#1. What these technologies are
A cookie is a small text file a website asks your browser to keep and hand back on the next request. Local storage does much the same but the data never leaves your device unless code sends it. A pixel or web beacon is a tiny image or script whose loading tells a server that a page was opened. Device fingerprinting infers an identifier from your browser's configuration without storing anything.
We use cookies and local storage. We do not fingerprint, and we do not permit our partners to fingerprint on this site — Google's advertising products are configured to rely on consented identifiers only.
#2. The three categories
- Strictly necessary — always on
- Without these the site cannot do what you asked. They keep your cart between pages, remember your cookie choice so we stop asking, and protect checkout from cross-site request forgery. No law requires consent for these, and there is no switch for them, because switching them off would mean switching off the shop.
- Analytics — off by default
- Tells us how many people read a journal post, which product photographs get looked at, and where people abandon checkout. Aggregate, never used to build a profile of you, and never joined to your order record. It genuinely changes what we build, which is the only reason we ask.
- Advertising — off by default
- Allows advertising partners to select ads, cap how often you see the same one, and measure whether an ad led to a visit. With consent these may be personalised using your activity on this and other sites; without it, any ads shown are non-personalised and are selected from the page content alone.
#3. Every cookie, by name
First-party entries are set by this site. Third-party entries are set by the named provider and only ever after you have consented to that category.
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| vv.consent.v2 | vevarte.com | Records which categories you allowed or refused, and when | 12 months | Local storage |
| vv.cart.v1 | vevarte.com | Your basket — product ids and quantities only, never prices | Until cleared | Local storage |
| vv.wish.v1 | vevarte.com | Saved pieces on your wishlist | Until cleared | Local storage |
| vv.seen.v1 | vevarte.com | Recently viewed, to show the row at the bottom of a product page | Until cleared | Local storage |
| vv.promo.v1 | vevarte.com | Remembers you have dismissed the showroom notice so it stops reappearing | Session | Local storage |
| __session | Firebase Hosting | Carries a signed-in staff session on the internal panels. Never set for public visitors | Session | Cookie |
| _GRECAPTCHA / App Check | Confirms the request came from a real browser and not a script attacking checkout | 6 months | Cookie |
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes one browser from another so a visit is not counted twice | 2 years | Cookie |
| _ga_<id> | Google Analytics | Keeps session state for this specific property | 2 years | Cookie |
| _gid | Google Analytics | Distinguishes browsers within a day | 24 hours | Cookie |
| _gat | Google Analytics | Throttles the request rate on busy pages | 1 minute | Cookie |
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| __gads / __gpi | Google AdSense | Ad selection, frequency capping and measurement | 13 months | Cookie |
| IDE / DSID | Google DoubleClick | Measures whether an ad led to a useful action, and personalises selection | 13 months | Cookie |
| NID / 1P_JAR | Remembers ad preferences and settings across Google services | 6 months | Cookie | |
| test_cookie | Google DoubleClick | Checks whether your browser accepts cookies at all | 15 minutes | Cookie |
#4. How consent works here
- On your first visit, before any non-essential script runs, Google Consent Mode is initialised with every relevant signal — ad_storage, ad_user_data, ad_personalization, analytics_storage, personalization_storage, functionality_storage — set to denied.
- The banner appears. "Reject non-essential" is presented with the same visual weight as "Accept all", because a refusal that is harder to click than an acceptance is not a free choice, and both Google's EU user consent policy and the GDPR treat it as no consent at all.
- "Choose what to allow" opens per-category switches. Nothing is pre-ticked.
- Your choice is written to your browser with a timestamp and the policy version, and the consent signals are updated immediately — no reload needed.
- The choice is remembered for 12 months, or until you clear your browser storage, or until this policy changes materially — at which point we ask again rather than assume.
We keep a record of the choice itself, not of you: the categories, the timestamp and the consent version. That record is what lets us demonstrate, if asked, that consent was freely given and specific.
#5. Changing your mind, and browser-level controls
Use Manage cookies in the footer of any page. It reopens the same panel and takes effect immediately — withdrawing is exactly as easy as granting, which is the legal test and also just decent.
You can also work at the browser level, which overrides anything we do: Chrome — Settings › Privacy and security › Third-party cookies. Safari — Preferences › Privacy › Block all cookies. Firefox — Settings › Privacy & Security › Enhanced Tracking Protection, set to Strict. Edge — Settings › Cookies and site permissions.
We honour the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as a refusal of advertising cookies and, where it constitutes one, as an opt-out of sale or sharing under US state law — without you needing to touch our banner.
#6. Opting out at the advertising networks themselves
These work across every site you visit, not only this one, and they are worth more than any single site's banner:
- Google — My Ad Center turns off personalised advertising across Google services and on sites using Google's ad products.
- Google Analytics — the browser opt-out add-on blocks measurement on every site that uses it.
- Digital Advertising Alliance — optout.aboutads.info for participating US networks.
- Network Advertising Initiative — optout.networkadvertising.org.
- European Interactive Digital Advertising Alliance — youronlinechoices.eu.
Opting out of personalisation does not remove advertising. It makes the ads less relevant and stops them being selected from a profile of your browsing.
#7. Related reading
The Privacy Policy covers everything beyond cookies. The Advertising & Sponsorship Disclosure explains our relationship with advertising networks and how sponsored content is labelled. Google publishes its own account of how it uses cookies in advertising.