Cookie Policy

Cookies and similar technologies

Cookies are small files stored by your browser. Fairyloop also uses session storage and, when you choose Analytics, a third-party analytics script and network requests. The inventory below reflects technologies found in the current application configuration.

Necessary cookies

These technologies support the shop, sign-in, basket, security, language preference and safe handling of checkout or refund requests. They remain active and do not depend on optional analytics consent.

• Name / key: NEXT_LOCALE

  Provider

  Fairyloop

  Purpose

  Remembers the selected language when resolving an unprefixed route.

  Category

  Necessary cookies

  Storage type

  HTTP cookie

  Duration / expiry

  1 year

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop_cookie_consent

  Provider

  Fairyloop

  Purpose

  Stores the current version of your analytics choice so the prompt does not reappear on every visit.

  Category

  Necessary cookies

  Storage type

  HTTP cookie

  Duration / expiry

  180 days

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop_auth

  Provider

  Fairyloop

  Purpose

  Maintains the authenticated customer session.

  Category

  Necessary cookies

  Storage type

  HTTP cookie

  Duration / expiry

  30 days (session TTL)

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop_guest_cart

  Provider

  Fairyloop

  Purpose

  Maintains the guest basket session before sign-in or checkout.

  Category

  Necessary cookies

  Storage type

  HTTP cookie

  Duration / expiry

  30 days (session TTL)

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop_csrf

  Provider

  Fairyloop

  Purpose

  Pairs with a request header to protect same-origin changes.

  Category

  Necessary cookies

  Storage type

  HTTP cookie

  Duration / expiry

  1 hour

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop-checkout-intent

  Provider

  Fairyloop

  Purpose

  Keeps the checkout idempotency key for safe payment retries.

  Category

  Necessary cookies

  Storage type

  Session Storage

  Duration / expiry

  Browser session; no explicit TTL

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop-checkout-return

  Provider

  Fairyloop

  Purpose

  Matches the payment return to the checkout attempt that started it.

  Category

  Necessary cookies

  Storage type

  Session Storage

  Duration / expiry

  Browser session; no explicit TTL

  Provider type

  First party

  Consent

  No optional consent required

• Name / key: fairyloop-refund:<order-id>

  Provider

  Fairyloop

  Purpose

  Reuses the same idempotency key when an admin safely retries an unchanged refund request. The browser stores only an opaque idempotency key and a payload fingerprint.

  Category

  Necessary cookies

  Storage type

  Session Storage

  Duration / expiry

  Browser session; no explicit TTL

  Provider type

  First party

  Consent

  No optional consent required

Analytics purposes

Analytics is optional and starts only after you enable it. Umami Cloud receives manually sent page views containing a normalized route and website identifier. Fairyloop may also send minimized Web Vitals and error events to its own endpoint when the deployment setting is enabled.

• Name / key: Umami page-view tracker

  Provider

  Umami Cloud

  Purpose

  Loads the Umami Cloud analytics script and sends manually controlled page views.

  Category

  Analytics purposes

  Storage type

  Third-party script and network requests

  Duration / expiry

  No persistent browser storage; script runtime may remain until page unload. Provider data retention: TBD — owner verification required.

  Provider type

  Third party

  Consent

  Only after Analytics is enabled

• Name / key: POST /api/telemetry

  Provider

  Fairyloop

  Purpose

  Sends minimized Web Vitals and error events when analytics consent and the deployment flag are both enabled.

  Category

  Analytics purposes

  Storage type

  Same-origin analytics request; no browser storage

  Duration / expiry

  No browser storage. Server log retention: TBD — owner verification required.

  Provider type

  First party

  Consent

  Only after Analytics is enabled

Other browser storage

No application localStorage, IndexedDB or Cache Storage keys were found in the audit.

Fairyloop does not currently use advertising pixels, profiling or marketing tracking. There is no Marketing category in Cookie settings.

Change your choices

You can change or withdraw Analytics at any time. Open Cookie settings in the footer or use the button below. Turning Analytics off prevents future tracker initialization and requests; it cannot remove information already received by a provider.