Cookie policy
Cookies that are strictly necessary run by default. Analytics and marketing cookies only run if you actively agree — and you can change your mind at any time from the footer.
1. What a cookie is, in one paragraph
A cookie is a small text file that a website stores in your browser. It lets the site recognise your browser on the next page load — which is how a shopping cart remembers what you put in it. Some cookies are set by us, others by third-party services we use. Similar technologies, such as local storage, work the same way for the purposes of this policy.
2. Our four categories
| Category | Consent required? | What it does |
|---|---|---|
| Strictly necessary | No — cannot be switched off | Keeps the cart working, remembers that you passed the 18+ age check, remembers your cookie choices, and protects the site against abuse. Without these the site simply does not function. |
| Functional | Yes | Remembers preferences such as language and delivery country, so you do not re-enter them on every visit. |
| Analytics | Yes | Tells us which pages are used, where visitors give up, and which pages are slow. Data is aggregated and IP addresses are shortened. Nothing here is loaded before you agree. |
| Marketing | Yes | Measures whether a campaign brought a visit. Note that this category is largely theoretical for a vape business: Google Ads and Meta advertising do not accept this product category, so we cannot run paid acquisition in the first place. |
3. The cookies we actually set
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
vx_age_ok_v1 | Necessary | Records that the 18+ age check was passed, so you are not asked again on every page. | 30 days |
vx_cookie_v1 | Necessary | Stores which cookie categories you agreed to, so we do not ask again. | 12 months |
vx_cart_v1 | Necessary | Holds the contents of your cart between page loads. | Session to 30 days |
vx_lang | Functional | Your chosen interface language. | 12 months |
vx_country | Functional | Your chosen delivery country, used for shipping and tax display. | 12 months |
_pk_id.* | Analytics | Distinguishes returning from new visitors, in aggregate. | 13 months |
_pk_ses.* | Analytics | Groups page views into a single visit. | 30 minutes |
The exact cookie names depend on the analytics and consent tools you configure. Update this table to match what your live site actually sets — an inaccurate cookie list is a common finding in GDPR audits.
4. Third parties
Analytics and consent management are provided by third-party services acting as our processors. Where a processor is established outside the EEA we rely on an adequacy decision or Standard Contractual Clauses. The current list of processors is in section 4 of the privacy policy.
5. Fonts and embedded content
The fonts used on this site are hosted on our own server. No request is sent to Google or any other font provider when you load a page — a German court has held that transmitting a visitor's IP address to Google Fonts without consent breaches the GDPR, so we removed the possibility entirely rather than asking for consent for it.
6. How to change or withdraw your consent
You can reopen the consent banner at any time using the Cookie settings link in the footer of every page, or the button at the top of this page. Withdrawing consent stops the relevant cookies being set from that point on; it does not retroactively invalidate processing carried out while consent was in force.
You can also control cookies through your browser settings — most browsers let you block or delete cookies, and block third-party cookies specifically. Blocking strictly necessary cookies will break the cart and the age check.
7. Do Not Track and similar signals
We treat a browser's Global Privacy Control signal as a valid objection to analytics and marketing cookies, and apply it automatically.
8. Changes
We update this policy when we add or remove a cookie or a third-party service. The version date is shown below.
Version 1.0 · Last updated 10 September 2026.