1. What cookies are
Cookies are small files stored on your device. We also use similar technologies, such as local storage. Together, they let the site work, remember your choices and, with your consent, measure and improve its performance.
2. Categories we use
Necessary
Always on. They are essential for the site to work: keeping your session and your cart, security, and remembering your cookie choice itself. They cannot be turned off, because the store would not work without them.
Analytics
Off until you accept. They help us understand how the store is used so we can improve it. Analytics scripts only load after your consent. When you accept, the site loads Google Analytics 4, an audience measurement tool provided by Google: it sets the cookies listed below and sends Google data about your visit (the pages and pieces you view, the steps of your purchase, your browser and device, and your IP address as received by Google's servers). It runs in Consent Mode v2 with advertising storage, Google signals and ad personalisation turned off. This is audience measurement, not anonymous data. The category also loads Vercel Web Analytics, a cookie-free audience measurement script, and creates our own visit identifier (xtm_sid).
Marketing
Off until you accept. When you accept this category, the site loads two third-party marketing trackers: the Meta Pixel (Meta) and the TikTok Pixel (TikTok). They measure the performance of our ads on those platforms. They send Meta and TikTok data about your visit (pages viewed, pieces viewed or added to your bag, start of checkout, purchase amount and order number), together with the identifiers they read from their cookies and your browser. We send them no email address, name or postal address. Meta and TikTok process this data under their own policies, possibly outside the European Union. This category also covers our own referral cookie, which remembers the referral link you arrived from so that a referral can be credited if you order. None of these is set or loaded unless you accept this category.
If you withdraw your consent, the pixels stop and the cookies they set on our domain are deleted. Cookies already set on the domains of Meta, TikTok or Google can only be deleted from your browser settings.
3. Cookies and storage we set
The complete list of what this site stores on your device. The first block holds real cookies, the second holds browser storage (local storage and session storage), which works like cookies and is covered by the same choices.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| authjs.session-token (__Secure-authjs.session-token on HTTPS) | Keeps you signed in to your account (and to the admin area for staff). Set when you sign in. | 30 days | Necessary |
| authjs.csrf-token (__Host-authjs.csrf-token on HTTPS) | Protects sign-in forms against cross-site request forgery. Set when you open or use a sign-in form. | Session | Necessary |
| authjs.callback-url (__Secure-authjs.callback-url on HTTPS) | Remembers the page to return you to after you sign in. | Session | Necessary |
| xtm_lang | Remembers the language you chose with the EN / FR switcher. Set only when you click it. The address of the page decides the language; the only exception is a referral link (/r/code), which opens in the language you chose. | 1 year | Necessary |
| xtm_ref | Remembers the referral code from a link of the form /r/code, so the referral can be credited when you order. Only set if you accept Marketing. Removed if you withdraw that consent. | 30 days | Marketing |
| _fbp, _fbc | Meta Pixel: measures ad performance on Meta platforms. Only set if you accept Marketing. | 90 days | Marketing |
| _ttp, _tt_enable_cookie, ttcsid* | TikTok Pixel: measures ad performance on TikTok. Only set if you accept Marketing. | Set by TikTok, see its cookie policy | Marketing |
| _ga, _ga_<ID> | Google Analytics 4: audience measurement (Consent Mode v2, advertising signals off). Only set if you accept Analytics. | 2 years | Analytics |
| Name | Purpose | Duration | Category |
|---|---|---|---|
| xtm_consent (local storage) | Stores your cookie choices (analytics, marketing) and the time you made them. | Until you clear it or change your choice | Necessary |
| xtm_cart (local storage) | Keeps the contents of your bag on your device. | Until you clear it or complete an order | Necessary |
| xtm_country (local storage) | Remembers the delivery country you picked, for the bag estimate and the checkout. | Until you clear it | Necessary |
| xtm_co_form (session storage) | Keeps what you typed in the checkout form if the page reloads, so you do not have to type it again. | Until you close the tab | Necessary |
| xtm-install-dismissed-at (local storage) | Remembers that you dismissed the invitation to install the site as an app, so it does not come back right away. | Re-offered after 14 days; the value stays until you clear it | Necessary |
| xtm_sid (local storage) | Random (pseudonymous) identifier that links the steps of one visit (view, bag, checkout) in our own first-party funnel statistics. Created only after you accept Analytics. | Until you clear it | Analytics |
When you accept Analytics, the site also loads Vercel Web Analytics, a cookie-free audience measurement script. When you pay, the payment provider's own scripts load on the payment step and are governed by that provider's policy.
4. Change your preferences
You can update or withdraw your consent at any time. Opening preferences shows the cookie banner again, where you can accept, decline or adjust each category.
Analytics and marketing trackers only fire after consent. If you decline them, only necessary cookies are used.
5. Managing cookies in your browser
You can also block or delete cookies via your browser settings. Note that blocking necessary cookies can prevent parts of the store from working.
6. More information
How we handle the data linked to these technologies is described in our Privacy Policy.