Privacy
Last updated: October 2026
This Privacy Policy explains how Figrio Studio ("we", "us", "our") collects, uses, stores, and protects data when you visit figrio.com, interact with security protections, send us a contact inquiry, or sign up for our newsletter. Data processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the EU rules on terminal equipment storage.
Figrio Studio is a jewellery micro-manufacturer based in Hungary (Kaposvár, Somogy County, Hungary), operating within the European Union. We act as the data controller for the processing activities described in this notice. For any privacy-related enquiries, please contact us at: support@figrio.com
We collect or process the following categories:
We do not use advertising, profiling, social media tracking, Google Analytics, Meta Pixel, TikTok Pixel, or similar marketing trackers.
Across figrio.com - both the marketing pages and the shop storefront at figrio.com/shop - only essential, security, or user-requested first-party browser storage is used. The shop entries below are set only when you use the storefront; the shop's account, order, and payment data processing is described in detail in the shop's own privacy notice. Each entry lists its storage type and lifetime:
| Name | Type | Category | Duration | Provider | Purpose |
|---|---|---|---|---|---|
| cf_clearance | Cookie (HttpOnly, Secure) | Strictly necessary | Cloudflare-managed (challenge passage period) | Cloudflare | Proves your browser passed Cloudflare security checks and reduces repeated bot challenges. Set by the Cloudflare Challenge Platform on the live site. |
| __cf_bm, _cfuvid, cf_chl_rc_* | Cookie | Strictly necessary | Cloudflare-managed (session / short-lived) | Cloudflare | Set only if the related bot-management, rate-limit, or challenge feature is active; used for security, diagnostics, and rate limiting. |
| figrio_privacy_notice_ack | Local storage | Functional (user-requested) | 180 days | First-party (site) | Set only after you press the notice button, so the cookie notice is not shown again. The legacy figrio_cookie_ok value is removed by the current site code. |
| Cloudflare Web Analytics / RUM | Cookie-free (no client storage) | Analytics | None | Cloudflare | Aggregated, cookie-free analytics and performance measurement. Per Cloudflare, no client-side storage or visitor personal data is used. |
| Cloudflare Turnstile | Anti-abuse token | Strictly necessary | One-time token | Cloudflare | Loaded on the newsletter and contact forms to prevent automated abuse; creates a one-time verification token and may use Cloudflare security signals. |
| figrio_session_hint | Cookie (Secure) | Strictly necessary | 7 days (expires with your sign-in session) | First-party (shop) | Records only that this browser has a shop sign-in session, so account pages render the right state without a flash and an expired sign-in can be renewed instead of dropped. It holds no account details, no email address, and no sign-in token, and it is deleted when you sign out. |
| figrio_device | Cookie (HttpOnly, Secure) | Strictly necessary | 180 days | First-party (shop) | Recognises this browser as one you have signed in from before, so that a sign-in from an unfamiliar device can be flagged to you by email. It stores a random identifier only - no account details - and the device record is matched by a one-way hash. It deliberately outlives sign-out, because remembering the device is the point. |
| figrio_cart_count | Local storage | Functional | Until cleared | First-party (shop) | Shows the cart item count without waiting for a network response. |
| figrio_cart_changed_at | Local storage | Functional | Until cleared | First-party (shop) | Signals cart changes between shop views. |
| figrio_guest_cart | Local storage | Functional (user-requested) | Until you sign in, place the order, or empty the cart | First-party (shop) | Holds the cart you build without an account: product, quantity, price shown, and any paid extras you picked. When you sign in, the items move to your account cart and are removed from this browser. |
| figrio_guest_cart_sync_lock | Local storage | Functional | Up to 15 seconds | First-party (shop) | Stops two open tabs from moving the same guest cart into your account twice when you sign in. It holds a timestamp and a random value only. |
| figrio_guest_cart_merge_result | Session storage | Functional | Read once, at most 5 minutes | First-party (shop) | After sign-in, tells the cart page which guest items were moved, and which could not be (for example, sold out), so we can show you. Deleted as soon as it is read. |
| __figrio_guest_cart_probe__ | Local storage | Strictly necessary | Deleted immediately | First-party (shop) | Checks whether this browser allows local storage at all (some private modes do not), so the guest cart can fall back to memory. Written and removed in the same moment; holds no data. |
| figrio_pending_pdp_perk_selection | Session storage | Functional (user-requested) | Session (until tab close), or until used | First-party (shop) | Keeps the extras you ticked on a product page while you sign in, so they are still selected when you come back to that product. |
| figrio_pending_item_perks | Local storage | Functional | None (removed on visit) | First-party (shop) | No longer written. An older version of the shop stored perk picks under this name; the cart page now deletes it if it is still there. |
| figrio_checkout_billing | Session storage | Functional | Session (until tab close) | First-party (shop) | Holds your checkout billing details during the current session. |
| figrio_pending_coupon | Local storage | Functional | 7 days | First-party (shop) | Carries a coupon code from the account or cart into checkout. |
| figrio_wishlist_items | Local storage | Functional | Until cleared | First-party (shop) | Stores wishlist items locally before or alongside account sync. |
| figrio_market_shipping_country | Local storage | Functional | Until cleared | First-party (shop) | Remembers your selected market and shipping-country context. |
| figrio_perks_config_v1 | Local storage | Functional | 1 hour | First-party (shop) | Caches gift and perk configuration for a faster account experience. |
| figrio_turnstile_bypass | Local storage | Strictly necessary | Until cleared | First-party (shop) | A trusted-device or test helper for the anti-abuse (Turnstile) flow, used only when enabled by the environment. |
Because these technologies are essential security measures, user-requested acknowledgement storage, or cookie-free analytics, the site does not present optional marketing or analytics consent categories. If optional cookies or tracking tools are added later, they must be blocked until consent is given.
Your newsletter email address is collected solely for the purpose of sending you updates about new collections, exclusive offers, and studio news. Contact form data is used solely to answer your inquiry, custom order request, support request, or press message. We will not use your contact form data for newsletter or marketing purposes unless you separately sign up for those communications.
We process newsletter subscriptions on the basis of freely given, specific, and informed consent (Article 6(1)(a) GDPR). We process contact form inquiries on the basis of steps requested before entering into a contract where the inquiry concerns a custom order or purchase discussion (Article 6(1)(b) GDPR), and otherwise on our legitimate interest in responding to messages and operating the studio (Article 6(1)(f) GDPR). We process essential security, anti-abuse, delivery, logging, cookie-free analytics, and crash diagnostics data on the basis of our legitimate interest in operating, securing, and repairing the website (Article 6(1)(f) GDPR). Strictly necessary terminal storage is used only where needed for transmission, security, a service requested by the visitor, or a notice acknowledgement requested by the visitor. You may withdraw newsletter consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Newsletter email addresses are stored securely in a PostgreSQL database accessed via Cloudflare Hyperdrive, with infrastructure located within the European Economic Area (EEA). Contact form messages are not stored in the website database; they are sent by email through Resend to Figrio Studio's mailbox so we can respond. Crash diagnostics from the shop storefront are stored by Sentry (Functional Software, Inc.) on its European Union infrastructure, in an account created in the EU region. Cloudflare, Resend, and Sentry act as service providers/data processors for the relevant infrastructure, delivery, and diagnostics tasks. We have entered into data processing agreements under Article 28 GDPR with Cloudflare, Resend, and Sentry; where data may leave the EEA, these incorporate the European Commission's Standard Contractual Clauses. Your data is protected by industry-standard encryption in transit and, where stored by our providers, at rest.
We will retain your email address until the earliest of the following occurs:
Contact form messages are kept only as long as needed to respond and manage the inquiry, normally up to 12 months, unless a longer period is required for a resulting order, legal obligation, dispute, or fraud/security investigation. Crash diagnostic reports are deleted automatically by Sentry after 30 days.
We do not sell, rent, or share personal data with third parties for marketing purposes. Data is accessible only to Figrio Studio and service providers needed to operate the website, contact form, email delivery, newsletter, security, crash diagnostics, and hosting infrastructure, currently including Cloudflare, Resend, and Sentry. Cloudflare may process security cookie data and network/security telemetry in accordance with its privacy documentation and applicable data transfer safeguards. Resend processes outbound email delivery data needed to send contact and transactional emails. Sentry processes the crash diagnostics described in section 2 so that faults in the shop storefront can be found and fixed, and holds that data in the European Union.
As an EU data subject, you have the following rights:
To exercise any of these rights, please contact us at support@figrio.com and we will respond within 30 days (GDPR Article 12(3)).
You can request removal of your email address at any time by emailing us at support@figrio.com with the subject line "Unsubscribe". We will delete your data within 5 business days.
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. In the event of significant changes, we will also notify subscribers by email. We recommend checking this page periodically.
If you have any questions about this Privacy Policy, please contact us at support@figrio.com