Cookie policy
What we set, why, and how to opt out. Analytics and support chat cookies load only after you have given consent.
What are cookies?
Cookies are small text files that a website stores on your device when you visit. They allow the site to remember information about your visit, such as your login session or the contents of your cart.
We use cookies for three purposes: to make the site work (strictly necessary), to understand how people use it (analytics), and to power our live support chat. We do not use cookies for advertising or cross-site tracking.
Our cookies
The table below lists every cookie category we use. Strictly necessary cookies are always active. All other categories load only after you have given consent via our cookie banner.
| Category | Cookies | Purpose | Retention | Third party |
|---|---|---|---|---|
| Strictly necessary | norma-session, cart, csrf-token | Authentication session management, persisting your cart between page visits, and cross-site request forgery protection. These cookies are required for the site to function and cannot be switched off. | Session (expire when you close your browser) or up to 12 months for cart persistence. | No |
| Analytics | ph_* (PostHog) | Aggregated, privacy-aware pageview and conversion measurement. We use PostHog (EU infrastructure) to understand how visitors use the site so we can improve it. No individual profiles are built without your consent. | 13 months from the date of last activity. | PostHog (EU) |
| Support chat | intercom-id-*, intercom-session-* | Intercom Messenger session for live customer support. These cookies allow Intercom to identify your session so our support team can continue a conversation across page loads. | Up to 12 months. | Intercom (USA, SCCs) |
| Marketing | n/a | None at launch. We will update this policy and prompt for fresh consent before setting any marketing cookies. | n/a | n/a |
Managing your preferences
You can update your cookie preferences at any time using the cookie preferences link in the site footer. We honour the Global Privacy Control (GPC) signal: if your browser sends a GPC header, we treat it as a withdrawal of consent for analytics and support cookies.
You can also manage or delete cookies through your browser settings. Instructions vary by browser:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
Blocking strictly necessary cookies will prevent the site from working correctly, including login and cart functionality.
Third-party cookie policies
For more detail on how our analytics and support providers handle cookie data, see their own policies:
- PostHog: posthog.com/privacy
- Intercom: intercom.com/legal/privacy
Changes to this policy
We will update this policy if we add or remove cookies, or if a third-party provider changes how their cookies work. We will re-prompt for consent if any new non-essential cookies are introduced. This policy was last reviewed on 19 May 2026.
For broader privacy information, including how we handle personal data, see our Privacy policy.