Privacy

Cookies

One cookie, named sid, identifies your basket. It carries a random identifier and nothing else — no name, no email, no advertising identifier — and expires after thirty days. Signing in adds a second cookie for the session itself.

Your chosen theme and light or dark mode are also kept in cookies so the page can be painted correctly before it loads. There are no third-party or advertising cookies.

Kept in your browser only

Favorites live in your browser's local storage and are never sent to the server. Clearing site data clears them.

Visits

Viewing a product writes one row: the time, your IP address, which product it was, where you came from, and the location the CDN attaches to the request — continent, country, region, city, postal code, timezone and approximate coordinates. Those rows are what the visitor screen in the admin is built from. Nothing else about the browser is kept: no user-agent, no fingerprint, no advertising identifier.

The same IP is used to rate-limit abuse and to collapse repeats — one row per product per quarter of an hour, however many times you reload.

Rows older than thirty days are deleted; the sweep runs every time the app starts. Nothing here is sold or shared with anyone.