Cookies & Browser Storage

1. Necessary functions and optional analytics

Necessary storage provides the cart, checkout, security and preferences you request. Optional shopping analytics are enabled only after you allow them. Allow analytics does not subscribe you to marketing. Contact for these technologies: Fundacja Rozwoju Przedsiębiorczości „Twój StartUp”, ul. Żurawia 6/12 lok. 766, 00-503 Warszawa, Poland. KRS 0000442857 · NIP 5213641211 · REGON 146433467, [email protected]. See /privacy for personal-data processing and GDPR rights.

2. Shopping and preference cookies

orevanto-session: necessary first-party, HttpOnly session cookie linking your browser to the server cart/checkout and privacy decision; normally 30 days. It uses SameSite=Lax and Secure on HTTPS.

orevanto-language and orevanto-currency: remember your selected language/currency, normally up to one year. orevanto-country: an initial approximate country may be retained for one hour; a country you choose may be retained for up to 30 days. These support regional display; your actual checkout address determines delivery.

Security providers can use necessary protection/access cookies when the relevant challenge or protected area is used. Store-owner authentication cookies are for the restricted admin area, not shopper profiling; the admin session has a maximum of 12 hours and a separate short authentication challenge.

3. Local browser preferences

localStorage may contain orevanto-cart-v1 (product/quantity continuity), orevanto-language, orevanto-currency, orevanto-currency-rates and orevanto-email-offer-subscribed. The last item is an interface hint, not proof of subscription or marketing permission. Language/currency cache and hero-start preferences support interface continuity; localStorage generally has no automatic browser expiry and remains until overwritten, removed by the application or cleared by you.

The hero preference orevanto:hero:last-start:v1 can remember the last opening scene. These preferences are not sent as an independent marketing identifier.

4. Tab/session storage

sessionStorage can retain country selection, set-builder selections (orevanto-bundle-selection-v1:*), checkout cart continuity (orevanto-checkout:*), the hero visit (orevanto:hero:visit:v1) and page scroll restoration (scroll:*). This is limited to the browser tab/session and normally cleared when it ends. The hero’s continuity window is 30 minutes; it is separate from consented analytics.

5. Analytics and campaign links

After consent, orevanto-analytics-visit in localStorage stores a random visit ID and last-activity time. Its activity window is 30 minutes; the browser entry can remain longer until replaced or removed. Declining or withdrawing analytics removes this entry and stops new optional observations.

UTM fields, campaign/creator/creative identifiers and the short-link name may be read from the landing URL. Before consent they are kept only in tab memory for arrival continuity, without an analytics request or persistent analytics identifier. The short-link redirect itself does not create a shopper cookie or a personal click record. Consented attribution may later be linked to checkout as described in /privacy.

Cloudflare’s aggregate Web Analytics is separate. We currently do not install Meta, TikTok, Pinterest or Google advertising pixels through this cookie choice. External social platforms process activity on their own websites when you follow their links.

6. Payment and email providers

When you open Stripe’s hosted payment page, Stripe’s own necessary payment/fraud-prevention storage and notices apply. It is not the same as optional shop analytics. Klaviyo subscription and email processing use the permissions described in /privacy; a marketing email may contain provider interaction measurement according to its settings. That does not turn the store’s analytics choice into email subscription consent.

7. Control your choices

Use Manage preferences in the footer to decline or withdraw store analytics, or change your choice later. You can also clear site cookies/storage in your browser. Clearing or blocking necessary storage can reset the cart, preferences or checkout continuity; it does not cancel a paid order or withdraw an email subscription. Contact [email protected] for marketing withdrawal or applicable data deletion. If new optional technologies are introduced, we update this notice and the applicable consent controls.