Cookie notice

01In one paragraph

A handful of entries keep the shop working: the order you just placed, the market you picked, and the answer you gave this notice. Nothing is set for statistics. The Google Ads tag measures what our adverts sell from the first page, without cookies, whatever you answer on the card that appears on your first visit; Google's advertising cookies and remarketing come only after your yes. Your answer is remembered for 12 months and then asked again, and "Cookie settings" at the foot of every page brings the card back sooner if you want to change it.

02Cookies, and the things that are not quite cookies

A cookie is a small text file a site saves on your phone, tablet or computer and reads back on the next page. Browsers also offer local storage, which holds a value on the device without sending it along with every request. This shop uses more of the second than the first, and the notice covers both; where an entry is local storage rather than a cookie, it says so.

The four groups below are the standard ones. Only the first is set without asking you, together with the measurement of our adverts described in the fourth.

031 · Strictly necessary — always on

Without these the shop cannot do what you asked it to do, so consent does not come into it. All of them are read only by this site.

• cookie_consent — local storage. Holds your answer to this notice and the day you gave it, so the card is not thrown at you on every page. Lifetime: 12 months, after which it expires and the card returns.
• tlb_lead_… — local storage, on the product pages with an order form. Carries the name, phone number and address you have just sent from the form to the thank-you page, so that page can show you the number the confirmation call will come to. Lifetime: until you order the same product again or clear site data.
• tlb_lead_lock_… — local storage. Holds the last seven digits of the phone number and the times the form was sent with it, so the same number cannot place a second order for the same product within 24 hours. Lifetime: until site data is cleared; sends older than 24 hours are ignored.
• tlb_sent_any — local storage, value 1. Written on the thank-you page to mark that an order has already gone from this browser, which is how we keep a double-tap from becoming two parcels. Lifetime: until site data is cleared.
• The form security token — not stored at all. It is fetched when the order or contact form opens, kept in the page's memory for 15 minutes and lost when you close the tab. It proves the form was submitted from our own pages and blocks forged ones.
• The order check — not stored at all. When you start filling in an order form, the page makes one call to a fraud-prevention service that works for us and keeps the answer in the page's memory until the order is sent; no cookie is sent or written for it. What goes with the order is listed in the privacy notice.

042 · Preferences

One entry, and it is written only when you choose something:

• lang — a first-party cookie, set the moment you pick a market or a language from the switch in the header. It carries a two-letter code and nothing else, so the next page opens in the same language. Lifetime: 12 months.

Delete it and the site falls back to English. Nothing else changes.

053 · Statistics

Nothing is set for statistics. This shop runs no analytics product — no Google Analytics, no heatmaps, no session recording, no A/B testing tool. Page views are counted only in the hosting platform's own server-side figures, which are totals and carry no cookie.

064 · Advertising and measurement

From the first page the Google Ads tag below runs in the restricted state described further down: without cookies, it tells Google that a page was seen and, after an order, that the order was placed and what it was worth, so that we can measure what our adverts sell — whatever you choose. Accept, and Google adds its advertising cookies: the visit is tied more precisely to the advert that brought it, and Google can show our products again to someone who has been here. Choose "No measurement" and Google's advertising cookies are not written; the cookieless measurement of sales stays, and the shop behaves in exactly the same way.

This site uses no Meta (Facebook, Instagram) pixel.

One local entry belongs to this group as well: tlb_conv_…, written after an order has been reported once — with or without your agreement, like the measurement itself — so a refresh of the thank-you page cannot report it twice. It holds the value 1 and nothing about you.

The advertising accounts these tags report to are in the name of WHATECH MOBILE CO., LIMITED, which pays for them and answers for them.

07Before you answer: Google Consent Mode v2

The Google tag is capable of running in a restricted state, and on this site that restricted state is the default. Google Consent Mode v2 is configured with ad_storage, ad_user_data, ad_personalization and analytics_storage all set to denied before you have answered.

In practice, until you accept: no Google cookie is written, no advertising identifier is set or passed on, and what leaves the page are cookieless pings — that a page was seen and, on the thank-you page, the conversion with the order value and its reference — not who you are.

Accept advertising cookies and a consent update is sent, the restrictions lift, and the tag works in the ordinary way. Answer "No measurement" and it stays restricted for the whole visit. Either way the cookieless pings, the conversion included, are sent: that is how we measure what our adverts sell.

08Changing your mind

Cookie settings, in the foot of every page, reopens the card wherever you are. Answer again and the new answer replaces the old one from that moment on.

Your answer lives in local storage under cookie_consent, as all if you accepted everything or necessary if you kept only the essentials, with the date you chose. After 12 months it expires by itself and the card comes back, so consent is never assumed to last for ever.

You can also just delete the entry, or clear the site data for this website in your browser. Withdrawing consent stops Google's advertising cookies from then on — the cookieless measurement of sales described above goes on; it cannot reach back and undo what was collected while consent was given.

09Controls that are not ours

Your browser can block or clear cookies whatever this site says:

• Chrome: Settings > Privacy and security > Third-party cookies
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Settings > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Manage and delete cookies

Blocking the strictly necessary entries will break things: the order form will not submit and the thank-you page will have nothing to show.

To deal with the platforms directly rather than with us, there are Google's ad settings (adssettings.google.com).

10Further reading

What happens to the data behind these tags, who receives it and how long it is held is in the privacy notice. Anything about your data goes to privacy@thalastbay.com; anything about an order to info@thalastbay.com.