube video ID is currently configured. If configured later, the privacy-enhanced YouTube player will load only after External media consent and a play request. YouTube or Google may then set or read its own identifiers depending on your browser and account state.
7. Server-side connectors, legacy storage and checkout
Server-to-server dashboard connectors for account or aggregate data do not by themselves set a VolumeKeys website cookie, load a website script or access a visitor’s device. They are described in the privacy policy rather than added as dummy cookie services.
The daily crawler aggregates described in the privacy policy are server-side measurements. They do not store or read information on a visitor device and therefore are not a cookie-banner service.
The former first-party analytics client and collection endpoint are disabled. If a browser still sends __Host-vk_analytics_session, __Host-vk_ab_session or __Host-vk_ab_variant from an earlier consent, the website expires those cookies on the next request. Historical consented records remain in the same D1 store and internal report until the existing retention routine deletes them. SI activation does not restart their retention period.
The live checkout URL is not configured and the website does not preload a Lemon Squeezy checkout. If checkout is enabled later, a deliberate Buy action can open the requested hosted checkout. That top-level request and the provider’s necessary storage are used to perform the requested transaction, not as a background website measurement service.
Optional providers can process data outside the EEA. The relevant safeguards and recipients are described in the privacy policy.
8. Change or withdraw your choice
You can reject all optional services or select each service individually. Withdrawing a loaded service reloads the page so future requests stop. A new service or material purpose change requires a new consent version.
Browser controls can also delete cookies and local storage. Blocking necessary storage means the site may ask for your choice again on a later page view.