Cookie policy

We use the smallest number of cookies a shop can work with. Every one below is necessary for something you asked the site to do — hold a cart, complete a checkout, stay signed in. We set no advertising cookies and no third-party tracking cookies.

The cookies we set

• medusa_cart_id — Remembers which cart is yours, so items are still there when you come back. Lasts: Until the cart is completed or cleared.
• cb_checkout_contact — Keeps the delivery details you typed at checkout, so a refresh or a return from the payment page does not make you type them again. Lasts: Short-lived, checkout only.
• cb_orders — Records that this device completed a particular order, so the confirmation page opens again on a refresh. It is what stops an order id alone being enough to read someone else’s name and address. Lasts: 7 days.
• cb_customer — Keeps you signed in to your account. Not readable by JavaScript on the page, so a script injected into the site cannot steal your session. Lasts: 7 days.

How we measure traffic

We count visits ourselves, on our own servers, and we do it without identifying anyone. No cookie is set, nothing is stored on your device, and we never store your IP address.

To tell one visit from another within a day, we turn your IP address and browser into a one-way scrambled code and keep only that code. The recipe changes every day and is never saved, so the same person counts as a new visitor tomorrow and yesterday’s visits can never be linked to today’s — by us or by anyone else. We also record the page address, whether you are on a phone or a computer, which site you arrived from, and your country. Nothing else.

This is why there is no cookie banner on this site: there is no personal data to ask you about. We delete this measurement data after 90 days.

Turning them off

Your browser can block or delete cookies. Blocking the ones above will stop the cart, the checkout and signing in from working, because they are how those features remember anything.

More

What we do with personal data is in the privacy policy.