Cookie Policy

Cookies are small text files a website stores in your browser. Other technologies work the same way and are covered by this policy: the browser's local and session storage, and the pixels or tags of third-party services, which read or store information on your device. Some are ours (first-party); others are set by the services we use, on their own domains (third-party).

What is strictly necessary for the site to work doesn't need consent (article 5 of Portuguese Law 41/2004, as amended by Law 46/2012, which transposes the ePrivacy Directive). Everything else only runs after you accept it in the cookie notice, by category: analytics and marketing. Rejecting is as easy as accepting and the site works the same either way. Until you choose, no analytics or advertising tag is loaded and your browser doesn't contact those services.

Your choice is stored in your browser (ppConsent2) with its date and the version of this list. We ask again after 6 months, or sooner if the list of purposes or providers changes.

For Google's tags we use Google Consent Mode v2: everything is denied by default, and your choice is passed on as granted or denied for analytics storage, ad storage, sending data for advertising, and ad personalisation.

Without these the cart, your customer account, access to your orders and payment don't work. You can delete them in your browser settings: you lose the cart, the session and direct access to your orders in this browser, with no other consequence.

When you choose to pay with PayPal, or pay on Stripe, those pages and buttons are theirs and may set their own cookies on paypal.com and stripe.com, under the privacy policies of PayPal and Stripe.

We use Google Analytics 4 to understand how many people visit the site, where they come from and what they do: the pages viewed and the steps through the shop and rental (products viewed, added to or removed from the cart, checkout steps and paid purchases, with the order reference, value and items). Your browser also sends technical data about the device and browser; Google Analytics 4 doesn't log the full IP address. We never send your name, email, phone or address.

With marketing accepted, we load the tags of Google Ads, Meta Pixel, LinkedIn Insight Tag, X (Twitter) Pixel. They serve three purposes: knowing which ads led to visits, bookings and purchases (conversions); showing ads to people who already visited the site (remarketing); and finding people similar to our customers. Each platform receives the pages viewed, the shop steps (product viewed, cart, checkout, purchase with reference, value and items) and the identifier of your browser or of the ad click. These platforms may combine this data with what they already know about you, if you have an account with them, and also use it for their own purposes under their policies.

With Google Ads we may use enhanced conversions: at purchase, your email address is turned into an irreversible code (SHA-256) before it goes to Google, which only uses it to match the purchase to the ad.

• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), for Google Analytics and Google Ads. Data may be processed by Google LLC in the United States, which is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023); otherwise standard contractual clauses apply. Google privacy policy.
• Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland), for the Meta Pixel. For the collection and transmission of data through the Pixel we are joint controllers with Meta (Fashion ID judgment of the EU Court of Justice), under Meta's Controller Addendum; what Meta does with the data afterwards is its own responsibility. Meta Platforms, Inc. (United States) is certified under the EU-US Data Privacy Framework; otherwise standard contractual clauses apply. Meta privacy policy.
• LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland), for the LinkedIn Insight Tag, as joint controller for the collection (LinkedIn's Joint Controller Addendum). LinkedIn Corporation (United States) is certified under the EU-US Data Privacy Framework; otherwise standard contractual clauses apply. LinkedIn privacy policy.
• Twitter International Unlimited Company (One Cumberland Place, Fenian Street, Dublin 2, Ireland), for the X (Twitter) Pixel. X may transfer data outside the EEA, including to the United States, on the basis of the European Commission's standard contractual clauses. X privacy policy.

You can accept, reject or withdraw consent at any time, using the "Cookies" link in the footer of every page or the button below. Withdrawing takes effect immediately: the tags stop, their cookies on pewpew.pt are deleted and the page reloads. It doesn't affect what was done before on the basis of your consent.

Cookies these services set on their own domains can only be deleted by you, in your browser or account settings: Google: My Ad Center; Meta: ad preferences; LinkedIn: ad preferences; X: personalisation and data. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on.

The controller is Sequência Janota - Unipessoal, Lda. (PEW PEW), Rua do Urjal 48, 3830-173 Ílhavo, Portugal. How we handle personal data, your rights and how to complain to the CNPD are in the Privacy Policy. For any question: contact@pewpew.pt. If this list changes, we update the date at the top and ask for your choice again.