Cookie Policy

A cookie is a small file a site asks your browser to keep and send back on your next visit. This page lists every cookie set on this site. There are eight, and the list below is all of them.

Two of them belong to Meta, the company behind Facebook and Instagram, and measure our ads: see section 2. Apart from those two, we run no advertising cookies and no third-party analytics. We do not fingerprint your browser. We count visits ourselves, without cookies: see section 5.

1. Cookies we set without asking

These four are necessary: the site cannot do what you asked of it without them, so they do not need your consent. Two of them exist only because you made a choice, and they remember it.

CookieWhat it doesHow long it lasts
better-auth.session_tokenKeeps you signed in. Without it, every page would ask for your password again.Until you sign out, or the session expires
better-auth.session_dataA copy of your sign-in that lasts one minute, so pages load without asking the server each time.1 minute
consentRemembers the answer you gave on the cookie banner, so we stop asking.6 months
themeRemembers whether you chose the light or dark palette.1 year

2. Cookies Meta sets to measure our ads

While the shop is connected to Meta, the company behind Facebook and Instagram, these two are set for every visitor, without asking.

CookieWhat it doesHow long it lasts
_fbpSet by the Meta Pixel to recognise your browser between visits.90 days
_fbcRemembers the Facebook or Instagram ad you clicked to come here.90 days

We also send Meta what you do here - the pages you view, what you search for and add to your cart, and when you create an account, start a checkout, send a payment reference, buy, download a free product, verify a school or work email, or say yes to offer emails or notifications - with your IP address and browser type and, if you are signed in, hashes of your email address and account ID: scrambled forms Meta can match against its own records but cannot read. Meta uses this to tell us which of our ads bring visitors and sales and to show our ads to people likely to want them, and it may combine this with what it knows from elsewhere. Depending on settings in Meta's own tools, its pixel may also note the buttons you click and details of the page, and pick up an email address typed into a form, which it hashes the same way.

Meta may also use its own cookies, on facebook.com, if your browser allows them; Meta's cookie policy covers those. To stop the two above, block or delete this site's cookies in your browser.

3. Cookies we set only if you accept

We run a referral programme: people can share a link, and a purchase that follows earns them a commission. Making that work means remembering your browser for months and crediting a later purchase to the person whose link you followed, so we do it only if you say yes. Counting visits is separate and uses no cookies: section 5 says what it remembers, and for how long.

CookieWhat it doesHow long it lasts
refHolds the referral code you arrived with, so a purchase can be credited to whoever referred you.90 days
vidA random identifier for your browser, so repeat visits from one person count once rather than many times.180 days

Refuse, and neither is set and no referral record of your visit is written. Nothing else on the site changes: you can browse, buy and download exactly as before. The only person affected is whoever shared the link, who earns nothing.

4. What we keep in your browser's storage

Four things are stored by the page itself rather than as cookies. Only the last is ever sent to us, and only as its row says; the two numbers we count visits with are in section 5.

KeyWhat it holds
protemplate.cartThe products in your cart, as a list of identifiers. Your cart never leaves your browser until you check out.
protemplate.refA copy of an accepted referral code, in case the cookie is cleared before you sign up.
protemplate.meta-sentOnly while the shop is connected to Meta: which of your checkouts and purchases this browser has already told Meta about, so none is counted twice.
protemplate.offersOnly while the shop runs an offer: when this browser first visited and last opened a page, and the offers it has shown, so an offer's countdown is the same on every page - and the offers you hid, so they stay hidden until they end. Sent to us only when you are signed in, so your account gets the offer you were shown. If you choose Reject on the cookie banner, it is kept only until you close the tab.

5. How we count visits

We count visits ourselves, on our own servers, to learn which pages and products people look at, what they search for, and where they stop on the way to buying. No other company receives any of it, and it uses no cookies.

Each page you open sends us its address without anything after a "?", the site's language, whether you are on a phone, a tablet or a computer, the site that sent you and any campaign tags in the link you followed, and - on our product, search, cart and checkout pages - the products you view or add to your cart, what you search for, and the checkouts you start. Our servers add the country your connection comes from and the kind of browser you use. We never store your IP address, your name or your email address with any of this.

KeyWhat it holdsHow long it lasts
protemplate.visitorA random number for your browser, so a second visit within 30 days counts as the same visitor. Sent to us with each page you open.30 days, then replaced
protemplate.visitA random number for this visit, so the pages you open in one sitting count as one visit. Sent to us with each page you open.Until you close the tab, or after 30 minutes without opening a page
protemplate.recordingOnly while visit recordings are on: whether this visit is being recorded.Until you close the tab

While visit recordings are on, we may also record how you move through the site - where you tap, scroll and type - and play it back to see where the site confuses people. Everything you type is hidden before it leaves your browser, and so are your name, your email address and your orders. Recordings are kept for at most 90 days.

While heatmaps are on, we also count where on each page people tap and how far down they scroll, as totals for all visitors together.

If you choose Reject on the cookie banner, we still count your visit, but protemplate.visitor is kept only until you close the tab, and your visit is never recorded. If you choose Reject during a recorded visit, the recording stops and what was recorded is deleted.

6. Changing your mind

Use the cookie settings link at the bottom of any page. It clears your stored answer and asks the question again, and you can answer it differently.

That question decides the referral cookies, whether your visits may be recorded and remembered between tabs (see section 5), whether the offers you are shown are remembered between tabs (see section 4), and - if you asked for emails about offers - whether the products you look at while signed in are noted for a reminder - a Reject forgets those already noted - as our Privacy Policy explains. Meta's two cookies are set for every visitor while the shop is connected to Meta, and your browser's settings are the way to stop them.

Your browser can also block or delete cookies for this site. Blocking the necessary ones will stop you staying signed in.

7. Changes to this policy

If we add a cookie, it will be listed here before it is set.