Cookie notice
This site sets no cookies of its own, and our analytics sets two only if you say yes. Here is everything stored, and how to control it.
Last updated 5 October 2026
This site sets no cookies of its own
There is no server to set them and nothing to correlate them with. The only cookies are our
analytics service’s, and only once you allow analytics (below). What the site itself uses is
localStorage on your own device, which is covered by the same rule — Article 5(3) of
Directive 2002/58/EC (the ePrivacy Directive) governs any storing of or access to information on a
user’s terminal equipment, not only cookies. So it gets the same treatment: strictly necessary
entries without consent, everything else only if you say yes.
What is stored on your device
Strictly necessary — no consent required
These are exempt under Article 5(3) because the service you asked for cannot work without them.
| Key | What it holds | Kept for |
|---|---|---|
ic.v1.cart | Your basket | Until you clear it or order |
ic.v1.checkout-draft | What you have typed at checkout, so an interruption does not cost you the form | Until the order is placed |
ic.v1.orders | Your orders and any withdrawal declarations | Until you erase them |
ic.v1.consent | The choice you made on this page | 12 months |
ic.v1.wishlist | Items you saved | Until you unsave them |
ic.v1.recently-viewed | The last 12 products you opened | Rolling |
Optional — only with your consent
Analytics
Off by default. We use Quomerce to see how the shop is used —
which pages are seen, where people click, where the basket and the checkout lose them, and what
breaks — so we can fix it. Its script loads on every page, from ingest-prod.quomerce.com.
With analytics on, it stores:
| Name | Kind | What it holds | Kept for |
|---|---|---|---|
_qm_sid | First-party cookie | A random session id | 30 minutes from your last page, 24 hours at most |
_qm_vid | First-party cookie | A random visitor id | 13 months |
It also keeps its settings, where the visit came from and a replay counter in localStorage and
sessionStorage, and records a replay of the visit. Replays never contain what you type into any
field, and every word on the checkout, order and withdrawal pages is masked in them.
With analytics off, it stores nothing on your device and records no replay. Each page is still counted, with an id that lives only in that page’s memory and is gone when you leave it.
Turning analytics off later deletes both cookies.
Marketing
Advertising and retargeting. Off by default, and nothing is loaded.
How the banner works, and why
Our consent banner does three things that are required and are still unusual:
- It waits. It appears about a second after the page has drawn, so you can see what you are consenting to. A dialog that fires before first paint is an obstacle, not a question.
- Accept and reject are equal. Same size, same row, one click each. The EDPB’s guidance on deceptive design patterns (03/2022) is explicit that a prominent “Accept” beside a buried or greyed-out “Reject” does not produce valid consent. Ours are the same size and neither is styled to be the obvious one.
- It does not hold the page hostage. No backdrop, no scroll lock, no focus trap. You can read, browse and buy while it is open, and closing it without choosing is not treated as consent.
Withdrawing consent is one click from Cookie settings in the footer of every page, at any time — Article 7(3) GDPR requires it to be as easy as giving it.
Controlling it in your browser
Every browser lets you clear site data for a domain, which erases everything above. You can also use the erase button in the privacy notice, which does the same thing without touching your other sites.