Cookie management
To give you the best possible experience, our website uses cookies. You stay in control.
Last updated:
You can change your cookie choices at any time.
1. What is a cookie?
A cookie is a small text file placed on your device (computer, phone, tablet) when you visit a website. It allows the site to remember certain information about your browsing.
2. Categories of cookies used
Strictly necessary cookies
Essential for the site to work (basket, session, security). They do not require your consent.
- Session identifier
- Basket preferences
- Language / country choice
- Security token (CSRF)
Analytics cookies
Help us understand how you use our site (pages visited, time spent, purchase journey) so that we can improve it. These cookies are only set after your explicit consent.
Marketing cookies
Allow us to measure the effectiveness of our advertising campaigns and to offer you relevant content. Only set with your consent.
Preference cookies
Remember your choices (language, currency, theme) to personalise your experience from one visit to the next.
3. Detailed list of cookies used
Here is the full inventory of the cookies you may come across on our site:
| Name | Issuer | Purpose | Duration | Category |
|---|---|---|---|---|
_medusa_jwt | GetEverwear | Customer session / persistent basket | 30 days | Necessary |
_medusa_cart_id | GetEverwear | Keeps your current basket from one visit to the next | Session | Necessary |
_medusa_cache_id | GetEverwear | Random technical identifier used to find the right cached version of the site's pages. No link to your account, no audience measurement. | 24 hours | Necessary |
_ge_sso_retour | GetEverwear | During a Google sign-in, remembers the language of the site you started from so you return to it. Deleted on return. | 10 minutes | Necessary |
_ge_flyer_pending | GetEverwear | Keeps the flyer you have just scanned for a few hours, while the visit is attributed to the right campaign. Deleted afterwards. | 2 hours | Audience measurement (exempt from consent) |
_ge_flyer | GetEverwear | Random identifier set when you open the short address printed on one of our flyers (for example geteverwear.com/fr/f1). Used only to count how many times the same device has scanned our flyers. Never matched with your customer account or with the other measurement cookies. Full details: privacy policy, section 9 bis. | 13 months | Audience measurement (exempt from consent) |
_ge_pays | GetEverwear | Remembers the delivery country you chose, to show prices in its currency. Only set when you choose a country yourself. | 1 year | Preferences |
tarteaucitron | GetEverwear | Remembers your cookie consent preferences | 13 months | Necessary |
__stripe_mid, __stripe_sid | Stripe | Fraud detection and payment session. Only set on the payment pages (/checkout) for the performance of the contract (art. 6.1.b GDPR). | 30 min - 1 year | Necessary (payment) |
chat_session_id | GetEverwear (in-house chat) | Links your messages to your conversation in the support chat. Signed in-house cookie, only set if you open the chat and send a message. No third party reads it. | 30 days | Necessary (requested service) |
__cf_bm | Cloudflare | Bot detection, anti-DDoS | 30 minutes | Necessary (security) |
cf_clearance | Cloudflare | Anti-bot challenge validation | 30 days | Necessary (security) |
_ge_anon | GetEverwear | Random identifier to tell visitors apart, without naming them. Set only after your explicit consent | 13 months | Audience measurement (subject to consent) |
_ge_attrib | GetEverwear | Remembers which link brought you here, to measure our campaigns. Set only after your explicit consent | 30 days | Audience measurement (subject to consent) |
_ge_session | GetEverwear | Groups together the pages of a single visit. Set only after your explicit consent | 30 minutes | Audience measurement (subject to consent) |
ph_phc_*_posthog | PostHog Inc. (Cloud EU) | Tells visitors apart and groups together the pages of a single visit. Set only after your explicit consent | 13 months max (CNIL) | Audience measurement (subject to consent) |
_ga | Google Ireland Ltd. | Tells visitors apart. Set only after your explicit consent | 13 months max (CNIL) | Audience measurement (subject to consent) |
_gid | Google Ireland Ltd. | Tells visitors apart. Set only after your explicit consent | 24 hours | Audience measurement (subject to consent) |
_gat | Google Ireland Ltd. | Limits the rate of measurements. Set only after your explicit consent | 1 minute | Audience measurement (subject to consent) |
_pinterest_ct_ua | Pinterest Europe Ltd. | Advertising measurement. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_pinterest_ct_rt | Pinterest Europe Ltd. | Advertising measurement. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_pinterest_sess | Pinterest Europe Ltd. | Pinterest session. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_pin_unauth | Pinterest Europe Ltd. | Visitor not logged in. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_routing_id | Pinterest Europe Ltd. | Technical routing. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_gcl_au | Google Ireland Ltd. (Google Ads) | Conversion measurement. Set only after your explicit consent | 90 days | Advertising (subject to consent) |
_gcl_aw | Google Ireland Ltd. (Google Ads) | Conversion measurement. Set only after your explicit consent | 90 days | Advertising (subject to consent) |
_gcl_dc | Google Ireland Ltd. (Google Ads) | Conversion measurement. Set only after your explicit consent | 90 days | Advertising (subject to consent) |
NID | Google Ireland Ltd. (Google Ads) | Google advertising preferences. Set only after your explicit consent | 6 months | Advertising (subject to consent) |
_fbp | Meta Platforms Ireland Ltd. | Meta advertising measurement. Transfer: USA (parent company) - standard contractual clauses. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_fbc | Meta Platforms Ireland Ltd. | Origin of the ad click. Transfer: USA (parent company) - standard contractual clauses. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_ttp | TikTok Technology Ltd. | TikTok advertising measurement. Transfer: Outside the EU (parent company) - standard contractual clauses. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
_tt_enable_cookie | TikTok Technology Ltd. | Indicates that measurement is allowed. Transfer: Outside the EU (parent company) - standard contractual clauses. Set only after your explicit consent | 13 months max (CNIL) | Advertising (subject to consent) |
Trackers that are not cookies: flyer campaigns. When you open the short address printed on one of our flyers, we offer to share your location and a technical fingerprint of your device (screen, languages, fonts, graphics card…). These are not cookies, but they are trackers: they are subject to the same consent rules, and nothing is collected until you have clicked “I accept”. Refusing changes nothing about your access to the shop. Details are in the privacy policy, section 9 bis.
Trackers that are not cookies: reading your device for audience measurement. If you accept the “audience measurement” box, on every page we read a few characteristics of your device (screen resolution and density, window size, time zone, installed languages, number of cores and memory) and we keep your full IP address for 5 years. These are not cookies, but they are trackers, subject to the same consent rules. Until you have accepted, none of this is read: we do not merely refrain from recording it. Refusing changes nothing about your access to the shop or how the site works. Details are in the privacy policy, section 9 ter.
Trackers that are not cookies: technical error tracking (Sentry). To be alerted when a page crashes, we use Sentry, hosted in the European Union (Frankfurt, Germany). This tracking sets no cookie: it sends the error message, the page concerned and the site version, without your IP address or your e-mail address. It only starts after your agreement, via the “anonymous audience measurement and technical error tracking” box, and stops immediately if you change that choice. This service does not record your browsing. Reports are kept for 30 days, then deleted.
Google Analytics 4 (GA4) complements our in-house audience measurement so that we benefit from its native integration with Google Search Console: cross-referencing search queries ↔ behaviour on the site, identifying the pages that convert, detecting drops in SEO traffic. Minimal configuration: IP anonymisation enabled (anonymize_ip), no advertising signals (allow_google_signals: false), no Ads personalisation. You can refuse GA4 without refusing anonymous audience measurement (separate categories in the banner). Google privacy policy: policies.google.com/privacy.
OpenStreetMap base map. When you choose a pickup point, the map displayed loads its images from the servers of OpenStreetMap, a non-profit European mapping project. This request sends your IP address to OpenStreetMap, without any cookie or identifier: this is how any online map normally works. No data is sent if you do not choose pickup point delivery. Privacy policy: wiki.osmfoundation.org.
4. Retention period
Cookies are kept for no longer than 13 months, in line with the recommendations of the CNIL (the French data protection authority). At the end of this period, your consent will be requested again.
This period applies to cookies. The data our audience measurement records on our own servers (pages viewed, journeys, and — if you have accepted it — device characteristics and full IP address) are kept for 5 years, then deleted automatically. The reason for this period is explained in section 5 of the privacy policy.
5. How to manage your cookies
At any time, you can:
- Change your preferences via the cookie banner (“Cookie settings” link available at the bottom of every page)
- Block or delete cookies in your browser settings
Useful links for your browser:
6. Refusing cookies
Refusing non-essential cookies does not prevent access to the site. However, some features may be degraded.
7. More information
To find out more about how your data is protected, see our Privacy policy.