Cookie Policy & GDPR
Last updated: 1 June 2026
1. What are cookies?
Cookies are small text files a website stores on your device. We also use related technologies — your browser’s local storage and session storage — which keep small pieces of information on your device so the site works and remembers your preferences.
2. The cookies we use
We use a single, strictly necessary cookie. We do not use any analytics, advertising, or tracking cookies, and we do not build profiles of visitors.
- connect.sid — keeps shop staff signed in to the admin area. Strictly necessary; lasts up to 24 hours (or until sign-out). It is only set when someone signs in, so ordinary visitors browsing the shop are not given this cookie.
3. Browser storage we use
The following are kept in your browser’s local/session storage (not cookies). They stay on your device, are never sent to us for tracking, and you can clear them at any time in your browser settings.
- atlas-theme — remembers your light/dark mode choice.
- atlas-cat, atlas-lang, atlas-sort — remember your category, language and sort selections.
- sg-basket — the contents of your shopping basket.
- atlas-cookie-ack, atlas-welcome-dismissed — remember that you dismissed the cookie notice / welcome message.
- atlas-card-order — the order used for “previous / next” navigation between cards (cleared when you close the tab).
4. Third-party services
- Payments. When you check out, you are taken to our payment provider’s secure page (for example Stripe or PayPal). They set their own cookies on their own pages to process the payment and prevent fraud, governed by their own cookie and privacy policies. We never see your card details.
- Fonts & assets. We load web fonts (Google Fonts) and a few static files from content delivery networks. These do not set cookies on our site, but your device’s IP address is shared with them as part of delivering the file.
- External links. Links to other websites (for example eBay or social media) may set their own cookies once you visit them, under their own policies.
5. Managing cookies and storage
You can control or delete cookies, and clear local storage, through your browser settings. As we use only a single strictly-necessary cookie (for staff sign-in), blocking it only affects the ability to stay signed in to the admin area — ordinary shopping is unaffected.
6. GDPR & consent (UK GDPR / PECR)
Under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR), consent is required for non-essential cookies. Because we currently use only a strictly-necessary cookie and functional browser storage — with no analytics, advertising, or tracking — no consent is needed for these. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.
7. Your data rights
For how we handle personal data and your rights under UK GDPR, see our Privacy Policy. You can complain to the Information Commissioner’s Office at ico.org.uk.
8. Changes to this policy
We may update this Cookie Policy from time to time. The “last updated” date above reflects the latest revision.
9. Contact
Questions about cookies or your data? Email info@shinygrails.com.