What these technologies are
A cookie is a small value a website asks your browser to keep and return with later requests. Local storage and session storage stay in your browser but are not automatically sent with every request. They help the store remember your cart or an unfinished checkout.
Essential cookies
These cookies protect forms, keep authorised areas private, and let a customer reopen the correct order page. They are not used for advertising.
| Purpose | Typical duration |
|---|---|
| Security tokens for checkout and public forms, used to stop another website submitting a request as you | Up to 2 hours |
| Order receipt and private payment-proof access after checkout | Up to 24 hours |
| Student-area sign-in after a secure magic link | Limited session set by the student area |
| Admin authentication and anti-forgery protection | Session or the secure sign-in period |
In production these sensitive cookies are set with protections such as HttpOnly, Secure, and SameSite where appropriate, so scripts or other websites cannot freely use them.
Browser storage
| Item | Where and for how long |
|---|---|
| Shopping cart and saved artwork | Local storage on your device until you clear it or the store replaces it |
| Unfinished checkout details | Session storage for the current browser tab; removed after a successful order or when the browser clears the session |
| Room-preview wall photograph | Held only in browser memory for the preview; it is not uploaded to SaniaScript |
| Analytics choice | Local storage on your device until you change it or clear site data |
Your controls
You can clear cookies and site data in your browser settings. Blocking essential cookies may stop secure forms, checkout, admin sign-in, order receipts, or the student area from working. Clearing local storage removes the cart, saved-artwork list, and saved analytics choice from that device.
Current choice: no choice saved yet.
Optional Vercel Web Analytics
After consent, Vercel receives an anonymous page-view event for public pages. It may include the page path, time, referrer, approximate country or city, browser, operating system, and device type. It does not use third-party cookies or create a permanent cross-site visitor profile. A short-lived identifier is discarded after 24 hours.
SaniaScript removes query strings and fragments before sending an event and completely excludes admin, checkout, private order, tracking, and student routes. No names, email addresses, phone numbers, delivery addresses, order numbers, form values, or payment information are intentionally sent. You can change your choice above at any time.