What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your actions and preferences over time.

Cookies We Use

1. Strictly Necessary Cookies

These cookies are essential for our website to function and cannot be disabled.

ProcessWire Session Cookie (wire)

• Purpose: Maintains your shopping cart, checkout process, order information, and certain font delivery functions during your visit
• Type: Session cookie (deleted when you close your browser)
• Data stored: Cart contents, order ID, checkout status, session identifier, temporary font access credentials
• Provider: Our website (first-party)
• Duration: Session (deleted when browser closes)
• HttpOnly: Yes (not accessible via JavaScript)
• Secure: Yes (HTTPS only)
• SameSite: Lax
• Legal basis: Necessary for contract performance (GDPR Art. 6(1)(b)) and legitimate interests in protecting our font assets (GDPR Art. 6(1)(f))

Font Kit Session Cookie (fk_sid)

• Purpose: Enables secure delivery and display of web fonts throughout the site. This cookie binds font requests to your browsing session to prevent unauthorized access to font files.
• Type: Session cookie (but may persist if browser keeps session alive)
• Data stored: Random session identifier (22 characters, alphanumeric)
• Provider: Our website (first-party)
• Duration: Session (deleted when browser closes)
• HttpOnly: No (must be readable by font requests)
• Secure: Yes on HTTPS (automatically set based on connection)
• SameSite: Lax
• Legal basis: Necessary for website functionality and legitimate interests in protecting our font assets and providing proper typography display (GDPR Art. 6(1)(f))

2. Payment Processing Cookies (Stripe)

When you proceed to checkout, Stripe sets the following cookies for secure payment processing:

__stripe_mid

• Purpose: Fraud detection and prevention
• Type: Persistent cookie
• Provider: Stripe, Inc. (third-party)
• Duration: 1 year
• Domain: Your site domain
• SameSite: Strict
• Legal basis: Necessary for contract performance and legitimate interests in security

__stripe_sid

• Purpose: Payment session management and processing
• Type: Session cookie
• Provider: Stripe, Inc. (third-party)
• Duration: 30 minutes
• Domain: Your site domain
• SameSite: Strict
• Legal basis: Necessary for contract performance

__Secure-has_logged_in

• Purpose: Stripe account authentication (if accessing Stripe-hosted pages)
• Type: Persistent cookie
• Provider: Stripe, Inc. (third-party)
• Duration: Up to 1 year
• Domain: .stripe.com
• Secure: Yes (HTTPS only)
• SameSite: Lax
• Legal basis: Necessary for service functionality

__stripe_orig_props

• Purpose: Tracks referral information for Stripe's analytics
• Type: Persistent cookie
• Provider: Stripe, Inc. (third-party)
• Duration: Up to 7 months
• Domain: .stripe.com
• Secure: Yes (HTTPS only)
• SameSite: Lax
• Legal basis: Legitimate interests in improving payment services

machine_identifier

• Purpose: Device identification for fraud prevention
• Type: Persistent cookie
• Provider: Stripe, Inc. (third-party)
• Duration: Up to 7 months
• Domain: .stripe.com
• Secure: Yes (HTTPS only)
• SameSite: Lax
• Legal basis: Legitimate interests in security and fraud prevention

site-auth

• Purpose: Authentication for Stripe services
• Type: Session cookie
• Provider: Stripe, Inc. (third-party)
• Duration: Session
• Domain: .stripe.com
• Secure: Yes (HTTPS only)
• SameSite: Lax
• Legal basis: Necessary for service functionality

For complete information about Stripe's cookies and data processing:

• Privacy Policy: https://stripe.com/privacy
• Cookie Policy: https://stripe.com/cookies-policy/legal

3. Analytics Cookies (Optional)

These cookies help us understand how visitors use our website so we can improve it. These cookies are only set with your explicit consent.

Google Analytics Cookies

• Purpose: Website analytics and visitor behavior tracking
• Type: Persistent cookies
• Provider: Google LLC (third-party)
• Legal basis: Consent (GDPR Art. 6(1)(a))
• Data collected:
  • Pages visited
  • Time spent on site
  • Browser and device information
  • Referring website
  • General geographic location (city/country level)
  • Anonymized IP address
• Privacy Policy: https://policies.google.com/privacy

Google Analytics cookies include:

• _ga (2 years) - Distinguishes unique users
• _ga_<container-id> (2 years) - Persists session state
• _gid (24 hours) - Distinguishes users
• _gat (1 minute) - Throttles request rate

Important: We configure Google Analytics with:

• IP anonymization enabled
• No personally identifiable information (PII) sent
• Data retention set to 14 months
• Data sharing with Google disabled

You can opt out of Google Analytics at any time by:

1. Withdrawing consent through our cookie banner
2. Using the Google Analytics Opt-out Browser Add-on
3. Blocking analytics cookies in your browser settings

Data Stored in Sessions

While not cookies, we store the following information in secure server-side sessions during your visit:

• Shopping cart contents
• Order information during checkout
• Payment intent identifiers (Stripe)
• Checkout page references
• Session recovery data (if your session is interrupted)
• Temporary font delivery credentials and access tokens

This data is automatically deleted when your session ends or after a period of inactivity.

Your Rights Under GDPR

As a visitor from the EU/EEA, you have the following rights:

• Right to Access: Request information about data we process
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics cookies at any time through our cookie settings

Managing Cookies

Essential Cookies (wire, fk_sid)

You cannot disable essential cookies as they are necessary for:

• The shopping cart and checkout to function
• Web fonts to load and display correctly across the site
• Protecting our font files from unauthorized access

Blocking these cookies will:

• Prevent you from completing purchases
• Cause fonts to fail to load or display incorrectly
• Break site functionality

Payment Processing Cookies (Stripe)

Stripe cookies are loaded when you proceed to checkout. These are necessary for secure payment processing and fraud prevention. Without these cookies, you will not be able to complete purchases.

Analytics Cookies (Google Analytics)

You can control analytics cookies through:

• Our cookie consent banner (appears on first visit)
• Our cookie settings page
• Your browser settings
• The Google Analytics opt-out browser add-on

Browser Settings

You can control cookies through your browser settings:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Cookies and site data

Note: Blocking essential cookies will prevent you from using our shop and will prevent fonts from displaying properly on our website.

Clearing Cookies

You can clear cookies at any time through your browser settings. Note that this will:

• Empty your shopping cart
• Log you out of any sessions
• Require fonts to be re-loaded on your next visit
• Remove your cookie preferences (you'll see the consent banner again)
• Clear analytics data stored in your browser

Data Protection

We implement appropriate security measures to protect your session data and payment information:

• Session cookies are HttpOnly and Secure (HTTPS-only) to prevent tampering
• Font session identifiers use cryptographically random generation
• Honeypot traps detect and block automated scrapers
• Payment card details are handled entirely by Stripe using industry-standard encryption and are never stored on our servers
• Analytics data is anonymized and cannot be used to identify you personally

Third-Party Services

Stripe

We use Stripe for payment processing. When you make a purchase, Stripe may collect:

• Payment information
• Device and browser information
• IP address
• Transaction details
• Fraud detection data

Stripe processes this data as an independent data controller under its own privacy policy. Review their privacy practices at https://stripe.com/privacy.

Stripe is certified under the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses for GDPR compliance.

Google Analytics

When you consent to analytics cookies, Google Analytics collects:

• Usage statistics and browsing patterns
• Anonymized IP addresses
• Device and browser information
• Pages visited and time spent
• Referral sources

Google processes this data under its own privacy policy at https://policies.google.com/privacy.

Google is certified under the EU-U.S. Data Privacy Framework. We have enabled IP anonymization and disabled data sharing with Google's advertising services.

Data Retention

• Session cookies (wire, fk_sid): Deleted when your browser session ends
• Server-side session data: Automatically cleaned up after session expiration or inactivity
• Stripe session cookies (__stripe_sid, site-auth): Deleted when session ends
• Stripe persistent cookies: Retained for durations specified above
• Google Analytics cookies: Retained for up to 2 years, with data retention in Google Analytics set to 14 months
• Order data: Retained as described in our Privacy Policy
• Payment processing data: Retained according to Stripe's data retention policies and legal requirements

Changes to Your Cookie Preferences

You can change your cookie preferences at any time by:

1. Clicking the cookie preferences link in our website footer
2. Clearing your cookies and revisiting our site to see the consent banner again

Changes to your preferences take effect immediately.

Changes to This Policy

We may update this Cookie Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. The "Last updated" date at the top indicates when changes were last made. We encourage you to review this policy regularly.

notyourtypefoundry
Rotterdam, NL
info@notyourtype.nl
Instagram