Cookie Statement

1. What we set

Only strictly necessary cookies, on the pages where you buy:

• Session cookie
  Keeps your checkout together between the form and the payment. Expires when you close your browser.
• CSRF token
  Proves that the form you submit is the form we served, which is what stops a third-party site from submitting on your behalf. Same lifetime.

Both are set by us, on our own domain, and are read by nobody else.

2. What we do not set

• No analytics of any kind, self-hosted or otherwise
• No advertising or remarketing cookies
• No social media pixels or embedded players
• No external fonts, scripts or stylesheets — everything is served from our own domain
• No A/B testing, session recording or heatmaps

The self-check on our public pages runs entirely in your browser. Your answers are neither stored nor transmitted, and closing the page ends them.

3. Why there is no banner

Consent is required for cookies that are not strictly necessary. Ours are strictly necessary — the checkout cannot function without them — so the law does not require consent, and a banner asking for it would be theatre. We would rather explain the position on a page like this than interrupt you with a dialogue that has only one sensible answer.

If we ever add a cookie that does require consent, a banner appears and this page changes first.

4. Controlling cookies yourself

Every browser lets you block or delete cookies. Blocking ours will prevent the checkout from completing, because the payment form will no longer be able to verify itself. Reading the site is unaffected.

5. More

What we do with personal data more generally is in our Privacy Statement. Questions go to relay@borderstride.com.