Cookie Policy
WHAT LOADS BEFORE YOU CHOOSE — files from krahs.app, and nothing else. The page, its styles, its images and both typefaces come from our own server; the font files sit at krahs.app/fonts, so no font network is contacted and your address is handed to nobody while you are still deciding. No analytics or advertising script is fetched and no cookie is set. The only things on your device at that point are the ones the shop cannot work without: what you put in your bag, and — the moment you answer — your answer itself.
TWO QUESTIONS, NOT ONE — the banner asks about two different things and lets you answer them separately. Analytics: Google Analytics 4, which counts visits and shows us which pages sell. Advertising: the Meta Pixel and the Pinterest tag, which measure our ads and let those networks build an advertising profile of you. Accept all, Decline all and Choose sit together on the first screen, the same size and the same weight, with nothing hidden one level deeper; Choose opens one switch per purpose and a Save choices button. Refusing costs one press, exactly like agreeing.
THE SCRIPTS ARE NOT OURS — they are fetched from Google (googletagmanager.com), Meta (connect.facebook.net) and Pinterest (s.pinimg.com), they run inside your browser, and what they record goes to those three companies, not only to us. They use it to measure audiences and to target advertising at you, here and elsewhere. Each time your browser fetches or calls them it also sends any cookies it already holds for those companies’ own domains, unless it is set to block third-party cookies.
WHAT EACH PURPOSE SETS — analytics: _ga and _ga_*, by Google, up to two years. Advertising: _fbp, by Meta, up to three months; _pin_unauth, by Pinterest, up to one year. Those lifetimes are set by Google, Meta and Pinterest rather than by us, and they can change them. Leave a purpose off and none of its cookies is written in the first place.
WHAT WE KEEP ABOUT YOUR CHOICE — one entry in your browser’s local storage, named krahs.consent.v2. It holds your answer for each purpose separately, the moment you gave it, and which version of this notice you were shown — so a consent can be shown to be informed, dated and specific, which a bare yes never could. It stays on your device and is not sent to our server. If you answered the older banner, which took a single yes or no for everything, that answer is carried over to both purposes and the old entry is removed, so we do not make you choose twice for nothing. Such an entry is marked as carried over rather than dressed up as an answer to this notice: it records that you agreed to the older, coarser banner, and the moment stored beside it is when it was carried over, not when you first pressed the button. At the next change of purposes, third parties or this notice you are asked again from scratch.
WHEN WE ASK AGAIN — after 24 months, because a two-year-old click should not speak for you forever. And whenever the purposes, the third parties or this notice change: the version stored beside your answer no longer matches the one you would be agreeing to now, so the answer is treated as unanswered. In both cases the banner returns and nothing loads until you have answered it.
TAKING IT BACK — Cookie settings, in the Legal column at the foot of every page, reopens the banner with your current switches in it. Turning a purpose off is one press, the same as turning it on, and from that moment nothing more is loaded for it and the stored answer is replaced by your new one. A script already running in the page open in front of you cannot be lifted back out of it; it is gone once the page reloads.
THE COOKIES ALREADY SET ARE REMOVED BY YOUR BROWSER, NOT BY US — we can stop loading Google, Meta and Pinterest, but we cannot reach into your browser and delete what their scripts have written there. Only you can. Open the privacy section of your browser settings and clear cookies and site data — for krahs.app, and for google.com, facebook.com and pinterest.com if you want theirs gone too. Clearing krahs.app also erases your stored answer and your bag, so the banner will ask again on your next visit.
WHERE THIS DATA GOES — Google LLC, Meta Platforms, Inc. and Pinterest, Inc. are American companies, and what these tools collect reaches the United States. All three have certified themselves under the EU-U.S. Data Privacy Framework, which the European Commission recognised on 10 July 2023 as offering adequate protection — the adequacy decision of Art. 45 GDPR. For transfers that framework does not cover, Google and Pinterest state they fall back on the Commission’s standard contractual clauses, Art. 46 GDPR. Decline both purposes and none of this happens at all.
THEIR OWN RULES — Google: policies.google.com/privacy · Meta: facebook.com/privacy/policy · Pinterest: policy.pinterest.com/en/privacy-policy. What each of them does with the data once it arrives is set out there, not here.
WHAT WE DO NOT DO — we do not use cookies to read anything else on your device, and we do not read silence, scrolling or a closed banner as a yes.
WHAT GOES TO THOSE NETWORKS WHEN YOU BUY — this one deserves plain words rather than a blanket denial. If advertising was switched on when you ordered, our own server reports the finished sale once: the catalogue numbers of the items, how many, the amount, the order number, and your email and phone turned into a one-way code that cannot be turned back into either. They never get your name, your street address, your notes to us, or anything about how you paid. With advertising switched off, nothing about your order leaves us — not from your browser and not from our server.
More on data handling is in our privacy policy.