1. Introduction
Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, session storage, pixels, and scripts that perform comparable functions. Together we refer to them as “cookies” unless a distinction is required.
This policy should be read together with our Privacy Policy, which explains broader data processing. The controller is Thalfyrothorea, Leidsestraat 74-76, 1017 GM Amsterdam, Netherlands, email notifyuse@thalfyrothorea.world, phone +31 20 422 0210.
2. Legal framework
In the European Union and the Netherlands, storage of information on terminal equipment and access to such information generally requires consent under the ePrivacy Directive as transposed, unless an exemption applies. Strictly necessary cookies that enable a service explicitly requested by the user may fall within exemptions. Analytics and marketing cookies typically require consent. GDPR applies to any subsequent processing of personal data.
3. How consent is collected
We present a cookie banner with options to accept all categories, reject non-essential categories, or open granular settings. Strictly necessary storage remains active because it is required for core operations. Your choices are stored locally in the browser where technically feasible so that the banner does not reappear on every visit unless you clear storage or use another device.
You may change preferences at any time by clearing stored preferences or using browser controls described below. If we add new non-essential technologies, we will update this policy and, where required, refresh consent.
4. Categories of cookies
4.1 Strictly necessary
These technologies enable security features, load balancing, consent storage, cart continuity where a cart exists, and fraud prevention signals. Examples may include session identifiers bound to your visit, CSRF tokens on forms, and preference storage for cookie choices. Legal basis: necessity to perform a service you request and compliance with security obligations. Typical retention: session length or up to twelve months for consent records, subject to rotation.
4.2 Analytics
Analytics helps us understand aggregated traffic patterns, referral sources, device categories, and error rates. Depending on configuration, IP addresses may be truncated or processed to reduce identifiability. Analytics runs only when you enable this category in the settings panel. Legal basis: consent. Typical retention: vendor-specific, often between two and twenty-five months for aggregated identifiers; raw logs may be shorter.
4.3 Marketing
Marketing technologies may measure ad effectiveness, attribute visits to campaigns, and build audience insights when used. These technologies are activated only when you enable this category. Legal basis: consent. Retention varies by partner and campaign; measurement cookies often expire within ninety days to two years unless refreshed.
5. Specific cookies and storage keys
The exact list may evolve with site updates. Current implementations include:
- phytovitalyx_cookie_prefs (local storage): records your cookie category choices; duration persists until you clear site data; strictly necessary for honouring preferences.
- Session cookies (names may vary by deployment): maintain form security and continuity during a browsing session; duration ends when the browser session ends unless otherwise specified.
When third-party tools are connected, their identifiers appear in your browser’s storage inspector. Those partners act as processors or joint controllers depending on the tool; consult their policies for additional detail.
6. Browser controls
You can block or delete cookies using browser settings. Blocking all cookies may impair checkout, sign-in, or consent memory. Use private browsing to limit persistence during a single session. Device-level advertising identifiers on mobile platforms can often be reset in system settings.
7. Do Not Track
There is no uniform legal standard for responding to “Do Not Track” browser signals. We prioritise the explicit choices captured in our cookie interface when in conflict with generic signals.
8. Updates
We may amend this Cookie Policy when we change technologies or legal requirements. The date at the top indicates the latest revision. Continued use after material updates constitutes acknowledgement where permitted; substantive changes to non-essential tracking will be gated by consent where required.
9. Contact
Questions: notifyuse@thalfyrothorea.world