Cookie Policy

1. Who we are

Lettuce. (pronounced "Lettuce dot") is the consumer brand under which Lettuce Park A, LLC, a Delaware limited liability company, operates. In this policy, "Lettuce.", "we", "us", and "our" refer to that company. A "Product" means a Lettuce offering, including Lettuce.Zip, Lettuce.Vision, Lettuce.Email, Gallery, Radio, and other Lettuce products that use this shared cookie service.

This policy is published at lettuce.zip/cookies and covers the common consent controls across our participating websites. It supplements each Product's privacy policy and terms; it does not replace disclosures about account data, payments, uploaded content, or other Product-specific processing. It does not govern unrelated websites you visit using Lettuce.Vision or a link from a Lettuce Product.

2. Cookies explained

Lettuce-operated consent management. Lettuce builds and operates this consent service for participating Products. It manages the optional purposes described in this notice; it does not assess or certify a Product's full compliance with privacy laws. Using the service is not an independent certification, regulatory approval, or guarantee of legal compliance.

Cookies are small values a website stores in your browser. Local storage and similar technologies can also remember information on your device. Some are needed to provide a service you request; others support optional measurement. A first-party cookie is associated with the site you visit. A third-party service may receive data even when a cookie is first-party, so the cookie's domain alone does not tell you who processes the information.

The Lettuce cookie service stores a local record of your choices, notice version, and decision and expiry timestamps. The consent interface itself does not send that record to a separate consent vendor. Optional measurement services are described below; "Lettuce-operated" does not mean every service processes data only on your device.

3. Your choices

Essential storage

Essential storage supports authentication, security, services you explicitly request, and remembering your privacy choices. The optional cookie controls do not switch these off. Browser controls can remove them, but doing so may sign you out, erase preferences, or prevent a requested feature from working. Calling storage essential does not make unrelated profiling or advertising necessary.

Analytics: optional

With permission, we measure visits and usage to understand how our Products perform. The shared integration uses browser identifiers, a fixed published page title, the page address without its query string or fragment, and a similarly limited referrer. It does not set your signed-in account ID or enable advertising signals. See the provider inventory in section 5 before deciding.

Lettuce ad measurement: optional

With separate permission, we store and report ad impressions and clicks for reporting, advertiser billing, and abuse checks. Search-ad events include ad identifiers, timestamps, signed auction quotes, and consent metadata. A daily IP pseudonym is retained in raw settlement input for abuse checks, not copied into new BigQuery measurement rows. This report path does not collect search queries or query hashes. Historical records may contain fields collected by an earlier implementation until they are deleted. Pseudonyms and quote identifiers are not guaranteed anonymous.

Radio measurement records consented starts and completions in daily counters without a user identifier. These counters are not proof of a billable listen. Lettuce operates the ad platform; infrastructure providers do not supply an external advertising network through this service.

This permission does not authorize personalized advertising profiles, sale or sharing for cross-context behavioral advertising, or the activation of third-party advertising tags. Those uses are not enabled by this service.

4. Consent & withdrawal

Accept optional permits the optional purposes displayed in the banner; Reject optional denies them. Choose settings lets you select purposes independently. Optional boxes start unchecked. Closing the settings panel, scrolling, using a Product, or accepting its terms is not cookie consent.

Use Privacy choices on any participating Product to review or withdraw your choice as easily as you gave it. Withdrawal stops future optional collection through this integration, disables analytics collection, removes accessible first-party analytics cookies, and clears pending ad reports when advertising measurement is rejected. It does not recall data already transmitted, delete all server records, or remove cookies belonging to an unrelated domain.

Global Privacy Control (GPC) is honored by disabling optional Lettuce advertising measurement, even after Accept optional. A received GPC signal overrides an earlier advertising acceptance and the opt-out is retained with the stored choice. GPC does not grant analytics consent. The reporting endpoint also rejects advertising reports carrying the Sec-GPC: 1 signal.

We do not use this service to sell personal information or share it for cross-context behavioral advertising. Applicable rights to opt out of sale, sharing, or targeted advertising remain available regardless of cookie choices. Contact us using section 12 about processing beyond these browser controls.

5. Storage & providers

Account/session storage, saved Product settings, and security technologies vary by Product and are described in the relevant Product notice. This table inventories the shared cookie service, not every integration or embedded service across the ecosystem.

6. Across Lettuce products

Lettuce.Zip publishes the common notice, but choices are stored in your browser on the origin where you make them. Different domains, subdomains, browser profiles, and devices may require separate choices. Changes synchronize to open tabs on the same origin. Signing in through Lettuce.Zip does not grant cookie permission or transfer an acceptance to another Product.

If browser storage is unavailable, the service uses your choice only for the current page. Clearing storage can make the banner appear again. Preferences are rechecked when returning to a page and periodically while it is open. Blocking the consent script does not grant permission to the optional trackers it controls.

7. Advertising

Advertising and sponsorships can help fund Lettuce Products. Contextual placements can be selected using the current page or search rather than a cross-site profile. They may still appear after rejection, but this integration does not store or send optional ad-measurement events without permission. Choosing an advertiser's link opens a third-party service governed by its own practices.

When paid search advertising is enabled, issuing a price quote also creates a server-side hold on the advertiser's funds and daily budget, including when optional ad measurement is off. This hold contains a random quote ID, advertiser and campaign IDs, price, and timing information, not a persistent visitor identifier, search query, or IP value. A hold is not evidence that a person viewed or clicked an ad.

Quote-request security checks process your connection's IP address and keep short-lived keyed network counters to limit repeated requests, including when optional measurement is off. IPv6 addresses are grouped by network prefix; people sharing a network can share a limit. Counters do not store the raw address or search query and are not used to build a persistent visitor profile. Report counters are updated only after the report passes consent and event validation. Security limits do not independently prove consent or a genuine billable interaction.

The cookie service is a privacy control, not permission to sell data. New advertising providers or purposes require an appropriate notice, applicable consent or opt-out controls, and any required industry or platform integration before activation.

8. Retention & security

Our raw ad-measurement retention schedule is 30 full days, with daily cleanup of expired R2 events, BigQuery measurement rows, and radio counters once retention enforcement is enabled. This is separate from financial summaries, operational logs, provider recovery windows, and backups. Deployment verification and provider settings are required before treating that schedule as an enforced deletion guarantee.

Unused quote holds expire after the reporting and settlement window. Released holds and their release entries are scheduled for deletion after 30 days, with hourly cleanup once enabled. Charged settlement evidence and advertiser payment, refund, and dispute records follow the separate financial-record schedule.

Ad-security counters use fixed windows of one minute, one hour, or one UTC day. They become eligible for deletion one hour after their window closes, with hourly cleanup once enabled. Backlogs or job failures can delay deletion; provider recovery copies and operational logs have separate schedules. Production enforcement has not yet been verified.

Browser storage durations appear above. They are not deletion deadlines for server-side analytics, billing, or security records. Such records may be needed for the stated purposes and applicable accounting, dispute, fraud-prevention, or legal obligations. Contact us for the retention information relevant to a Product or to request deletion; withdrawal alone does not erase past records.

As described in our Product policies, we operate in the United States and use providers that may process information in other countries. Applicable transfer requirements and safeguards depend on the service and destination. We use access controls and encrypted network transport in production, but no storage or transmission method is completely secure.

9. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, withdraw consent, object to or restrict processing, limit certain sensitive-data uses, and opt out of sale, sharing, or targeted advertising. You may also have rights to appeal a decision or complain to your data-protection authority.

Submit requests to privacy@lettuce.vision, our privacy contact identified in the Lettuce.Vision policy. We may need proportionate identity verification for access or deletion requests; changing optional cookie choices requires neither sign-in nor payment. We do not deny access or discriminate against you for exercising applicable privacy rights.

10. Minors & external content

Cookie choices do not establish age or parental authorization. Product eligibility and children's privacy provisions remain applicable; an ordinary acceptance must not be treated as verified parental consent. This shared service does not enable personalized advertising profiles. External videos, payment tools, and other embedded services may have separate privacy effects; review the relevant Product notice and provider disclosures before using them.

11. Policy updates

We update this notice when our shared technologies, purposes, or controls materially change. The notice version is available in Cookie settings. Where a change requires fresh permission, an older choice will not authorize it. See the Lettuce.Vision Privacy Policy and Terms of Service for their account and Product provisions, and consult each Product's own notices for its specific processing. Terms acceptance is separate from optional tracking consent.

12. Contact

Lettuce Park A, LLC
Privacy: privacy@lettuce.vision
Legal: legal@lettuce.vision