Cookie policy
Which trackers are placed on your device, what for, for how long, and how to refuse them.
1. In short
These sites set no advertising cookies and no social network cookies. There are only two categories: strictly necessary cookies, which cannot be refused because the site does not work without them, and a self-hosted analytics cookie, which is only set if you accept it.
2. What a cookie is
A cookie is a small file placed by a site in your browser and read back on later visits. The same legal
framework applies to equivalent techniques — localStorage, pixels, browser fingerprinting: what
matters is the access to information stored on your device, not the name of the technique.
We use neither tracking pixels nor fingerprinting.
3. What is stored
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
cc_cookie | CookieConsent (banner, self-hosted) | Remember your choice and the policy version you accepted | 6 months | Strictly necessary |
mtm_consent / mtm_consent_removed | Matomo (self-hosted) | Reflect your acceptance or refusal of analytics | Until withdrawn | Strictly necessary |
_pk_id.* | Matomo (self-hosted) | Pseudonymous visitor identifier, so one visit is not counted twice | 13 months | Analytics — consent required |
_pk_ses.* | Matomo (self-hosted) | Mark the visit currently in progress | 30 minutes | Analytics — consent required |
woocommerce_*, wp_woocommerce_session_*shop sites only | WooCommerce | Shopping basket and checkout session | Session to 48 h | Strictly necessary |
No third-party cookies. Everything above is set from our own domains and stays on our own servers. No external content (embedded video, map, remote font) is loaded on these pages.
4. Why some cookies cannot be refused
Article 5(3) of the ePrivacy Directive, transposed in Belgium as Article 129 of the Act of 13 June 2005 on electronic communications, requires your prior consent for any access to information stored on your device — unless that access is strictly necessary for the service you asked for.
A shopping basket, an open session, or the memory of your refusal fall under that exemption: without them the service cannot be provided. Analytics does not, which is why it only starts after you agree.
5. What our analytics does — and does not do
It runs on Matomo installed on our own servers. Concretely:
- your IP address is anonymised (last two octets masked) before anything is stored;
- raw logs are purged after 180 days;
- your browser's Do Not Track signal is honoured, even if you had previously accepted;
- no data leaves our infrastructure: there is no export, no ad network, no "partner".
6. Changing or withdrawing your choice
Three equivalent ways:
- the consent banner, which can be reopened from the "Cookie preferences" button shown on the site's pages;
- the opt-out page in this section;
- your browser settings, which can block or delete cookies. Note: deleting our cookies also erases the memory of your refusal, and the banner will reappear.
Withdrawal is as easy as consent and takes effect immediately: the analytics cookies are deleted.
7. Questions
gdpr@savethemall.eu. How your data is processed is described in the privacy policy.