What we set, why, and how to opt out. Analytics cookies load only after you have given consent.
Cookies are small text files that a website stores on your device when you visit. They allow the site to remember information about your visit, such as your login session or the contents of your cart.
We use cookies for three purposes: to make the site work (strictly necessary), to understand how people use it (analytics) and, only if you allow it, to measure our adverts (marketing). Our support chat is first-party and writes only the strictly necessary cookie that lets you see the tickets you filed.
The table below lists every cookie category we use. Strictly necessary cookies are always active. All other categories load only after you have given consent via our cookie banner.
| Category | Cookies | Purpose | Retention | Third party |
|---|---|---|---|---|
| Strictly necessary | norma-session, cart, csrf-token, ai-design | Authentication session management, persisting your cart between page visits, cross-site request forgery protection, and a random browser id that keeps the AI Design limit of 5 goes in 5 days fair for guests. These cookies are required for the site to function and cannot be switched off. | Session (expire when you close your browser) or up to 12 months for cart persistence and the AI Design browser id. | No |
| Analytics | ph_* (PostHog) | Aggregated, privacy-aware pageview and conversion measurement. We use PostHog (EU infrastructure) to understand how visitors use the site so we can improve it. No individual profiles are built without your consent. | 13 months from the date of last activity. | PostHog (EU) |
| Analytics | _clck, _clsk, CLID, ANONCHK, MUID, SM, MR (Microsoft Clarity) | Heatmaps and session recordings that show us where visitors click, scroll and get stuck, so we can improve the site. Clarity loads, through Google Tag Manager, only after you allow Analytics, and it is told that advertising storage is denied. Text you type into form fields is masked, as are customer email addresses, phone numbers and postal addresses shown on the page. | _clck 1 year, _clsk 1 day, CLID 1 year, ANONCHK 10 minutes, MUID 13 months, SM the length of your session, MR 7 days. As Microsoft documents. | Microsoft Corporation |
| Marketing | _fbp, _fbc (Meta); _gcl_au, _gcl_aw, IDE (Google Ads) | Measuring which of our adverts on Facebook, Instagram and Google lead to visits and orders, so we spend on the ones that work. Set only after you allow Marketing in the cookie banner. Google tags run in Consent Mode: until you allow it, they store nothing on your device. | Up to 90 days (Meta) and up to 13 months (Google Ads). | Meta Platforms Ireland; Google Ireland |
You can update your cookie preferences at any time using the cookie preferences link in the site footer. We honour the Global Privacy Control (GPC) signal: if your browser sends a GPC header, we treat it as a withdrawal of consent for analytics and support cookies.
You can also manage or delete cookies through your browser settings. Instructions vary by browser:
Blocking strictly necessary cookies will prevent the site from working correctly, including login and cart functionality.
For more detail on how our analytics and advertising providers handle cookie data, see their own policies:
We will update this policy if we add or remove cookies, or if a third-party provider changes how their cookies work. We will re-prompt for consent if any new non-essential cookies are introduced: when marketing cookies were added, every visitor was asked again. This policy was last reviewed on 9 October 2026.
For broader privacy information, including how we handle personal data, see our Privacy policy.
