Legal
Cookie policy
Position
This site operates no advertising pixel, no third-party analytics, no social-media embed, no session-recording tool and no cross-site tracker. The content security policy permits no third-party script origin, so a tracker cannot be introduced by a tag manager or by a change to page markup alone.
Non-essential cookies and similar technologies are blocked at the JavaScript level until consent is given. Nothing beyond the strictly necessary category is loaded, executed or contacted before that point. Consent is not inferred from continued browsing, from scrolling, or from closing the notice. At present there is nothing in the non-essential categories to consent to; the categories are listed so that their emptiness is explicit.
Categories
| Category | Default | Purpose | Blocked until consent |
|---|---|---|---|
| Strictly necessary | On, cannot be disabled | The consent record, the age-and-capacity confirmation, signed-in sessions and the supply region shown | No — exempt under Art. 5(3) ePrivacy |
| Functional | Off | None operated | Yes |
| Analytics | Off | One first-party cookie, dohrna_sid, set only if this category is accepted. The site keeps a first-party, server-side record of a few events (an order recorded, a destination refused, a referral link opened) with no script and no third party — see the privacy policy |
Yes |
| Marketing | Off | None operated | Yes |
Strictly necessary cookies
| Name | Purpose | Lifetime |
|---|---|---|
dohrna_consent |
Records the consent decision per category, with a timestamp and policy version | 12 months |
dohrna_capacity |
Records the age-and-capacity confirmation | 12 months |
dohrna_customer |
Maintains a signed-in customer session | Session |
dohrna_affiliate |
Maintains a signed-in affiliate-portal session | Session |
dohrna_session |
Maintains a signed-in operator session on the administration routes | Session |
dohrna_geo |
The country the connection was detected from, so the site can state the supply position for that country | 30 days |
dohrna_region |
The supply region shown — detected from the connection, or chosen with the region control; a choice outranks the detection | 30 days |
dohrna_net |
Whether the connection appeared to be routed through a VPN or proxy, where that check is enabled; the value is ok, vpn or unknown |
30 days |
None of these cookies identifies a person to a third party, and none is read by any party other than this site.
Analytics cookies
Set only where the analytics category has been accepted. Nothing in this section is set otherwise, and the site operates normally without it.
| Name | Purpose | Lifetime |
|---|---|---|
dohrna_sid |
An opaque random identifier, so the site's own event record can tell one visit apart from another. It is not derived from an IP address, a device, an account or an email address, and it is never stored in this form: the event record keeps only a salted, non-reversible hash of it | 90 days |
There is no third-party analytics on this site — no Google, no Meta, no tag manager and no pixel of any kind. The cookie is read by this site alone, cannot be read by any script on the page, and is not sent anywhere else.
Browser storage
Two values are kept in the browser's own storage rather than in cookies, and are never sent to the site except as part of an order the customer places:
| Key | Purpose | Lifetime |
|---|---|---|
dohrna_ref |
A referral code from a link the visitor arrived by, or a code typed at checkout, attached to an order placed while it is held | 60 days |
| Basket | The lines and quantities in the basket, so it survives a page change and a return visit | 30 days from the last change |
How consent is obtained
The first layer of the consent notice presents "Reject all" and "Accept selected" with equal visual weight — the same size, the same contrast and the same position. Neither is emphasised over the other, and the reject control is not hidden behind a second screen.
Category toggles default to off. Consent is granular: a category may be accepted without accepting any other.
Withdrawing or changing consent
A Cookie settings link appears in the footer of every page and is available at all times. Changing a category to off stops the associated scripts from loading on the next page load and clears the cookies in that category.
Re-consent
A consent decision is retained for twelve months. After that period the notice is presented again.
Record of consent
Each decision is logged with a timestamp, the categories accepted, and the version identifier of this policy. Consent records are retained for twelve months and are described in the privacy policy.
Contact
Enquiries about this policy: dpo@dohrna.com.