Cookie policy

Last updated: 12 August 2026

We use as few cookies as we can get away with. There is no advertising network on this site, no cross-site tracking, and no third-party analytics loaded without your say-so.

Strictly necessary cookies

These are set without asking, because the site genuinely cannot work without them. Under the Privacy and Electronic Communications Regulations, consent is not required for cookies of this kind.

• ph_cart — remembers what is in your basket. Expires after 60 days.
• ph_session — keeps you signed in. Expires after 30 days, or when you sign out.

Both are HTTP-only, meaning JavaScript on the page cannot read them, and both are set as first-party cookies by this site alone.

What we do not set

We do not use Google Analytics, advertising pixels, remarketing tags, or any cross-site tracking cookie.

If we ever add optional analytics, it will be behind a consent banner that defaults to "reject", and this page will say so before it goes live.

Payment provider cookies

When you are sent to Stripe to pay, Stripe sets its own cookies on its own domain for fraud prevention. Those are covered by Stripe's privacy policy.

Managing cookies

You can clear or block cookies through your browser settings. Blocking the two cookies above will stop the basket and sign-in from working, but you will still be able to browse.