
Legal
Cookies
Essential versus optional. Pixels off unless the office switches them on.
Essential
Checkout and cart need a little first-party storage so the bag and the PP- order ID survive a refresh. Operator sign-in cookies exist only for the house office. Those are not advertising.
First-party counts
We record which pages are opened so the office can see what the house is actually read for. Visitor tokens are hashed before they are written. No IP, no time zone. Rows older than 30 days are burned. That log stays here. It is not sold on.
Optional pixels
Advertising and analytics pixels are off unless the office has switched them on. If they are off, they do not fire. If they are on, they are optional marketing tools — not a condition of buying a vial.
Fonts load from Google Fonts so Cinzel and Outfit render. Stripe, when connected, sets its own payment cookies on the checkout. See Privacy for the rest of the stack.