Cookies

There is one

A single signed cookie holds your session: whether you are signed in, what is in your cart, and a token that protects forms from being submitted from somewhere else. Signed means you can read it and cannot alter it.

Your cart lives in that cookie rather than on our server, which is why you can fill one without giving us an email address.

There is one that is not ours

Since 7 September 2026, Meta's. We advertise on Facebook and Instagram, and the Meta pixel is how we find out whether those advertisements reach anybody.

It is stored on this site rather than on Meta's, which is a technical detail we would rather state than have you discover: the cookie sits under our domain, and it is Meta's cookie, for Meta, read by Meta. Calling it first-party would be true and misleading at the same time. The privacy policy lists exactly what it is told, and what it is not.

This page used to say there were no third-party cookies here and promised to change first if that stopped being true. This is that change.

Nothing from an analytics company, still. If you block third-party cookies, or use a browser that blocks them for you, the shop works exactly as it does otherwise - the pixel is not load-bearing and nothing here waits for it.

What the cookie lets us see

The same cookie carries a random token that ties one visit together, so we can tell that a series of pages and clicks came from one person browsing rather than from twenty. That is how the recording described in the privacy policy knows what belongs to what.

Since 25 August 2026 it carries a second token that outlasts one visit, so that a visit today can be recognised as the same browser that followed an advertisement last week. The privacy policy explains why, and what ends it.

Neither is a tracking cookie in the usual sense: they are ours alone, they follow you nowhere else, and clearing this cookie ends both. But it would be misleading to call this a site with no tracking on it, so we do not. Read the privacy policy for what is actually recorded.

Refusing it

You can block it. Browsing works; signing in and keeping a cart do not, because both are the cookie.