Cookies

Draft for review. Highlighted parts wait for a business or legal decision and are not final.

What the shop needs. We store your cart in your browser (sm_cart_v1, in local storage) until you clear it or finish checkout. We store your privacy choice (sm_consent_v1 in local storage and the cookie sm_ads_consent, which lasts one year) so that it is remembered and applied at checkout. For one visit we keep the country your connection comes from (sm_geo_v1, session storage) so that we can apply the rule below. This storage is strictly necessary to run the shop and needs no consent. The checkout page is hosted by Stripe and runs under Stripe's own privacy policy (https://stripe.com/privacy).

Ad measurement with the ChatGPT Ads pixel. Our ads on ChatGPT use a measurement pixel from OpenAI to tell us whether a visit from an ad ends in an order.

• If you are in the United States, the pixel is on when you arrive and the footer tells you so. Choose "Privacy choices" in the footer and press Decline to switch it off. It then stays off on this device, and your order is not reported to OpenAI.
• If you are anywhere else, or we cannot tell where you are, nothing loads until you press Accept in the bar at the bottom of the page.
• When it is on, the pixel sets two cookies on our domain: __oppref, which lasts 30 days and links a click on an ad to an order, and __obref, a random browser reference that lasts 365 days. Pressing Decline deletes them.
• We work out your country from your connection when the page opens, and we record your country and your choice with your order so that the server-side order report follows it.

If we add Meta or Pinterest tags, they load only after you press Accept, for every visitor, and we will update this section first.

LAWYER: confirm that default-on ad measurement with an opt-out is acceptable for United States visitors of a Romanian controller, and that the country check is an acceptable substitute for consent (OPEN-QUESTIONS Q6).