Cookies & Tracking Notice
Version 1.2 ยท Updated 2026-11-05
1. Essential Cookies & Analytics Preferences
Our website uses essential cookies that are strictly necessary for the service. Optional Google Analytics is off by default and is enabled only if you choose Allow analytics in Cookie preferences. Your choice is remembered in this browser; analytics storage is not granted unless you allow it.
Specifically, we use an HttpOnly, SameSite=Lax 7-day rolling session cookie named atelier.sid. This cookie authenticates your session and account actions, and supports server-linked cart continuity. You can change your analytics choice at any time using Cookie preferences in the site footer. This choice affects analytics storage only; advertising storage remains denied and is not enabled by allowing analytics.
2. Session State & Logs
Beyond our session cookie, we temporarily maintain in-memory React state in your browser to make the app feel fast and responsive. We also record basic server and device request logs for operational telemetry, security, infrastructure monitoring, and abuse prevention.
3. Website Analytics
We use first-party event counts to understand page views, menu and product views, successful additions to cart, checkout starts, submitted orders and selected payment methods. The event payload contains only a predefined event name: no names, email addresses, account or order IDs, full page URLs, search queries, payment details or visitor identifiers. This separate analytics request omits cookies and referrer information, and uses no browser storage or fingerprinting. We honour browser Do Not Track and Global Privacy Control signals.
Separately, Google Analytics is optional and is enabled only after you allow analytics in Cookie preferences. When allowed, Google Analytics may use analytics cookies or similar storage to measure site use. Do Not Track and Global Privacy Control keep analytics denied. Allowing analytics does not enable advertising storage. The first-party event counts are not linked into individual customer journeys. The admin report shows counts for the current server worker since startup; counts reset when it restarts. Identifier-free events also appear in operational deployment logs under the log retention arrangements described in our Privacy Policy. Normal security and infrastructure request handling remains separate from this event-counting feature. We use no advertising cookies, session replay tools or tracking pixels.
4. Browser Settings
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. You can also change your optional analytics choice at any time using Cookie preferences in the site footer. However, if you disable the essential atelier.sid cookie, your account and cart continuity, authentication, and checkout processes may not work reliably.