Cookie Policy

Last updated 2 July 2026

1. What cookies are

Cookies are small text files a website stores on your device. Some are essential for the site to work; others are optional and require your consent. This policy explains which cookies we use and why. It should be read together with our Privacy Policy.

2. Essential cookies

These are strictly necessary for the store to function and do not require consent.

• mosticare_session, a first-party, encrypted, HTTP-only session cookie (set with iron-session) that keeps you signed in to your account and preserves your basket and checkout state. It does not track you across other sites and expires after 30 days, or sooner when you sign out.

3. Consent cookies

We use a consent banner to record your cookie preferences and to keep non-essential cookies switched off until you agree to them. Your choice is stored in a small first-party cookie so we do not have to ask you on every visit. You can change or withdraw your consent at any time through the cookie settings on this page.

4. Analytics

We use privacy-respecting, first-party analytics to understand how the store is used in aggregate, for example which pages are popular, so we can improve it. These analytics are configured not to build advertising profiles or share data with ad networks. Where analytics rely on non-essential cookies, they load only after you consent.

5. Advertising cookies (only with your consent)

If, and only if, you consent to the advertisement category in our cookie banner, we use the Meta Pixel to measure whether our advertising on Meta platforms (Facebook, Instagram) actually works. With that consent, Meta may set the first-party cookies _fbp and _fbc, which help attribute a purchase or enquiry to an ad. By default these are off: without your consent the Pixel does not load, no advertising cookie is set, and no request is made to Meta from your browser.

For reliable measurement we also send conversion events (for example a completed order) from our server to Meta. Without your advertising consent, those server events carry no identifiers: no cookies, no IP address, no email. With your consent, they may include your IP address and a hashed (unreadable) form of your email so Meta can de-duplicate events. We never sell your data. Meta processes this data under its own privacy policy.

6. Managing cookies

You can review or change your choices at any time: open cookie settings. You can also delete or block cookies in your browser settings. Blocking the essential session cookie may stop parts of the store, such as signing in or checking out, from working.

7. Changes to this policy

We may update this policy as the cookies we use change. The current version is always available on this page. Questions? Email contact@mosticare.org.