This site is built to run with strictly necessary cookies only — there is no third-party advertising or analytics wired in.
What is set
- Session cookie — keeps your basket and CSRF token for the length of your visit. Essential; cannot be switched off.
- Theme preference — a single value in your browser's local storage remembering light or dark mode. Never sent to the server.
- Cookie confirmation — once you accept the notice, a single value is stored in your browser's local storage so we don't ask again. Never sent to the server. Clear your site data to see the notice again.
The confirmation notice
Because we only set strictly necessary cookies, the notice is a plain acknowledgement rather than a consent choice — there are no optional cookies to turn on or off. It appears once per browser and is covered by UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
Adding analytics later
If analytics or marketing tags are ever added, they will be opt-in, this page and the
Privacy Policy will be updated, and the
Content-Security-Policy in app/Http/Middleware/SecurityHeaders.php will need the new
domains allow-listed.