Cookie Notice & Consent Architecture

Effective Date & Document Governance

This technical cookie notice was published and took effect on October 18, 2026. It provides an unsparing inventory of all HTTP cookies, local storage objects, and session storage variables utilized on dermabloom.click by Dermabloom, operating from 803 North Tampa Street, Tampa, Florida 33602, United States.

Categorization of Client-Side Storage Mechanisms

We organize client-side storage into three distinct categories based on functional necessity, operational purpose, and statutory consent thresholds:

1. Strictly Necessary Storage (Core Operations): Essential for the physical delivery and security of the website. Includes the site_consent_v2 local storage flag that remembers your tracking decision, the ephemeral chat_token string that allows our Tampa support desk to reply to live messages, and the hidden timestamp tm verifying that inquiry forms were submitted by human visitors rather than automated scrapers. These items do not track browsing behavior across other websites and cannot be disabled without compromising fundamental catalog functionality.
2. Operational Measurement & Performance Telemetry: Aggregated, privacy-preserving metrics used to assess server load, identify broken formulation links, and monitor response latency during high-traffic inquiry periods. Under our default configuration, analytical storage remains locked until affirmative permission is registered.
3. Advertising Attribution & Conversion Measurement: Applied strictly to evaluate inbound paid marketing campaigns originating from Google Ads, Microsoft Advertising, and Meta Ads. These mechanisms capture campaign click parameters to confirm whether an ad click generated a consultation submission. They operate strictly under the user-governed signals of Google Consent Mode v2.

Dermabloom operates no behavioral retargeting networks, no fingerprinting beacons, and no cross-device tracking graphs. We catalog skincare products; we do not trade in personal browsing data.

Complete Technical Storage Inventory

The following audit table details every storage key, cookie identifier, setting party, operational scope, and lifespan active across dermabloom.click:

Identifier Name	Type & Domain	Provider / Origin	Functional Purpose	Retention Lifespan	Classification
`site_consent_v2`	localStorage (First-party)	dermabloom.click	Persists user affirmative ("granted") or declined ("denied") Consent Mode v2 choice.	12 months	Strictly Necessary
`chat_token`	localStorage (First-party)	dermabloom.click	Authenticates your active support session with Irina Petrova's consultation desk via toso27d.php.	18 months	Functional / Operational
`tm`	Session form variable	dermabloom.click	Unix timestamp of page render, evaluated on banub95.php to prevent automated bot replay attacks.	Session only	Strictly Necessary
`_gcl_au`	HTTP Cookie (First-party)	Google Ads (google.com)	Measures ad efficiency and attribution for campaigns driving traffic to skincare dossiers.	90 days	Advertising (Consent Req.)
`_gid`	HTTP Cookie (First-party)	Google Analytics	Distinguishes unique sessions for hourly server traffic load optimization.	24 hours	Analytics (Consent Req.)
`_ga`	HTTP Cookie (First-party)	Google Analytics	Calculates visitor, session, and campaign data for internal studio performance analysis.	24 months	Analytics (Consent Req.)
`_uetsid`	HTTP Cookie (First-party)	Microsoft Advertising	Captures session identifier for Microsoft Universal Event Tracking (UET) conversion flow.	24 hours	Advertising (Consent Req.)
`_uetvid`	HTTP Cookie (First-party)	Microsoft Advertising	Records anonymous visitor identifier across Microsoft Bing search referrals.	13 months	Advertising (Consent Req.)
`_fbp`	HTTP Cookie (First-party)	Meta Platforms	Measures conversions from Meta Ads campaigns highlighting seasonal skincare protocols.	90 days	Advertising (Consent Req.)

Third-party cookies and pixels only fire after explicit consent is granted. If you decline optional storage, only site_consent_v2, chat_token, and session security inputs remain active.

Advertising Platforms & Attached Click Identifiers

Dermabloom runs active, paid acquisition campaigns to bring individuals seeking evidence-based skincare formulations to our catalog. This site receives paid traffic today from:

Google Ads: Ads targeted to search queries like "clinical serums catalog", "barrier repair cream", and "skincare consultation tampa" route users to our pages with the gclid (Google Click Identifier) query parameter appended. This parameter enables us to verify which ad copy accurately reflects the formulation data sought by the visitor.
Microsoft Advertising: Search campaigns on Bing attach the msclkid (Microsoft Click Identifier) token to landing URLs, interacting with Microsoft UET mechanisms.
Meta Ads: Paid social presentations on Instagram and Facebook attach the fbclid (Facebook Click Identifier) parameter to evaluate traffic reaching our regimen configurator.

These identifiers do not disclose your name, physical address, or banking credentials to us. They link incoming traffic to campaign performance tables. Furthermore, we explicitly state that no platform has audited, certified, or endorsed our catalog; their involvement is limited to commercial ad delivery.

Google Consent Mode v2 Signal Management

In accordance with contemporary privacy engineering mandates, dermabloom.click integrates consent mode v2 directly into its runtime framework. Upon initial page load, our scripts enforce a strict "denied" posture across all four recognized signals (ad_storage, ad_user_data, ad_personalization, and analytics_storage) before any third-party script can query storage:

ad_storage: 'denied' — Restricts storage of advertising identifiers.
ad_user_data: 'denied' — Disallows consent for sending user data to Google for advertising purposes.
ad_personalization: 'denied' — Disallows personalized advertising across Google networks.
analytics_storage: 'denied' — Restricts analytics storage to cookieless pings.

These four signals remain denied until a visitor actively clicks "Allow Storage". Once clicked, our consent controller dispatches an update command transitioning all four flags to granted and sets site_consent_v2 in localStorage.

Granular Consent Choice & Immediate Modification

Consent is never assumed, bundled, or forced. When you arrive on dermabloom.click, a non-blocking banner at the base of the viewport offers two balanced options: "Allow Storage" and "Decline Optional".

You may review or modify your consent decision at any time. Simply click the Consent Settings button situated in the footer of every page. Activating this control immediately re-displays the banner, enabling you to switch your status from granted to denied, or vice versa, with zero friction.

Click below to re-open the live consent banner and toggle storage preferences for this browser:

Operational Impact of Declining Optional Storage

If you click "Decline Optional" or configure your browser to reject cookies:

What Continues Working Uninterrupted: You retain complete, unrestricted access to our full skincare catalog, all ingredient dossiers, product specifications, the interactive regimen configurator ($65–$299 USD tier calculation), and our direct inquiry submission forms via banub95.php.
What Ceases Operating: Advertising attribution scripts will not write cookies. Analytics platforms will receive only aggregate, anonymized pings without persistent identifiers. Google Ads, Microsoft Advertising, and Meta Ads will not track cross-session visits.

We impose no penalties, no service degradations, and no restricted content gates on visitors who choose privacy.

External Advertising & Analytics Platform Policies

To examine the precise privacy standards, data retention schedules, and behavioral opt-outs enforced by our third-party advertising partners, review their official legal documentation directly:

Google Privacy & Technologies: Comprehensive overview of how Google processes data from partner sites is available at policies.google.com/technologies/partner-sites.
Microsoft Privacy Statement: Details on Microsoft Advertising, Bing search telemetry, and UET data governance are detailed at privacy.microsoft.com/privacystatement.
Meta Data Policy: Information regarding Meta Pixel and Conversions API processing is available at facebook.com/privacy/policy.

Direct Inquiries Regarding Storage Protocols

For specific technical inquiries regarding our cookie configuration, Consent Mode v2 implementation, or local storage tokens, contact our technical administration desk:

Data Compliance Lead: Irina Petrova, Product Manager
Electronic Mail: office@dermabloom.click
Telephone Line: +1 (464) 575-5661
Physical Address: 803 North Tampa Street, Tampa, Florida 33602, Tampa, Florida, United States