Strictly necessary
These make the site work and cannot be switched off:
refreshToken— keeps you signed in. Scripts on the page cannot read it.XSRF-TOKEN— protects forms against cross-site request forgery. Our own scripts read it on purpose, because the protection works by sending it back with each request.session_id— keeps a guest basket between visits.
Cloudflare, which protects the site, may also set its own security cookies, such as __cf_bm, to tell people apart from automated traffic.
Stored in your browser
These are not cookies, but they work in a similar way and stay on your device:
cookie_consent— remembers the choice you made on the cookie banner.session_id— the same guest identifier as above.guest_cart— your basket while you are not signed in.recently_viewed— the products you looked at, for the "Recently viewed" strip. This list is never sent to us.auth_state— tells the site whether you are signed in, so the page shows the right menu straight away.
Analytics — only with your consent
If you accept analytics, we record which products are shown to you, which you open, how long you spend on them, and where on the site you found them. This is our own measurement: it is stored on our server, used only to improve the shop, never shared, and kept for up to 14 months. It sets no extra cookies; it uses the session identifier above.
If you decline, nothing is recorded.
Marketing
None. This site sets no advertising or third-party tracking cookies.
Changing your choice
Change your mind at any time with the controls below. Clearing your browser's data for this site also resets it.