Effective from: 01.08.2026
This page explains what cookies and similar technologies leis-design.com uses, what each one
does and how you control them. It supplements our Privacy Policy.
The rules that apply here are Article 5(3) of the ePrivacy Directive 2002/58/EC as
implemented in the Slovenian Electronic Communications Act, together with the GDPR.
1. The short version
- Nothing that is not strictly necessary is stored on your device until you agree to it.
- When you first arrive you see a consent banner. Analytics and advertising scripts do not
load at all until you accept them there. - You can change or withdraw your choice at any time using the Cookie settings link in
the footer of every page. - Refusing non essential cookies does not stop you from browsing, ordering or paying.
2. What a cookie is
A cookie is a small text file that a website stores in your browser. It lets the site
remember things between page loads, for example what is in your basket.
This policy also covers similar technologies with the same effect, such as local storage,
session storage and tracking pixels. We refer to all of them as “cookies” for simplicity.
Cookies are either:
- First party, set by leis-design.com itself, or third party, set by another company
whose service is embedded in the page. - Session cookies, deleted when you close the browser, or persistent cookies, which
stay until they expire or you delete them.
3. Consent management
We use the Complianz consent management platform. It shows the banner, records your
choice, and blocks scripts in the categories you have not accepted.
The banner offers a genuine choice. Accepting and refusing are equally easy, and there is no
pre ticked box for any non essential category.
Your choice is stored for up to 12 months, after which we ask again. You can change it
sooner through the Cookie settings link in the footer.
We also use Google Consent Mode v2, which passes your consent state to Google’s tags so
they adjust their behaviour. If you refuse, Google’s tags do not set advertising or
analytics cookies.
Google Tag Manager, Google Analytics and the Meta Pixel are not present on the page at all
while their consent categories are refused. They are not loaded and then held back. They
are simply not loaded.
4. Categories we use
4.1 Strictly necessary
These make the shop work. They cannot be switched off, and no consent is required for them
because the site cannot function without them.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
woocommerce_cart_hash |
leis-design.com | Tells the site the basket contents changed, so cached pages are not shown with a stale basket | Session |
woocommerce_items_in_cart |
leis-design.com | Tells the site whether the basket has anything in it | Session |
wp_woocommerce_session_* |
leis-design.com | Links your browser to your basket and checkout data on the server | 2 days |
cmplz_* |
leis-design.com (Complianz) | Stores your cookie choices and the date you made them | Up to 12 months |
PHPSESSID |
leis-design.com | Server session, used during checkout | Session |
wordpress_logged_in_*, wp-settings-* |
leis-design.com | Only set for administrators who log in to manage the shop. Never set for customers. | Session to 1 year |
sbjs_* (seven cookies) |
leis-design.com | Records how you reached the shop, so the order can be attributed to the right source. Set by WooCommerce’s own order attribution feature | 6 months |
leis_coupon |
leis-design.com | Holds a discount code that arrived in the link you clicked, until it is applied to your basket | 30 minutes |
__cf_bm |
revolut.com | Distinguishes people from bots on the payment form | 30 minutes |
_rev_pay_client_region |
merchant.revolut.com | Routes the payment to the right regional service | Session |
| Kount cookies | ssl.kaptcha.com (Kount, for Revolut) | Fraud screening of the payment: checks whether the device and the session look like the ones behind known card fraud | Set by Kount, see its policy |
| PayPal cookies | PayPal | Set when you choose PayPal, to complete and secure the payment | Set by PayPal, see its policy |
The payment cookies are placed as part of the payment service you asked for and serve fraud
prevention, which is why they sit in this category.
Revolut is the card processor and it brings Kount with it for fraud screening. Those requests
come from inside Revolut’s own payment form, not from this site, and they appear only on the
checkout page and only once the payment form is displayed.
Provider of the payment service: Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius,
Lithuania. Privacy policy: https://www.revolut.com/legal/privacy/
4.2 Preferences
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
leis_angle |
leis-design.com | Remembers which version of the page content you arrived on, so the same headline and images stay visible while you browse. Contains a short label describing the advertisement, for example gift. Contains no name, no email address and no device fingerprint. It never changes prices. |
30 days |
[TO BE CONFIRMED BY OWNER AND REVIEWED BY A LAWYER: whether leis_angle may be set without
consent. Our view is that it is a preference cookie in the same class as a language choice,
because it only keeps the page consistent during your visit and carries no identifier that
could be used to recognise you elsewhere. A stricter reading is that it serves advertising
measurement and therefore needs consent. See the note in README.md.]
4.3 Statistics
Set only if you accept the statistics category.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Distinguishes visitors for Google Analytics 4 | 2 years | |
_ga_<container-id> |
Keeps the analytics session state | 2 years |
Google Analytics 4 tells us how many people visit, which sections they read, where they stop
and how many complete a purchase. IP addresses are shortened by Google before storage.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Privacy policy: https://policies.google.com/privacy
4.4 Marketing
Set only if you accept the marketing category.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp |
leis-design.com (Meta Pixel) | Identifies the browser for Meta advertising measurement | 3 months |
_fbc |
leis-design.com (Meta Pixel) | Stores the click identifier from the advertisement you clicked | 3 months |
fr, datr and similar |
facebook.com | Set by Meta on its own domain for advertising delivery and security | Up to 2 years |
These let us measure which advertisements produced a sale and show relevant advertising on
Facebook and Instagram.
The Meta Conversions API also sends purchase events from our server to Meta so that
measurement still works when a browser blocks the pixel. Where an event includes contact
details, they are hashed before transmission. Browser and server events carry the same event
identifier so Meta does not count a purchase twice. This runs only while you have accepted
the marketing category.
Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
Privacy policy: https://www.facebook.com/privacy/policy
4.5 Tag management
Google Tag Manager is the container that loads the analytics and marketing tags above. It
does not set cookies of its own. It loads only after consent, and only once a container
identifier has been configured for this site. While no identifier is configured, the site
loads no external scripts at all.
Provider: Google Ireland Limited.
5. Transfers outside the EU
Analytics and marketing services may transfer data to the United States. Those transfers
rely on the EU-US Data Privacy Framework adequacy decision of 10 July 2023 where the
recipient is certified, and otherwise on Standard Contractual Clauses under Article 46(2)(c)
GDPR.
If you refuse the statistics and marketing categories, no data goes to Google or Meta and no
such transfer takes place.
More detail is in section 6 of the Privacy Policy.
6. How to control cookies
On this site
Use the Cookie settings link in the footer. You can accept or refuse each category
individually and change your mind as often as you like.
Withdrawing consent stops future processing. It does not undo processing that already
happened lawfully while consent was in place.
In your browser
You can also block or delete cookies in your browser settings. Note that blocking strictly
necessary cookies will break the basket and the checkout.
- Chrome: Settings, Privacy and security, Third-party cookies
- Firefox: Settings, Privacy and Security, Cookies and Site Data
- Safari: Preferences, Privacy
- Edge: Settings, Cookies and site permissions
Opting out with the providers
- Google Analytics browser opt out add on: https://tools.google.com/dlpage/gaoptout
- Meta ad preferences: https://www.facebook.com/adpreferences
7. What we do not use
- We do not use cookies for personalised pricing. The price is the same for everyone.
- We do not use fingerprinting techniques to recognise you without a cookie.
- We do not use cookies for a newsletter, because there is no newsletter.
- We do not use chat widgets, embedded social feeds, embedded maps or externally hosted
fonts. Fonts are served from our own server, so no font request goes to a third party. - We do not use cookie walls. Refusing does not block access to the site.
8. Changes
The list of cookies above can change when we add or remove a service. We keep it up to date
and the effective date at the top reflects the current version. Where a change adds a new
purpose, we ask for consent again.
9. Contact
Questions about this policy: info@leis-design.com
Supervisory authority: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana,
Slovenia, gp.ip@ip-rs.si, https://www.ip-rs.si
RIMARKET d.o.o., Jurjevica 50, Jurjevica, 1310 Ribnica, Slovenia. Registration number
3360563000. VAT SI41578562.