Your curiosity, your space

Privacy information

Pre-launch privacy information.Operator, contact and hosting-processing details still require verification before public deployment. This describes the current demonstration, not the future affiliate service.

Who runs the site

Spendora's Box is a shopping discovery project. Verified operator information has not yet been supplied. A public privacy contact must be provided before launch.

What happens in your browser

Budget choices, search text, category choices and box-discovery history operate the demonstration in page memory. Reloading clears those choices. Appearance also lasts on this page. There is no account registration, enquiry form, newsletter subscription backend, payment processing, affiliate tracking or external font request.

After a cookie choice, necessary local storage remembers your acceptance or rejection for up to 180 days. Read the cookie information for the versioned preference key, expiry and storage-blocking behaviour.

Optional analytics, only with consent

Google Analytics 4 (measurement ID G-00SZR2HVX8) loads only after you accept optional analytics. It measures visits and interactions with fictional demo products; a future sign-up control may record a click. Rejecting leaves the demo available. No optional Google tag or analytics event is sent before acceptance.

The site's event parameters use fixed page identities, known fictional product IDs/categories, preset budgets and fixed sign-up placements. They exclude names, email addresses, search text, form values, URL query strings/fragments and referrer URLs. Google receives technical request/device information and may use pseudonymous analytics cookies. Do not treat this as anonymous processing.

Reopen Cookie preferences in the footer to withdraw. This disables new measurement, removes this demo's analytics cookies and refreshes after a tag was loaded. Already-sent information is not deleted by that browser control. Any applicable data requests require the operator's verified contact.

Analytics processing details require owner/legal review.Confirm Google processing terms/roles, consent legal basis and evidence, data retention in the actual property, recipients, international transfers/safeguards and how rights requests will be handled. Disable Enhanced measurement, user-provided data and Google signals in the account before deployment. The configured 180-day browser-cookie/preference duration does not define Google's server-side retention.

Requests needed to serve the website

Your browser requests HTML, scripts, styles, fonts and illustrations to display this site. When published on Cloudflare Pages, the hosting provider will receive technical request information, such as your IP address and browser information, to deliver and protect the website. Browser caching may store static files on your device.

The operator must confirm the actual hosting settings, processing purposes and legal basis, log retention, recipients, international transfers and applicable safeguards before launch. No unsupported retention period or promise of anonymous hosting logs is made here.

Your questions and rights

The public privacy contact and verified operator details must be available before deployment so visitors can ask about personal information and exercise any applicable rights, including access, correction, deletion, restriction or objection. Where applicable, visitors may complain to their data-protection authority. The operator must review the relevant jurisdiction and complete this information.

When the full service launches

Live affiliate links, additional services or new data collection will require a fresh review and an updated notice before they are introduced. This demonstration does not load those services.

Implementation reviewed for this notice: 8 November 2026. Business and hosting review remains required.