Cookie Policy

1.What cookies are

A cookie is a small text file a website asks your browser to keep. Browsers also offer local storage, which works similarly but is not sent back to the server automatically. This policy covers both, because both put data on your device.

We use very few. There are no advertising cookies on this store, no tracking pixels, and no third-party analytics scripts.

2.Strictly necessary cookies

These make the shop function. They cannot be switched off from within the site, and no consent banner is required for them because the store cannot work without them.

• Authentication cookies, set by our authentication provider with names beginning sb- : these keep you signed in as you move between pages and are what allows the account and admin areas to recognise you. They expire when your session ends or when you sign out.
• Session refresh cookie: a short-lived token that renews your login so you are not signed out mid-checkout.
• Security cookies set by Stripe on its own hosted checkout page: these detect fraudulent card use. They are set by Stripe, not by us, and are governed by Stripe's cookie policy.

3.Your shopping cart (local storage)

Your basket is not a cookie. It is stored in your browser's local storage under the key lunaya-cart, and it holds the products you added, their quantities and their prices at the time you added them.

This never leaves your device until you press the checkout button, at which point the product identifiers and quantities are sent to our server so it can price the order and create a Stripe payment session. Prices are always re-read from our database at that point, not taken from your browser.

Clearing your browser data, or browsing in a private window and closing it, empties the cart. The cart is not linked to your account, so it does not follow you to another device.

4.What we deliberately do not use

• No Google Analytics or any other third-party analytics tool.
• No advertising or remarketing pixels, including Meta, TikTok and Google Ads.
• No cross-site tracking, fingerprinting or session recording.
• No cookies that profile you for personalised pricing. Every customer sees the same price for the same product.

5.Managing cookies and storage

You can delete or block cookies and clear local storage in your browser settings, usually under Privacy or Site Settings. Most browsers also let you do this for one site at a time.

Be aware of the consequences on this store: blocking the authentication cookies signs you out and prevents you from placing an order or reaching your account, and clearing local storage empties your basket. Nothing else on the site depends on stored data.

Browser Do Not Track and Global Privacy Control signals do not change our behaviour here, because we do not run the kind of tracking those signals are designed to stop.

6.If this changes

If we later add analytics or any non-essential cookie, we will list it in this policy and ask for your consent through a banner before it is set, where the law requires that. Adding such a tool without updating this page would itself be a breach of our own policy.

The date at the top of this page tells you when it was last revised.