Cookie policy

This Cookie Policy explains how Eclataur LLC (doing business as ÉCLATAUR) uses cookies and similar technologies when you visit eclataur.com. It should be read together with our Privacy Policy.

Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, to work more efficiently, and to report information back to site owners. Cookies set by the site you are visiting are called first-party cookies. Cookies set by anyone else are called third-party cookies, and they are what enable embedded third-party features such as analytics, advertising, and payment processing.

This storefront sets no cookies of its own. It is built as static pages, so there is no server session to keep. There is no advertising pixel and no social media pixel anywhere on this site.

The one exception is analytics, and it asks first. We use Google Analytics 4 to see which pages are read and how the shop is used: which fragrances are viewed, added to the cart, and bought. It loads only after you choose Accept on the consent bar at the bottom of your first visit; its cookies (the _ga family) exist only from that moment. Choose Decline and nothing loads, no analytics cookie is ever set, and the site works identically. Your choice is remembered on this device either way, so you are asked once.

One measurement runs without asking, because it has nothing to ask about. Cloudflare Web Analytics tells us how quickly pages load for real visitors: how long the main image took to appear, whether the page jumped while loading, how fast it answered a tap. It sets no cookie, stores nothing on your device, and identifies no one; it sees a page's address and its timings, and that is all. It is how we know whether a change made the site faster or slower for you rather than for us.

A few things do need to be remembered between pages, and all use your browser's local storage rather than cookies. Local storage stays on your device and is not transmitted automatically with your requests, which is the main way it differs from a cookie:

• Your cart is stored as a single reference that points at the cart held on our commerce server. It holds no payment information and no personal details. Without it, your cart would empty every time you moved between pages.
• Your sign-in, if you create an account, is stored as an access token so that you stay signed in. Signing out removes it.
• Your analytics choice, whichever way you decided, so the consent bar asks once rather than on every visit. Clearing it simply means being asked again.
• Your wishlist and recently viewed fragrances, so both survive between visits without needing an account. They hold product references only, nothing about you.
• A review draft, while you are writing one, so a closed tab does not cost you the text. It is removed the moment the review is submitted.
• How you arrived: the page your visit began on, the name of the site that linked you here if one did (for example instagram.com, never the full address), and, if you came through a link in one of our letters, the name of that letter. It holds those three things and the date, for 30 days, so we can tell which pages and which letters are worth anyone's time. It names a page and a site, not you, it is never read by a third party, and it is kept as it was on your first visit rather than being overwritten by every later one.
• A collaborator reference, if you arrived through a link one of our collaborators shared. It holds only their code and the date, for 30 days, so that an order you place credits the person who sent you. It identifies them, not you, and no third party ever reads it.

Two further entries use session storage, which your browser empties by itself when the tab closes: the order confirmation handed from an express wallet payment to the confirmation page, and a marker that stops an already-counted purchase being counted twice in analytics. Neither leaves your device.

The cart reference is removed when your cart is completed, the sign-in when you sign out, the review draft when the review is submitted, and the collaborator reference expires by itself. You can clear any of them at any time through your browser's site data settings; clearing them signs you out, empties your cart, and forgets your wishlist, and nothing else on the site stops working.

• Stripe, our payment processor, sets cookies during payment. These process your transaction and detect fraud, and they are strictly necessary: card payments cannot be taken without them. Stripe acts as its own data controller here, under its own policies.
• PayPal, our other payment processor, sets cookies when you choose to pay with PayPal. Like Stripe's, these exist to process the transaction and prevent fraud, and PayPal acts as its own data controller under its own policies.
• Google, our analytics provider, sets the _ga cookie family, and only after you accept on the consent bar. These measure page visits and shopping activity, such as products viewed, carted, and purchased; Google acts as its own data controller for them, under its own policies.
• Cloudflare, which serves and protects this site, may set a cookie to identify trusted traffic or to mitigate an attack in progress. This is a security function rather than tracking, and it is not used to build a profile of you.

Each of them maintains its own privacy and cookie policies, and we would encourage you to read them for detail on their own handling.

• Browser settings: every major browser lets you block or delete cookies and site data, and warn you before accepting new ones. The controls sit under privacy or site settings.
• Do Not Track: some browsers send a Do Not Track signal. We do not need to act on it, because we do not track you in the first place.

Blocking cookies entirely will prevent checkout from completing, because neither Stripe nor PayPal can process a payment without their own strictly necessary cookies. Browsing and reading the site are unaffected.

• Session cookies are deleted when you close your browser.
• Persistent cookies remain for a set period or until you delete them. The Stripe, PayPal, and Cloudflare cookies above are governed by their own retention periods.
• Local storage has no expiry date. It stays until cleared by us on sign-out or cart completion, or by you through your browser.

We may update this policy to reflect changes in the technologies we use, or for operational, legal, or regulatory reasons. If we ever introduce analytics or advertising technology, this page will say so before it goes live, and the date above will change.