Cookie Policy

What cookies and similar technologies are

Cookies are small text files that a website asks your browser to store on your device. They let a site remember information between page loads and between visits. We also use closely related technologies that work the same way in practice:

• Local storage: a browser storage area, similar to a cookie, that keeps data on your device until it is cleared. We use it for your cart and your cookie choice.
• Pixels and tags: small pieces of JavaScript or a tiny image request that report an action, such as viewing a product, back to an advertising partner.
• Server-side events: messages our server sends directly to an advertising partner about an action that happened on our site, such as a completed order.

Throughout this page we use "cookies" as shorthand for all of these technologies.

Categories we use

Strictly necessary (always on)

These are required for the store to work. They do not track you across other websites and are not used for advertising. You cannot turn them off through our banner, because the site cannot function without them.

• Cart contents - stored in your browser's local storage under the key nnc_cart_v1. This keeps the items, sizes, and quantities you added so your cart survives a page refresh. It stays on your device and is not sent to an advertising partner.
• Your cookie choice - stored in local storage under the key nnc_consent_v1. This records whether you accepted or declined non-essential cookies so we do not ask again on every page. Without it we could not honor your decision.
• Stripe checkout session - when you go to checkout, Stripe sets cookies it needs to process the payment securely and to prevent fraud. Payments are handled by Stripe; we never store full card numbers.

Advertising and analytics (consent required)

These help us understand which products and pages people respond to, and let us measure and target the advertising that brings visitors to this store.

• Meta Pixel - a browser-side tag from Meta Platforms that records events such as page views, product views, add-to-cart, and purchases, and associates them with your Meta account where one exists. The pixel script is not loaded into the page at all unless you accept.
• Meta Conversions API - the server-side counterpart to the pixel. When an order is paid, our server can report that purchase directly to Meta so a completed order is measured even if the browser tag was blocked. Browser and server events for the same order share an event ID so Meta can deduplicate them and does not count the order twice.

Non-essential cookies are off by default

We do not load any advertising or analytics cookie before you accept them in our cookie banner. Until you make a choice, our code treats consent as denied: the Meta Pixel script is never added to the page, so no advertising request is made and no advertising cookie is set. If you decline, the same holds - declining is not a soft preference that we override later. Only an explicit acceptance turns these on.

Global Privacy Control

Global Privacy Control (GPC) is a signal your browser or a browser extension can send on your behalf that says you do not want your personal information sold or shared, or used for targeted advertising. We honor the GPC signal as a valid opt-out.

• In the browser: when we detect GPC, advertising consent is forced to denied, the Meta Pixel is never loaded, and we do not show you the cookie banner at all, because your browser has already answered it. GPC takes priority - it wins even over a previously stored acceptance.
• On server-side forwarding: for visitors who have opted out, our Conversions API events carry Meta's Limited Data Use (LDU) flags. LDU instructs Meta to restrict how it processes that data in line with US state privacy laws, rather than using it freely for targeted advertising.

How to change your choice

• In the banner: if you have not chosen yet, select Decline to keep non-essential cookies off, or Accept to allow them.
• To change a choice you already made: clear this site's cookies and site data in your browser. That removes the stored nnc_consent_v1 value, and the banner will appear again on your next visit so you can choose differently. Note that this also clears nnc_cart_v1, so your cart will be empty.
• To opt out permanently: turn on Global Privacy Control in a browser or extension that supports it. We will treat that as an opt-out on every visit, with no action needed from you.

Controlling cookies in your browser

Every major browser lets you view, block, and delete cookies and site data, usually under Settings in a Privacy, Security, or Site Settings section. You can block third-party cookies, clear data for a single site, or set the browser to clear everything when you close it. Blocking strictly necessary cookies and local storage for this site will break the cart and checkout. Your browser's help pages have the exact steps for your version.

Third parties

• Meta Platforms (Facebook and Instagram) - advertising and measurement, through the Meta Pixel and the Conversions API described above.
• Stripe - payment processing and fraud prevention during checkout.

Each of these companies is an independent business that handles data under its own privacy policy and cookie practices, which we do not control. Review their policies directly for details on what they collect and the choices they offer.

Related policies

This page covers cookies specifically. For the full picture of what personal information we collect, how we use it, who we share it with, and how long we keep it, see our Privacy Policy. To exercise your rights - including opting out of the sale or sharing of personal information and of targeted advertising, or requesting access, correction, or deletion - see Your Privacy Choices.

Questions

For any privacy or cookie question, email [email protected] and we will respond as required by applicable law.

Changes

If we add or remove a cookie technology, we will update this page and revise the "Last updated" date above.