Legal
Cookie policy
Effective March 1, 2025 · Last updated March 1, 2025
Short version. Necessary storage keeps the cart and your cookie choice working. Analytics and advertising cookies are off until you accept them. Rejecting costs you nothing but a slightly less personalized experience.
1. What counts as a cookie here
This policy covers HTTP cookies and browser local storage. We use local storage rather than a cookie for the cart, because it's faster and never sent to the server unless you check out. Both are "storage" in the sense below, and both are covered by the same consent rules.
2. Necessary storage — always on
These make the store function. They can't be turned off without breaking checkout.
ladakh.cart.v1— local storage. Holds your cart lines and quantities. Persists until you clear it or complete an order. No personal data beyond product IDs and quantities.ladakh.cookie-choice.v1— local storage. Remembers accept / reject / manage so the banner stays closed. Persists indefinitely until cleared.- Checkout session — a short-lived cookie set only during checkout, to keep the payment step tied to your cart. Deleted when the order completes or the session expires.
3. Analytics — optional
Aggregate page and funnel statistics: which pages get visited, where people drop out of checkout. Data is aggregated and IP-truncated. Retained 14 months.
Set only after you accept. Deleting the cookie stops further collection from that browser.
4. Advertising — optional
Set by ad platforms to measure whether an ad led to a purchase and to avoid showing the same ad repeatedly. This is the category that counts as "sharing" under the CCPA/CPRA.
- Meta Pixel — conversion and audience measurement, when ad campaigns are running.
- Ad platform cookies — click attribution, typically 30–90 days.
Set only after you accept. Opt out and the pixel doesn't fire; purchases still work identically.
5. What we don't use
- No cross-site fingerprinting beyond ad-platform cookies.
- No session recording or heatmaps currently.
- No "consent wall" — the store is fully usable with everything optional rejected.
6. Third-party storage
Google Fonts is loaded from Google's servers, which sees your IP and user agent. Payment and shipping providers set their own storage during checkout, governed by their policies. Our privacy policy lists the categories of providers.
7. Manage your preferences
Two ways, both instant:
- Here. The toggles below are the live source of truth. Turning advertising off is also the CCPA/CPRA opt-out of sharing.
- In the browser. Your browser settings can block all storage; the cart then resets on every page load.
Cart and consent memory Always on
8. Global Privacy Control
If your browser or extension sends a GPC signal, we read it as "reject advertising." You can still accept manually; the latest choice wins.