Cookies, with your choice.

Accept all allows optional analytics and marketing. Reject optional keeps only essential features. Manage cookies lets you choose each one. Both are off by default; browsing, scrolling or closing the preferences panel does not give consent. You can change your choice at any time.

In the United States, optional analytics and marketing are on by default and a notice explains them on your first visit. Choose Opt out there, use Do not sell or share my personal information at the bottom of every page, or turn either off at any time in Cookie settings. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and both stay off until you allow them. To decide which rules apply, our host derives your approximate country from your IP address for each request; we do not store it.

When you make a choice, we count, without identifiers, how many visitors accept or reject analytics in the opt-in prompt or in Cookie settings. This count stores nothing in your browser and includes no IP address or page.

LionBox stores your cart and cookie preference in your browser. Supabase provides the cookies needed for secure sign-in. When you pay without signing in, a cookie keeps your order number and a key for that order, so the payment pages can show its status; another keeps the link from our order email while you set your password. These support features you request and remain active when you reject analytics. Error reports to Sentry, which help us keep the website working, use no cookies or browser storage.

Your cookie choice lasts six months. Your cart stays until removed, cleared at checkout or deleted through your browser. Sign-in cookies can last up to 400 days and are refreshed during use or cleared during sign-out and authentication. The order cookie lasts up to 7 days and the set-password cookie up to one hour.

Google Analytics, when configured, measures visits, campaign sources and website interactions using cookies. Vercel Analytics and Speed Insights measure traffic and loading performance without cookies. All these tools wait for your permission, except in the United States as described above. Google’s advertising features are turned off.

Analytics may include a browser identifier, device information and approximate location. We filter URLs and do not send form contents, authentication tokens, account identifiers or order numbers. Google cookies last up to six months. A local payment-counting marker prevents duplicate analytics events until you withdraw consent or clear browser storage.

Microsoft Clarity, when configured, records how visitors use our public pages: the pages viewed, clicks, mouse movement and scrolling, so we can replay visits and see heatmaps. Text you type is hidden in your browser before anything is sent, and Clarity never runs on checkout, account, sign-in or withdrawal pages. It starts only after you allow analytics yourself, in the cookie prompt, the United States notice or Cookie settings; it is not on by default in the United States. It sets the _clck cookie (a browser identifier, up to one year) and the _clsk cookie (links the pages of one visit, up to one day). We tell Microsoft not to use this data for advertising.

With analytics or marketing allowed, LionBox also keeps in your browser the campaign labels, referring website, landing page and ad click identifiers of your first and latest visit, for 90 days from your last visit. They are sent with an order or enquiry so we know which channel brought you. See How you found us.

With marketing allowed, the Meta Pixel loads from Meta and sets the _fbp cookie (a browser identifier) and, when you arrive from a Meta ad, the _fbc cookie (the ad click). Both last up to 90 days. The pixel tells Meta which pages you visit and what you do, such as viewing the product, adding it to your cart, contacting us or buying; our server sends Meta a copy of the same events with your IP address and hashed contact details you gave us. Meta uses it to measure our ads and to show them to people likely to respond. Meta’s “automatic advanced matching” may read contact details you type into our forms and hash them in your browser before sending them.

With marketing allowed, Google Ads also runs through the same Google tag. Its conversion linker keeps the ad click in _gcl_au and _gcl_aw cookies for up to 90 days, and it tells Google which pages you visit, when you send our contact or launch-updates form, and when you buy, with the value and order number. Contact details you type into our forms are given to Google’s tag, which hashes them in your browser before sending (enhanced conversions).

With marketing allowed, the record of how you arrived (above) is kept too, and a local marker per paid order stops the purchase from being reported twice. See Advertising with Meta and Google for what they receive and your rights.

Use the cookie icon at the bottom right or Cookie settings to withdraw permission. Turning analytics off stops future Google, Vercel and Microsoft Clarity measurement and removes our Google analytics cookies, the _clck and _clsk cookies and payment-counting markers. Turning marketing off stops the Meta Pixel, our copies of its events and Google Ads, and removes the _fbp, _fbc and _gcl cookies and the purchase markers. Turning both off also clears the record of how you arrived. Turning either off reloads the page to discard the tracking tools; save unfinished forms first. Your sign-in and saved cart are preserved. It does not automatically erase data already received by providers.

You can also clear cookies and storage in your browser. This may sign you out or reset your cart and preferences. If browser storage is blocked, your choice applies to the current visit and we may ask again next time.

Providers may process data outside Romania or the European Economic Area. Their server-side retention is separate from the browser durations above. Read the privacy policies of Google, Meta, Microsoft, Vercel and Supabase. External payment pages such as Revolut apply their own policies.

For privacy questions or data requests, email hello@lionbox.ai. You can also contact Romania’s supervisory authority, ANSPDCP.

Company

FASTAPP DEVELOPMENT SRL · Romania

Tax identification number (CUI)

45042871

Trade Register number

J2021017436404

European unique identifier (EUID)

ROONRC.J2021017436404

Incorporated

12 October 2021

Registered office & contact address

Economu Cezarescu 44, Sector 6, 060754 Bucharest, Romania

General & privacy email

hello@lionbox.ai

Customer & order support

support@lionbox.ai

VAT number

RO45042871

Our Privacy policy explains processing purposes, providers, international transfers, retention and your privacy rights, including the open and click measurement in our emails. The browser-storage lifetimes described here are separate from how long providers retain information on their servers.