Legal
Every cookie and piece of browser storage codila.com uses, what each one is for and how long it lasts, and how to change your choice.
Last updated
A cookie is a small file a website asks your browser to keep. A site can also keep information in your browser’s local storage, which stays until it is cleared, and session storage, which is cleared when you close the tab. This policy covers all three, and uses the same three categories as our cookie banner.
We set them ourselves. The only other company that sets cookies on codila.com is Stripe, whose payment form sets its own cookies on the checkout page to help prevent fraud; they are described in Stripe’s cookie policy.
If you are in the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, a banner asks for your choice on your first visit. Visitors elsewhere are not shown it. Your browser keeps your choice in a cookie, which expires after 12 months, and in local storage, which has no expiry; the banner reads either, so it does not ask you again until you clear this site’s data in your browser. Strictly necessary storage is always on, and we set no marketing cookies whatever you choose.
Our analytics runs, and sets the analytics storage listed below, only if you allow it: by choosing “Accept All”, or by switching on Analytics under “Manage” and saving your preferences. If you choose “Necessary Only”, switch analytics off or have not chosen yet, it does not run, and it removes any analytics storage it set before. Visitors who are not shown the banner have no choice to make, so it does not run for them. If your browser sends a Do Not Track signal, it does not run, whatever you chose.
These make the site work: signing in, your bag and wishlist, checkout, the assistant and remembering your cookie choice. They are always on.
__Host-authjs.csrf-token
Protects the sign-in and sign-out forms against forged requests. Set on every page.
__Secure-authjs.callback-url
Remembers which page to return you to after you sign in. Set on every page.
__Secure-authjs.session-token
Keeps you signed in.
__Secure-authjs.pkce.code_verifier
Secures the round trip to Google when you sign in with Google.
__Host-codila.google-link
Remembers which account to link while you connect your Google account.
__Host-codila.google-confirm-intent
Remembers which account is confirming with Google before setting a password.
__Host-codila.google-confirmation
Records that you confirmed with Google, so that you can set a password in the next few minutes.
codila_cookie_consent_v1
Records your cookie choice, so that we do not ask on every page. The same choice is written to a cookie and to local storage, and the banner reads either.
assistant_session_id
Keeps your conversation with the assistant together when you are not signed in.
assistant_anonymous_id
Set when the assistant replies through its backup connection, which it uses when its usual one is unavailable. It holds a keyed hash of your IP address, not the address itself: the identifier we use to limit how much the assistant can be used from one connection.
codila_chat_session_id
Lets your conversation with the assistant continue from page to page.
cart-storage
Your shopping bag.
wishlist-storage
Your wishlist.
codila-checkout-data
The details you entered at checkout, so that you do not lose them if you leave the page.
lead_session_id
Groups the details you type into the checkout or newsletter form into one record on our servers, as described in the privacy policy.
admin_sidebar_state
Remembers that a member of staff collapsed or reopened the menu in the staff administration area. Only staff are given it, and only when they toggle the menu themselves.
These are set only when our analytics runs, as described under Your choice. They feed our own analytics; no analytics company receives the data. What it records is set out in the privacy policy.
codila_vid
A random identifier for your browser, so that repeat visits can be counted.
codila_sid
Groups the pages you view into one visit.
codila_sid_time
When you were last active, so that a visit ends after 30 minutes without activity.
We do not set any marketing cookies, and we use no advertising or social-media tracking. The marketing switch in the banner is there so that we ask you first if we ever do.
You can also delete cookies and site data in your browser’s settings. If you delete the strictly necessary ones you will be signed out, and your bag and wishlist on that device will be emptied.
Write to [email protected]. How we handle personal data more generally is in our privacy policy.
Legal documents