Cookie Policy
What we store on your device.
Last updated: October 15, 2026
This policy lists every cookie and browser storage item our website sets, what each one is for and how long it lasts. It goes with our Privacy Policy.
A cookie is a small file a website saves on your device. Browser storage is a similar place in your browser that keeps a note on your device without sending it to us each time.
Your choice
The first time you visit, a notice asks you to choose Allow cookies or Don't allow. The two buttons are equal, and nothing is chosen for you. We remember your choice on your device and you can change it at any time with Cookie settings at the foot of every page.
- Allow cookies lets Google Analytics run, where we have switched it on.
- Don't allow keeps Google Analytics off. It stops at once, and we delete any Google Analytics cookies already on your device.
The items we call strictly necessary below are not part of this choice. They keep you signed in and keep payments and forms safe, so they are on either way.
What we set
Strictly necessary
These are always on. The site cannot work without them, so they need no consent and the Allow cookies and Don't allow buttons do not change them.
| Name | Type | What it is for | How long it lasts |
|---|---|---|---|
| ffm-cookie-consent | Browser storage | Remembers whether you chose Allow cookies or Don't allow, so we do not ask on every page. It is not a cookie and never leaves your device. | Until you change your choice or clear this site's data in your browser. |
| sb-(our project)-auth-token | Cookie | Keeps you signed in to your client portal, the order page and the crew app. It is set only when you sign in or create an account, and our servers read it; scripts on the page cannot. It may be split into numbered parts. | Until you sign out, and no longer than 400 days. |
| ffm-trust | Cookie | Remembers a computer you chose to trust, so we do not ask for your sign-in code every time. It is set only if you ask for it, and our servers read it; scripts on the page cannot. | 30 days. |
| ffm-order | Cookie | Ties an order you have just placed to the browser that placed it, so that only you can open its status page. It is set when you place an order, and our servers read it; scripts on the page cannot. | 1 day. |
| ffm-signup | Cookie | Ties the confirmation link in the email we send when you create an account to the browser you created it in, so nobody else can finish an account in your name. It is set when you create an account, and our servers read it; scripts on the page cannot. | 1 day. |
| ffm-pass-site and ffm-pass-project | Cookie | Remembers that you typed the access code for a private listing website or project page, so you do not have to type it on every page. It is set only when you type a correct code, applies to that one page, and our servers read it; scripts on the page cannot. | 30 days. |
| ffm-banner-dismissed | Browser storage | Remembers which announcement bars you closed, so they do not come back until their wording changes. It stays on your device. | Until you clear this site's data in your browser. |
| __stripe_mid and __stripe_sid | Cookie | Set by Stripe's payment form to spot fraud and keep your payment safe. Stripe's form loads only on our order, retainer and payment pages, not on the rest of the site. | 1 year for __stripe_mid and 30 minutes for __stripe_sid. |
| Cloudflare Turnstile | Cookie | The bot check on our sign-in, sign-up, contact, order and listing website forms. Cloudflare runs it and may use a cookie or an item of browser storage to do so. | Set by Cloudflare under its own policy. |
Only if you click Allow cookies
This runs only when you click Allow cookies and only if Google Analytics has been switched on for our site. If you click Don't allow, now or later, nothing from this group loads and we delete any of these cookies already on your device.
| Name | Type | What it is for | How long it lasts |
|---|---|---|---|
| _ga and _ga_ followed by our measurement ID | Cookie | Google Analytics tells us which pages are viewed and how visitors reach our site, so we can improve it. We do not use it for advertising. | Up to 2 years, as Google sets it. |
Only for the studio owner, staff and photographers
A visitor or client never gets these. They are set after a studio sign-in, to make the admin console and the crew app work the way their users left them.
| Name | Type | What it is for | How long it lasts |
|---|---|---|---|
| ffm-impersonate | Cookie | Set while the studio owner opens a read-only view of a client's account, so the portal shows that view. | 30 minutes. |
| ffm-admin-rail | Cookie | Remembers whether the admin menu is narrow. It applies to admin pages only. | 1 year. |
| ffm-admin-theme | Browser storage | Remembers light or dark mode in the admin console and the crew app. | Until cleared. |
| ffm-admin-catalog-services-tab and ffm-admin-catalog-packages-tab | Browser storage | Remember the last catalog tab the owner used. | Until cleared. |
| ffm-new-job-draft | Browser storage | Keeps a half-finished new job form while the owner leaves the page to find something. | Until the job is created or the draft is cleared. |
| ffm-crew-install-dismissed | Browser storage | Remembers that a photographer closed the prompt to add the crew app to their phone. | Until cleared. |
| ffm-crew-v1 | Offline cache | Keeps the crew app pages a photographer has already opened, so they still open without a signal. It holds no sign-in token. | Until the photographer signs out. |
Page views and Cloudflare Web Analytics
We count page views on our own site and on the listing websites we host without cookies and without recording your address or device. Cloudflare Web Analytics is switched off today. If we switch it on, it counts visits without setting any cookie or storing anything on your device, so it would not need your choice.
Content from other companies
Some pages load content from other companies. Their servers see your request as any website would, and they can set their own cookies under their own privacy policies. We do not control those cookies and they are not in the lists above.
- Stripe shows the payment form on our order, retainer and payment pages.
- Cloudflare runs the bot check on our forms and, where a farm switches it on, plays the video on a horse's sales page.
- Google suggests addresses as you type on our order page and draws the maps on our order pages, service area pages and listing websites.
- Matterport and Zillow show a 3D tour when you open one, on our home page or on a listing website that has one.
Change your choice or remove cookies
Use Cookie settings at the foot of any page. You can also delete cookies or block them in your browser's settings. If you block the strictly necessary ones, you will not be able to stay signed in and some forms and payments will not work.
Questions
Email info@framefocusmedia.com or call (352) 689-9968.