Draft for approval. Everything shown in a dashed box is still to be confirmed by the shop owner. This page is not final legal or delivery wording until those are filled in.
How we handle this
Change your mind
Your choice is stored on this device for six months. Reopen the cookie banner to change it.
Under the Privacy and Electronic Communications Regulations, anything that is not strictly necessary needs your permission first. So on this site nothing beyond the basket runs until you choose. No analytics script, no advertising pixel, nothing loaded quietly in the background and asked about afterwards.
Strictly necessary, always on
| Name | Set by | What it does | Lasts |
|---|---|---|---|
tnl.cartId | This site (local storage) | Remembers which Shopify basket is yours, so it survives a page change | Until you clear your browser |
tnl.consent | This site (local storage) | Remembers the choice you made in the banner, so we stop asking | 6 months |
_shopify_*, cart*, _secure_session_id | Shopify | Keeps your basket and secures the checkout once you get there | Session to 2 years, set by Shopify |
These do not need consent, and the site does not work without them.
Analytics, only if you accept
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Counts visits and which pages get read, with your IP address anonymised | Up to 2 years |
Not installed at all unless you tick analytics. Status: Google Analytics measurement ID, or "not in use".
Marketing, only if you accept
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_fbp | Meta pixel | Lets us show our own Christmas range to people who looked at it | 3 months |
Not installed at all unless you tick marketing. Status: Meta pixel ID, or "not in use".
Things that are not cookies but are worth saying
- Google Fonts. The two typefaces load from Google's servers, so your IP address reaches Google when a page opens. No cookie is set.
- Shopify checkout. Once you click through to pay, you are on Shopify's domain under its own cookie notice.
- Server logs. Hostinger records requests for security. That is a log, not a cookie, and you cannot switch it off.
Blocking cookies yourself
Every browser can block or clear cookies in its settings, and aboutcookies.org explains how for each one. Blocking the necessary ones will empty your basket between pages.
More on what we do with personal data is in the privacy notice.