Cookies & settings

Manage your choice

Open cookie settings. You can reopen the same controls in every footer. Necessary functions stay available; the optional switches record what you allow. Accept optional switches all three choices on; Reject optional switches them off. No optional services are currently installed, so accepting does not start tracking or approve a future undisclosed service.

Reject optional keeps optional categories off. Save preferences records the available choices. Reset choices & data removes this hostname’s privacy choice and explicitly registered optional remnants. With JavaScript off, interactive controls are unavailable, but optional integrations remain off and this policy stays readable.

Browser storage register

gh-cookie-preferences-v3: first-party local storage for this website’s hostname, lasting up to 180 days. Stores category flags, policy version and save/expiry times, not an email or account ID. Invalid, expired or older-version records cannot enable optional services.

wpEmojiSettingsSupports: WordPress may cache an emoji-support test in session storage for the browser tab/session. Fonts, images and core site scripts are served locally.

wordpress_test_cookie: a session cookie may be set when the WordPress login flow checks cookie support. Authorised sign-in may use wordpress_logged_in_*, wordpress_sec_* and wp-settings-* for authentication and user settings. A sign-in commonly lasts a session or up to two days, or up to 14 days if Remember me is chosen; user-setting cookies may last up to one year. These are not advertising cookies.

WooCommerce cart/session storage: when needed for cart features, woocommerce_items_in_cart and woocommerce_cart_hash are normally session cookies; wp_woocommerce_session_* normally lasts up to two days. Online purchasing is not currently available. A cookie being supported by the software does not mean it is set on every visit.

Cloudflare security: cf_clearance may remember a completed security check; __cf_bm may be used for bot protection for up to 30 minutes, and _cfuvid may distinguish users where rate limiting requires it. Actual use/duration depends on the active protection. See Cloudflare cookie information.

Attribution, analytics and advertising

WooCommerce order attribution and its Sourcebuster tracking scripts are disabled. No optional analytics or marketing providers are enabled.

The optional-data register includes only host-scoped wc_order_attribution_session, session_entry, session_start_time, session_pages, utm, referer and user_agent cookies for cleanup if remnants exist. Accept, reject and reset do not delete login, cart, security or another site’s cookies.

Cookies may be scoped to this hostname or a parent domain. These controls do not remove data belonging to another hostname. Use the originating site or browser settings for that data.

Persistence, withdrawal and limits

A saved choice is specific to this hostname/browser and expires after 180 days. Use Reset choices & data to withdraw the saved choice and return all switches to off. Storage failures are reported and fail closed. No consent information is sent as a customer or subscription record.

Reset only targets the registered optional host data and this website’s choice; it does not erase authentication/security cookies, HttpOnly cookies, browser HTTP cache, accounts, mail or server logs. No optional offline cache is currently registered. Future optional services require their own disclosure and any required new choice before activation.

Who to contact

Yasa Oy / Yasa Ltd, a Finnish company, operates GlossHaus. Business ID 3381986-4; VAT ID FI33819864. Business address: Fredrikinkatu 61, 00100 Helsinki, Finland. Questions: info@glosshaus.co.uk. See Privacy policy for purposes, retention, providers and rights.