This page explains the cookies and similar technologies used on hpb.la: what they do, who sets them and how long they last. You can change your choice at any time using the cookie icon at the bottom left of every page once you’ve made a choice, or the Cookie Settings link at the bottom of every page.
Essential cookies (always on)
These are needed for the shop, your account, payments and your cookie choice to work.
| Cookie | Provider | Purpose | Lasts |
|---|---|---|---|
| wp_woocommerce_session_…, woocommerce_items_in_cart, woocommerce_cart_hash | WooCommerce (this site) | Your cart and checkout | Up to 48 hours / until you close the browser |
| wordpress_logged_in_…, wordpress_sec_… | WordPress (this site) | Keep you signed in to your account, subscriptions and memberships | Until you close the browser, or 14 days with “Remember me” |
| _savt (on squareup.com), __cf_bm (on pci-connect.squareup.com) | Square | Payment fraud prevention at checkout | Up to 400 days / 30 minutes |
| NID (on google.com) | Google, for the Google Pay button (through Square) | Set by Google when the Google Pay button loads at checkout; Google uses it to remember preferences and for security | Up to 6 months |
| moove_gdpr_popup, wp_consent_… | GDPR Cookie Compliance, WP Consent API (this site) | Remember your cookie choice | 90 days |
| Security cookies, only when needed | Cloudflare | Security checks that protect the site and checkout from bots | 30 minutes to a few hours |
Instagram feed – The Instagram feed on our homepage is provided by Elfsight. Elfsight’s servers set two short-lived technical cookies on their own domain: _cfuvid (until you close the browser) and elfsight_viewed_recently (a few seconds).
Analytics cookies (only if you allow them)
| Cookie | Provider | Purpose | Lasts |
|---|---|---|---|
| _ga, _ga_SMDWP47LBL | Google Analytics | Count visits and understand how the site is used | Up to 2 years |
Marketing cookies (only if you allow them)
| Cookie | Provider | Purpose | Lasts |
|---|---|---|---|
| sbjs_current, sbjs_first, sbjs_session, sbjs_udata and related | WooCommerce order attribution (this site) | Record which website, search, ad or email brought you, and attach it to your order | Your visit (ends after 30 minutes of inactivity) |
| _gcl_au | Google Ads (on this site) | Connect your visit and purchases to the Google ad you clicked, so we can measure our ads | 90 days |
| IDE, test_cookie (on doubleclick.net) | Google Ads | Measure our ads and show our ads to people who have visited our site | Up to 400 days / 15 minutes |
Services that run without cookies
These receive basic technical information when a page loads (the page address, the referring page, your browser type and your IP address), whatever you choose in the cookie banner:
- Google Analytics and Google Ads (cookieless mode): until you allow analytics or marketing, Google receives page views and shop events (such as products viewed) without any cookie or lasting identifier, and uses them for aggregated reporting and modelling.
- Independent Analytics: our own visitor statistics, stored on our server. It records pages viewed and the referring website or campaign, without cookies.
- Cloudflare: security, performance and anonymous page-speed statistics.
- Square and Google Pay: their payment scripts load on product, cart and checkout pages. The security cookies they set are listed under Essential cookies above.
- Google Fonts, and the Elfsight Instagram feed (its cookies are listed above).
- Our newsletter sign-up form sends the email address you enter to Mailchimp, which runs our newsletter. It sets no cookies on this site.
Changing your mind
Click the cookie icon at the bottom left of any page, or “Cookie Settings” at the bottom of the page, to open your cookie settings. If you withdraw consent, we delete the analytics and marketing cookies this site set, and the page reloads with them switched off. Cookies set by other companies on their own domains (such as doubleclick.net) can be deleted in your browser settings.
Questions
Email us at [email protected]. For how we handle personal information, see our privacy policy.