Cookies and storage settings

Cookies and similar technology

The rules also cover localStorage and sessionStorage. Necessary storage supports functions you request, such as your cart, language choice, login and consent preferences. Analytics and campaign measurement stay off until you actively accept each category. Continuing to browse is not consent.

What is stored on your device?

• Necessary: cart and choices you make, language/display preferences, login sessions where applicable and consent preferences storing separate analytics and campaign-measurement choices, choice time and expiry for up to six months. Older versions are not accepted. This supports requested functions. Cart and language choices can remain until replaced or deleted by you; login validity is governed by the account session, normally 30 days.
• Optional analytics: analytics session stores a random session ID, normalised landing page and last activity in sessionStorage after consent. The session rotates after 30 minutes of inactivity; storage is removed when the tab session ends or analytics consent is withdrawn. Events are not linked to an account/email and no fingerprint is created without the separate device choice below. Legacy analytics IDs are removed.
• Optional campaign measurement: when both analytics and campaign measurement are enabled, the same analytics session stores approved campaign values and a simplified traffic source. These are sent to Husdjurskonst’s own API with analytics; this implementation uses no third-party tags or advertising pixels. Campaign values are removed from the session when consent is withdrawn. Newsletter signup is separate. Legacy saved email address storage is removed and is not used by new analytics events.
• Payment and accounts: when you open checkout or sign in, the provider may use necessary storage for payment, fraud prevention or your session. Stripe explains its processing during payment.

Your choice

On your first visit you can accept both optional categories, choose necessary only, or customise analytics and campaign measurement separately. No optional category is preselected. Open settings here or through “Cookie settings” at the bottom of any page. Change or withdraw your choice at any time. Purchases work when you decline all optional measurement.

Cookie settings

You can also delete storage in your browser, which may remove carts, login and saved choices. See the Privacy policy for personal data, recipients, server retention and your rights.

Separate choice: device recognition and IP

“Device recognition & IP” is off by default and also requires Analytics. Following an affirmative choice, the browser creates a SHA-256 fingerprint from browser version, language, platform, screen, timezone, processor/memory category, touch support, common fonts, canvas and WebGL. Only the hash is sent to Husdjurskonst’s API hosted by Cloudflare, with a tab-session ID. The API also stores the network IP address, broad device class and country. The purpose is recognising returning browsers and diagnosing repeated use; the legal basis is consent. A signature does not reliably identify one unique person and is not linked to names, emails or customer images.

Diagnostics have a technical deletion threshold of 30 days after last activity. Cleanup runs on diagnostic requests and in bounded scheduled sweeps; outages, backlogs and backups can delay complete deletion. Withdraw the choice through Cookie settings to stop new collection; withdrawal does not automatically erase previous data. Contact us about erasure.

Dialog counters and optional Google Analytics

Dialog views, Accept, Customise and saved category choices are counted as daily totals by country and dialog type. Counters contain no visitor ID, IP, page path or link to browsing history. They monitor how the consent interface works; the technical deletion threshold is 180 days. Requests involve network traffic processed by the hosting provider. Analytics and marketing consent remain separate from newsletter signup.

If Google Analytics 4 is configured and you choose Analytics after this notice, registered visit events may also go to Google. The tag loads only after that choice; localhost preview sends nothing to Google. Google may use analytics cookies beginning with _ga, with a configured base lifetime of 180 days that may renew on use, and process browser/visit data. Advertising signals and ad personalisation are disabled. Raw IPs and device fingerprints are not forwarded as custom Google event fields; Google receives the connection IP but states GA4 does not log or store it. Recipients, GA4 account retention and transfer safeguards must be established before publication. Older analytics choices without this notice do not activate GA4. Withdrawal stops our event forwarding and removes the integration’s accessible analytics cookies.