Cookie policy
Which trackers are placed on your device, what for, for how long, and how to refuse them.
1. In short
These sites set no advertising cookies and no social network cookies. There are only two categories: strictly necessary cookies, which cannot be refused because the site does not work without them, and self-hosted analytics without cookies, which only starts if you accept it.
2. What a cookie is
A cookie is a small file placed by a site in your browser and read back on later visits. The same legal
framework applies to equivalent techniques — localStorage, pixels, browser fingerprinting: what
matters is the access to information stored on your device, not the name of the technique.
We use neither tracking pixels nor fingerprinting.
3. What is stored
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
cc_cookie | CookieConsent (banner, self-hosted) | Remember your choice and the policy version you accepted | 6 months | Strictly necessary |
umami.disabledbrowser local storage |
Consent banner | Remember your refusal of analytics and switch it off immediately | Until you agree again | Strictly necessary |
woocommerce_*, wp_woocommerce_session_*shop sites only | WooCommerce | Shopping basket and checkout session | Session to 48 h | Strictly necessary |
No third-party cookies. Everything above is set from our own domains and stays on our own servers. No external content (embedded video, map, remote font) is loaded on these pages.
4. Why some cookies cannot be refused
Article 5(3) of the ePrivacy Directive, transposed in Belgium as Article 129 of the Act of 13 June 2005 on electronic communications, requires your prior consent for any access to information stored on your device — unless that access is strictly necessary for the service you asked for.
A shopping basket, an open session, or the memory of your refusal fall under that exemption: without them the service cannot be provided. Analytics does not, which is why it only starts after you agree.
5. What our analytics does — and does not do
It runs on Umami, installed on a server we rent from OVH in France. Concretely:
- no cookie is set, and no identifier follows you from one day to the next: a visit is only recognised within the same day;
- your IP address is never stored: it is used, for the duration of the request, to derive country, region and city;
- visit data is purged after 180 days;
- your browser's Do Not Track signal is honoured, even if you had previously accepted;
- no data leaves our infrastructure: there is no export, no ad network, no "partner".
6. Changing or withdrawing your choice
Three equivalent ways:
- the consent banner, which can be reopened from the "Manage cookies" link in each site's footer;
- the opt-out page in this section;
- your browser settings, which can block or delete cookies. Note: deleting our cookies also erases the memory of your refusal, and the banner will reappear.
Withdrawal is as easy as consent and takes effect immediately: measurement stops within the page itself, without reloading.
7. Questions
gdpr@savethemall.eu. How your data is processed is described in the privacy policy.