1. What Are Cookies
Cookies are small text files stored on your device by your web browser when you visit a website. They serve various purposes, from remembering your preferences to maintaining your login session.
2. Cookies We Use
SellStein uses two categories of cookies: (1) strictly necessary cookies that are essential for the Service to function, and (2) optional analytics cookies that we only set after you give consent through our cookie banner. We do not use advertising or remarketing cookies on the SellStein marketing site or dashboard. The table below lists the cookies set on this site. For third-party services that operate as data sub-processors (e.g. Microsoft Clarity), see Section 4 below.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| operator_session | Maintains your authenticated session after login | 30 days | Essential |
| csrf_token | Protects against cross-site request forgery attacks | Session | Security |
| active_business | Remembers which business workspace you are viewing | 30 days | Essential |
3. Local Storage
In addition to cookies, we use browser local storage for client-side preferences:
| Key | Purpose | Type |
|---|---|---|
| sellstein-theme | Remembers your dark/light theme preference | Preference |
| sellstein-dashboard-lang | Remembers your selected dashboard language | Preference |
4. Optional Analytics (Consent Required)
When you click "Accept" or enable analytics in our cookie preferences panel, we load Microsoft Clarity to help us understand how visitors use the marketing site. Microsoft Clarity collects: pages visited, mouse movement and clicks, session recordings (with input fields masked), device type, browser, approximate location (city-level, derived from IP), and a Clarity-set first-party identifier. We do NOT use: third-party advertising or remarketing cookies (Google Ads, Facebook Pixel, TikTok Pixel) on sellstein.com itself, cross-site tracking, browser/canvas fingerprinting, or social media tracking pixels. Microsoft Clarity is operated by Microsoft Corporation and acts as a sub-processor under our Data Processing Agreement. For details on Clarity's data practices, see Microsoft's privacy notice at https://privacy.microsoft.com.
- Microsoft Clarity (analytics, session replay) - loaded only after consent. Sets cookies including _clck and _clsk on clarity.ms.
- No advertising or remarketing cookies are set by SellStein on the marketing site or dashboard.
- No cross-site tracking, browser fingerprinting, or canvas fingerprinting.
- Merchants may add third-party tracking on their own storefronts (Google Analytics, Facebook/Meta Pixel, TikTok Pixel, Snapchat Pixel). Those storefronts are governed by the merchant's own privacy policy.
- Sub-processor disclosures and contractual safeguards for analytics partners are listed at /legal/sub-processors.
5. Third-Party Cookies on Merchant Storefronts
When you visit a merchant's storefront hosted on SellStein, the storefront uses only our essential cookies (session, CSRF). Merchants may choose to add third-party integrations (e.g., payment processors, chat widgets) that may set their own cookies. Those cookies are governed by the respective third party's cookie and privacy policies. SellStein does not control third-party cookies added by merchants.
6. Managing Cookies
Since we only use strictly necessary cookies, disabling them may prevent the Service from functioning properly. You can manage cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and site permissions
Please note that blocking essential cookies will prevent you from logging in and using the platform.
7. Consent and How to Withdraw It
Under the EU ePrivacy Directive (Article 5(3)) and the GDPR, strictly necessary cookies do not require consent, but ALL non-essential cookies (including analytics) require prior, granular, freely given consent. We display a cookie consent banner on first visit with three options: Accept All, Reject All, or Customize. Reject is the default if you dismiss the banner. We log your choice in localStorage under the key "sellstein-cookie-consent". To withdraw or change your consent at any time, clear your browser storage for sellstein.com or click the cookie preferences link in the footer (where available). Consent is recorded per-domain and is not transferred to merchant storefronts, which run their own consent flows.
8. Changes to This Policy
We will update this Cookie Policy if we change our cookie practices. Material changes will be communicated through the Service.
9. Contact
For questions about this Cookie Policy:
Fluxera LLC
Email: privacy@sellstein.com