Cookie policy

The short version

We don't use advertising or tracking cookies and we don't share anything with ad networks. The shop needs a few small items in your browser to work — your basket and your privacy choice. Visit statistics are off unless you say yes, and you can change your mind at any time with Cookie settings.

Strictly necessary

These make the shop work and don't need consent under the ePrivacy rules. They never leave your device except where noted.

Name	What it does	Kept for
ms.cart.v1 local storage	Remembers your basket between visits.	Until you empty the basket or clear your browser
ms.consent.v1 local storage	Remembers whether you accepted or rejected analytics, so we don't ask on every page.	12 months, then we ask again
ms-account cookie	Keeps you signed in to your account (only if you sign in).	30 days, or until you sign out
ms-hint cookie	Tells the page that someone has signed in on this browser, so it can keep your basket in your account. Contains no personal data.	30 days, or until you sign out
ms-csrf cookie	Security token that stops other websites sending forms in your name (contact form).	Until you close the browser
Stripe cookies	Set by Stripe only during payment, to process it securely and prevent fraud. See Stripe's cookie policy.	Set by Stripe

Analytics — only if you accept

If you click Accept we count visits with our own simple analytics, run on our own servers in the EU. It's not Google Analytics and no third party sees it. We record the page you open, the website that sent you (just its name, e.g. instagram.com), campaign tags in the link, whether you use a phone, tablet or computer, and when you add something to the basket. We don't store your IP address or browser details, and we can't tell who you are.

Name	What it does	Kept for
ms.visitor local storage	A random number so a returning visit isn't counted as a new visitor.	Deleted when you withdraw consent; otherwise until you clear your browser
ms.session session storage	A random number grouping the pages of one visit.	Until you close the tab

The visit records themselves are deleted after 13 months. If your browser sends a Global Privacy Control signal, we treat it as a "no" and never ask.

Changing your choice

Use Cookie settings (also at the bottom of every page). Rejecting after accepting stops all measurement straight away and deletes the visitor number from your browser. More about your rights is in our privacy policy.