Cookie Policy for Blendspace

Effective date: 22 April 2026
Last updated: 22 April 2026

This Cookie Policy explains how Blendlens s.r.o. ("Blendlens", "we", "us" or "our") uses cookies, local storage, and similar technologies on the marketing website blendspace.io, the Blendspace web application at app.blendspace.io, our e-commerce plugins, and related services (together, the "Service"). It should be read together with our Privacy Policy.

This Cookie Policy is issued in compliance with Directive 2002/58/EC (the "ePrivacy Directive"), Czech Act No. 127/2005 Coll. on Electronic Communications (§ 89), the GDPR, the UK PECR, and equivalent laws in other jurisdictions where we operate.

1. What are Cookies and Similar Technologies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve user experience, and provide analytics and marketing.

Local storage and session storage (part of the Web Storage API) allow websites and web applications to store information on your device in a similar way to cookies, but they are not automatically sent to the server with each request. Local storage is used by modern single-page applications such as our web app.

Under EU and UK law, the rules that apply to cookies (consent, information duty) apply equally to any technology that stores information on your device — including local storage, session storage, web beacons, pixel tags, and device fingerprinting.

We classify these technologies into four categories:

• Strictly necessary — required for the Service to function (authentication, session management, security). No consent is required; they cannot be disabled without breaking the Service.
• Functional — remember your preferences (language, units, active workspace). Improve usability.
• Analytics — help us understand how visitors use our marketing website, so we can improve it. Set only with your consent.
• Marketing — used for advertising, personalisation, and attribution. Set only with your consent.

2. How Blendspace Uses These Technologies — Overview

Blendspace has a minimal-tracking architecture:

• Our web application at app.blendspace.io does not set any cookies. We use browser local storage for authentication and preferences. These items are strictly necessary or functional.
• Our backend API does not set cookies on your browser. Authentication is handled by JSON Web Tokens (JWT) sent in the Authorization header.
• Our marketing website at blendspace.io loads Google Tag Manager and the Cookiebot consent banner. These third-party services may set cookies on your browser, only after you give consent for the relevant category through the banner.
• Third-party services (Google Sign-In, Apple Sign-In, Stripe Checkout) may set their own cookies on their own domains when you interact with them — for example when you log in or pay.

3. Local Storage used by app.blendspace.io

The Blendspace web application stores the following items in your browser's local storage. These items are domain-scoped to app.blendspace.io, are not transmitted to our server automatically with every request, and are cleared when you log out or when you clear your browser storage.

Name	Purpose	Category	Lifetime
blendspace_token	JSON Web Token used to authenticate you against our API	Strictly necessary	Until you log out
blendspace_user	Cached profile information (name, email, language, unit preference, avatar URL) to avoid unnecessary API calls	Strictly necessary	Until you log out
blendspace_active	Identifier of your currently active Blendspace workspace	Functional	Until you switch workspace or log out
blendspace_guide_completed_<userId>	Flag indicating that you have completed the onboarding tour, so we do not show it again	Functional	Persistent (until you clear browser storage)

All of the above items are used for the Service to function and to remember your preferences. They are not used for analytics or marketing. Because the web application does not work without authentication, strictly necessary items are set without asking for consent, in line with § 89 of the Czech Electronic Communications Act and the ePrivacy Directive.

4. Cookies Set by the Marketing Website (blendspace.io)

Our marketing website loads two third-party services that may set cookies on your browser:

4.1 Cookiebot — consent management

Cookiebot is provided by Cybot A/S (Denmark). Cookiebot itself sets a small number of cookies strictly necessary to remember your consent choices, so we do not ask you again on every page.

Name	Provider	Purpose	Category	Lifetime
CookieConsent	Cybot A/S (consent.cookiebot.com)	Stores your cookie consent preferences	Strictly necessary	Up to 1 year

The current list of cookies managed by Cookiebot on our site is always shown in the Cookiebot banner. Click "Show details" in the banner to view the live, up-to-date list.

4.2 Google Tag Manager and associated Google services

We use Google Tag Manager (GTM-PLSXLGM5) to manage tags on our marketing website. Google Tag Manager itself does not set cookies that identify users; however, tags deployed through it (for example Google Analytics or Google Ads conversion tracking) may set cookies if you grant the corresponding consent category.

Examples of cookies that Google services may set only after your consent:

Name	Provider	Purpose	Category	Lifetime
_ga, _ga_*	Google LLC	Google Analytics 4 — distinguishes unique users and sessions	Analytics	Up to 2 years
_gid	Google LLC	Google Analytics — distinguishes users within a 24-hour window	Analytics	24 hours
_gcl_au	Google LLC	Google Ads conversion tracking (if enabled)	Marketing	Up to 3 months

If you do not consent to the Analytics or Marketing category, these cookies are not set. You can inspect and change your consent at any time through the "Cookie preferences" link in the footer of our marketing website.

For more information about how Google processes the data, see the Google Privacy Policy.

5. Third-Party Cookies Set Only When You Interact

When you use certain features of the Service, your browser is directed to third-party services. Those services set cookies on their own domains, not on blendspace.io or app.blendspace.io. We do not control these cookies. They are governed by the respective providers' privacy policies.

• Google Sign-In (accounts.google.com) — when you choose to sign in with Google. Google may set authentication, security and preference cookies on its own domain. See Google Privacy Policy.
• Apple Sign-In (appleid.apple.com) — when you choose to sign in with Apple. Apple may set authentication cookies on its own domain. See Apple Privacy Policy.
• Stripe Checkout (checkout.stripe.com, js.stripe.com) — when you purchase a Subscription. Stripe sets security, fraud-prevention and analytics cookies on its own domains. See Stripe Privacy Policy and Stripe Cookie Policy.

These third-party cookies are set only when you actively interact with the respective service (for example when you click "Sign in with Google" or proceed to Stripe Checkout). They do not load in the background.

6. Cookies in Blendspace Embeds on Third-Party Websites

When an online store or other third-party website embeds a Blendspace 3D preview or AR viewer, that embed does not set any cookies or persistent storage on behalf of Blendspace. The embed loads a 3D model and sends anonymous event notifications (impressions, AR views, viewer interactions) to our API. The operator of the embedding website is responsible for its own cookie consent banner and privacy notice. See Sections 2 and 13 of our Privacy Policy for details.

7. Your Choices and How to Manage Cookies

7.1 Consent banner

On our marketing website, a consent banner is shown on your first visit. You can accept all cookies, reject non-essential cookies, or customise your choices by category. Your selection is stored in the CookieConsent cookie described in Section 4.1. To change your choice later, click "Cookie preferences" in the footer.

7.2 Browser settings

Most browsers allow you to control cookies and storage through their settings. You can:

• block all cookies / third-party cookies;
• delete existing cookies and local storage;
• set "Do Not Track" (DNT) or "Global Privacy Control" (GPC) signals — we honour GPC as an opt-out of "sale"/"sharing" under the CCPA;
• use private / incognito mode to avoid persistent storage.

Blocking strictly necessary local storage in our web application will prevent you from staying signed in and will therefore break the Service.

Resources for managing browser storage: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge.

7.3 Opt-outs for specific third-party services

• Google Analytics: install the Google Analytics Opt-out Browser Add-on.
• Google Ads personalisation: change settings at adssettings.google.com.

8. International Users

If you are visiting from the United Kingdom, Switzerland, Brazil, Canada, Australia, or another jurisdiction with cookie laws, the principles described in this Cookie Policy apply to you as well. In particular:

• United Kingdom — the Privacy and Electronic Communications Regulations (PECR) require consent for non-essential cookies. Our banner complies.
• California (CCPA/CPRA) — we do not "sell" or "share" personal information for cross-context behavioural advertising. We honour the Global Privacy Control (GPC) signal as an opt-out where applicable. See Section 16.3 of our Privacy Policy.
• Brazil (LGPD) — we treat cookie-based data as personal data under the LGPD and respect your data-subject rights.

9. Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legal requirements, or our Service. The updated policy will be posted at blendspace.io/cookies.html with a revised "Last updated" date. Where required by law, we will ask for your renewed consent.

10. Contact

For questions about this Cookie Policy, contact us at:

Blendlens s.r.o.
Tovární 1112, 537 01 Chrudim, Czech Republic
IČO: 19332351
Registered in the Commercial Register, Regional Court in Hradec Králové, Section C, File No. 51234
Cookie and privacy enquiries: info@blendspace.io
Corporate / formal correspondence: hello@blendlens.com