Cookie statement
1. We don’t use cookies
A cookie is a small piece of information a website asks your browser to store for revisiting later. This website does not use cookies.
We do not analyse, tag, advertise, embed video, or provide social media. Nothing here follows you to another site, and nothing here recognises you when you come back.
That is also why you are not asked to agree to anything when you arrive. A consent banner exists to ask permission for tracking; with nothing to track, a banner is not necessary.
2. What we use instead
Two things have to survive a page reload, and both are kept in your browser’s storage rather than in a cookie. Unlike a cookie, this storage is not automatically attached to requests. Checkout details are sent to us when you submit an order.
- Your shopping basket
- What you have added to it is kept in local storage, so that it is still there if you close the tab and come back.
- A half-filled checkout
- The details you have typed into the checkout are kept in session storage for the current tab, so that going back a step, or reloading, does not make you type them again. They are not saved in persistent local storage.
Both are yours to delete at any time through your browser’s settings for this site. Deleting them empties the shopping basket and the saved details; nothing else on the site depends on this information.
3. When you pay
Paying by card takes you to Stripe’s own payment page. That page is Stripe’s, not ours, and Stripe does set cookies there — the ones a payment page needs to work and to detect fraud. Stripe’s own privacy and cookie policies govern that page, and you return to this site once the payment is done.
4. What our host records
Like any website, this one is served by a host that records the requests it receives — the address requested, the time, the browser’s own description of itself, and the IP address it came from. That is how a site is kept running and defended against attacks. We do not link it to a person and it is not used to build a profile.
Our host, Cloudflare, keeps these records for at most three days and then deletes them automatically. To protect our forms against abuse, the IP address is also used for one minute to count how many requests come from it.
5. If this changes
If BREA ever adds something that does set a cookie — a statistics tool, an embedded video — this page will say so before it goes live.