Cookie Policy

1. What we use

This site uses cookies and browser storage for shopping, preferences and optional analytics. Google Analytics loads only after you allow it. Advertising features are disabled, and we do not sell your data.

Product videos hosted on YouTube stay unloaded until you press play. Playback then uses YouTube’s privacy-enhanced player at youtube-nocookie.com. YouTube may then set its own cookies and receives your IP address and how you use that player, under YouTube’s terms. We do not receive a separate record of that playback.

2. Strictly necessary

These are required for the site to work and are set without consent, as the law permits.

• Session cookie, keeps you signed in to your account. HTTP-only, Secure on the HTTPS website, SameSite=Strict. It is a persistent cookie with a seven-day maximum age; signing out clears it.
• CSRF token, protects account and checkout forms from cross-site request forgery. SameSite=Strict and Secure on the HTTPS website, with a seven-day maximum age. The browser reads this token to protect requests, so it is not HTTP-only.
• Cart contents, held in your browser so the basket survives a page reload. Cleared when the order completes.

3. Functional

Set only in response to something you chose. Clearing them resets the preference, nothing more.

• Display currency, remembers the currency you selected.
• Chassis theme, remembers the plug-in chassis theme you picked.
• Cookie preference, records the choice you made about this policy.
• Browser notification preferences and a subscription management token are stored locally after you enable notifications. They let you change topics or switch notifications off. These records remain until you switch notifications off or clear browser storage.

4. Affiliate referral

If you arrive through an approved affiliate link, we ask whether you want to allow referral credit. Only after you allow it do we set a referral cookie. It lasts 60 days and records the partner code, campaign and arrival time. It is not used to build a profile of you. Declining it does not change what you pay.

If your first qualifying paid purchase is referred by a founding creator, we retain an order-accounting record linking your customer email to that creator for commission on later purchases, including direct visits. An explicitly entered creator code can also establish this relationship. This record has no scheduled expiry; it is separate from the optional browser cookie. We never provide your email, name or licence details to the creator. Contact us about your privacy rights using the Privacy Policy.

5. Analytics

With your permission, Google Analytics 4 measures public page visits, product interest, cart and checkout activity, and confirmed purchases. Google receives browser/device information, public page and campaign information, product identifiers and purchase amounts. We exclude customer names, email addresses, licence keys, payment credentials and private checkout-link parameters. Google advertising personalization and Google signals are disabled.

The Google Analytics _ga and property-specific _ga_ cookies are configured to expire after 60 days without extending that expiry on each visit. Our analytics preference lasts 180 days. A local purchase-reference marker prevents repeat reporting when you reload a payment confirmation; it remains until you clear browser storage.

No Google Analytics tag loads before you allow analytics. Declining keeps it off. Analytics preferences near the footer lets you change your choice; withdrawing stops collection and removes this property’s analytics cookies. We also honor Do Not Track and Global Privacy Control.

Google explains its processing at https://policies.google.com/technologies/partner-sites. Our separate first-party store and order accounting remains in use.

A separate optional preference enables anonymous click and scroll maps on public catalogue and editorial pages. We collect public paths, click coordinates, scroll depth, screen dimensions and named product actions. We exclude private account and checkout pages, form contents, names, email addresses, licence keys and payment credentials. Full session recordings are disabled.

Click-map collection uses an anonymous browser-session identifier which expires after 30 minutes of inactivity. The preference lasts 180 days. Events can wait on our website server for up to seven days within a 128 MB queue budget, then are imported into our own local analytics database and retained for 30 days. Change Analytics preferences to stop new collection; Do Not Track and Global Privacy Control also disable it.

6. Controlling cookies

You can delete or block cookies in your browser settings. Blocking the strictly necessary ones will break sign-in and checkout.

Use Analytics preferences near the footer to change analytics consent. The separate referral preference controls affiliate cookies. You can also clear browser storage or contact privacy@fatberrydsp.com.

7. Related policies

How we handle the personal data behind these cookies is described in the Privacy Policy. Affiliate partners receive pseudonymous order references, net amounts, applicable rates and commission totals, never customer names, emails or licence details. The standard programme pays 25%; individually accepted founding creator terms pay 50% and include future customer purchases. Both apply a 50 USD payout threshold.