Cookie Policy
Last updated: 30 June 2026
This page explains what cookies and similar tracking technologies we use on pranasalt.com, why we use them, and how you can control them.
1. What is a cookie?
A cookie is a small text file that a website stores on your device (computer, phone, tablet) when you visit. Cookies let the site remember things like your cart contents, your login session, and how you arrived. Similar technologies (local storage, pixels, web beacons) work the same way for the purposes of this policy.
2. Categories of cookies we use
2a. Strictly necessary (always on)
These are required for the site to function. You cannot disable them and we do not ask for consent because the site simply will not work without them. Legal basis: legitimate interest under GDPR Article 6(1)(f) and exempt from consent under ePrivacy Directive 2002/58/EC Article 5(3) second sentence.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| cart, _shopify_y, _shopify_s | Shopping cart, session, checkout | Session to 1 year | Shopify (first-party) |
| secure_customer_sig | Logged-in customer authentication | 20 years | Shopify (first-party) |
| pranasalt:promoStrip:dismissed (sessionStorage) | Remembers that you dismissed a promotional message so it does not reappear during your visit | Session (cleared when you close the tab) | Pranasalt (first-party) |
| ps_market_override | Remembers the market (EU or UK) we auto-detected or you selected with the country picker, so we show the right currency and shipping terms without a geo lookup on every visit | 1 day when auto-detected; 12 months when you choose manually | Pranasalt (first-party) |
| _csrf | Security: cross-site request forgery protection | Session | Shopify (first-party) |
Cookies listed as set by Shopify are set on our checkout domain (pranasalt-eu.myshopify.com) when you open the cart or checkout, not on pranasalt.com itself.
2b. Analytics (cookieless - no consent needed)
On pranasalt.com we measure aggregate, anonymous usage (page views, navigation) with PostHog and Vercel, both run in a cookieless mode that stores nothing on your device. Because no cookie or other storage is read or written, no consent is required under ePrivacy Directive Article 5(3); we rely on our legitimate interest (GDPR Article 6(1)(f)). PostHog is hosted in the EU (Frankfurt); your IP and user-agent are hashed and stripped server-side and are not stored as identifiers. If your browser sends a Global Privacy Control or Do Not Track signal, we do not load analytics at all (see §6).
The Shopify analytics cookies below are set on our checkout domain (pranasalt-eu.myshopify.com), not on pranasalt.com, and are governed by Shopify's own consent tooling at checkout.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| _shopify_sa_p, _shopify_sa_t | Shopify Analytics: page views, traffic sources | 30 minutes | Shopify Analytics |
| _orig_referrer, _landing_page | Tracks how you arrived at the site | 14 days | Shopify (first-party) |
2c. Marketing (not currently used - would require consent)
We do not currently set any marketing or advertising cookies. The table below describes what would apply if we later enable paid advertising; we would add a consent mechanism before setting any of them. Legal basis if introduced: consent under GDPR Article 6(1)(a) and ePrivacy Directive Article 5(3) / Telecommunicatiewet article 11.7a.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| _fbp, fr (Meta Pixel) | Measures ad performance, retargets visitors on Facebook/Instagram | 90 days | Meta Platforms Ireland Ltd |
3. Managing analytics and cookies
pranasalt.com does not show a cookie-consent banner, because it sets no non-essential cookies - analytics here is cookieless. To opt out of analytics, turn on Global Privacy Control or Do Not Track in your browser; we honour either signal automatically and load no analytics when it is present (see §6). You can also clear the site's first-party data at any time (see §4). Cookies set on our Shopify checkout domain are managed by Shopify's own consent controls when you reach checkout.
4. How to clear cookies in your browser
You can also clear cookies directly through your browser settings:
- Chrome: Settings > Privacy and security > Clear browsing data > Cookies and other site data.
- Safari: Settings > Privacy > Manage Website Data > Remove All.
- Firefox: Settings > Privacy & Security > Cookies and Site Data > Clear Data.
- Edge: Settings > Privacy, search, and services > Clear browsing data > Cookies and other site data.
Note: clearing cookies will sign you out of your account and empty your cart.
5. Market detection (no IP storage)
To show you the right currency (EUR for the EU, GBP for the UK) and the right shipping terms, our site needs to know which country you are visiting from. We do this in two ways and we do not store your IP address:
- Country code lookup. On page load, your browser calls our own same-origin endpoint /api/geo, which runs on our hosting provider's (Vercel) edge network. The edge derives a two-letter country code (e.g. "GB", "DE", "US") from your IP address as part of serving the request and returns only that code. Your IP address is not stored in any application log and is not shared with third parties for this purpose.
- Your selection. If you use the country picker on the site to pick EU or UK manually, that choice is stored in the ps_market_override cookie (see §2a) so we honour it on return visits. You can change or clear it at any time.
We do not maintain a server-side log of which country a visitor came from. The country code is used only at page-render time to display the correct price.
6. Global Privacy Control and Do Not Track
We honour both Global Privacy Control (GPC) and Do Not Track (DNT) signals for analytics. If your browser sends either signal, the site does not initialise PostHog or Vercel analytics at all - no request is made and nothing is recorded.
7. Data controller
PranaSalt B.V.
Herengracht 584, 1017 CJ Amsterdam, the Netherlands
KVK: 42016445 | BTW: NL869305736B01
Email: hello@pranasalt.com
8. Updates
We update this page when we add or remove cookies or similar technologies. The "Last updated" date at the top reflects the latest revision. If we ever introduce non-essential cookies (for example, advertising pixels), we will add a consent mechanism before doing so.
9. Related policies
See also our Privacy Policy for how we handle personal data more broadly, and our Terms of Service.