We follow the ePrivacy Directive (cookie law) and GDPR. Cookies that are strictly necessary to operate the site (login, cart, checkout) do not require consent. Everything else — analytics, ads — only runs after you click “Accept all” in our banner.
Strictly necessary
- sb-access-token / sb-refresh-token (Supabase) — keep you signed in. Session lifetime.
- modestly.cookie-consent (localStorage) — remembers your choice on this banner. 12 months.
- __stripe_* (Stripe) — fraud prevention during checkout. Set during the embedded payment step of checkout, which runs directly on modestly.eu (Stripe never opens a separate hosted page — your card details are collected in place and sent straight to Stripe).
Functional (only after “Accept all”)
- Vercel Analytics — anonymised page views, no cross-site tracking. 14 months.
- Sentry — error session identifiers. Up to 30 days.
How to change your choice
Clear your site data in your browser settings to be shown the banner again. We will also add an account-level toggle: Account > Data & privacy.
More information
See our Privacy Policy for the legal bases and full processor list.