Cookie policy

What we set

Strictly necessary. A cookie that remembers your bag between visits, one that holds your sign-in session if you have an account, and one that carries a CSRF token. The shop cannot work without these — a bag would empty on every page and checkout would refuse every submission — so they are not optional and there is no banner asking about them.

Preference. One that remembers whether you chose the light or dark theme.

That is the complete list. We set no advertising cookies, no analytics cookies and no cross-site trackers, so there is nothing here to consent to or opt out of.

How long they last

The bag cookie lasts 30 days, matching how long we keep an abandoned bag. The sign-in session lasts 14 days unless you sign out. The theme preference lasts a year.

All of them are httpOnly where they carry anything sensitive, which means the value cannot be read by JavaScript running on the page.

Managing them

Your browser can block or delete any cookie, and there is no penalty for doing it. Blocking the strictly necessary ones will stop the bag from remembering anything and stop checkout from working — that is a technical consequence, not a punishment.

If you have questions about any of this, write to [email protected].