Add something from the shop.
Last updated: 12 September 2026
Cookies are small text files stored on your device when you visit a website. They allow the site to recognise you and remember your preferences.
These cookies are essential for the website to function and cannot be disabled. The first two are marked httpOnly, so no script on the page can read them.
On your first visit, the language is selected automatically based on your browser settings and, where available, the country detected via Cloudflare. You can change the language at any time from the RO/EN switch in the menu, and your choice is stored in the dl_lang cookie. This cookie only stores a language preference; it does not identify you or track your activity.
Internal traffic statistics are calculated on the server, separately from Google Analytics and ad measurement. Optional Google, Meta, TikTok and OpenAI tools load only after consent through the banner; declining them does not prevent shopping or checkout.
Visit counting now happens entirely on our server, from the request your browser makes anyway in order to see the page. For each page view we keep: the page path (never anything after the question mark, because discount codes and email addresses can end up there), the two-letter country code Cloudflare gives us, the domain name only of wherever you came from, a coarse browser and device category, and the campaign label from the link, if there is one.
Internal statistics do not retain your raw IP address. So that we can estimate how many distinct visitors we had, your IP address and user agent are run through a cryptographic function (SHA-256) together with a secret key that rotates automatically every 24 hours. The result is a 32-character code used as a temporary pseudonym rather than a guarantee of absolute anonymity. Because the key changes daily, yesterday's codes cannot be linked to today's. The code is deleted after 48 hours, raw rows normally after 7 days (up to 21 days if aggregation is delayed), and beyond that only daily totals remain: counts, sums and distributions, with no identifier of any kind.
Why we do not ask for your consent for this. Consent is required by law when something is written to or read from your device: a cookie, a value in local storage, a browser fingerprint. Here nothing is written to or read from your device. The measurement happens on our server, the data is pseudonymised from the very first moment, we build no individual profiles, we do not track you across sites and we send nothing to third parties. The legal basis is our legitimate interest in knowing how our own shop performs, Art. 6(1)(f) GDPR.
OpenAI Ads: only after marketing consent, the OpenAI pixel measures visits, product views, cart additions, checkout starts and completed orders (RON value and a deduplication identifier). It may store attribution identifiers in first-party cookies, including __oppref. OpenAI may match events using contact details hashed in the browser. Events opt out of future user-level personalization. Withdrawing consent stops the pixel. OpenAI privacy policy.
No marketing cookie is set without your explicit consent. If you choose "Necessary only", neither the attribution cookie nor the Google/Meta/TikTok/OpenAI pixels are used at all: their scripts are never even added to the page.
What the pixels actually do after "Accept all": they send Meta and TikTok standard shop events (page viewed, product viewed, product added to cart, order placed, with the order value), which those platforms may link to your account on their platform. To measure ads more precisely, the pixels may also collect the content of the pages you visit and your interactions with them (clicks, time spent, page-load speed), and may send the platforms, in hashed form (pseudonymised, not anonymous), the contact details you type into the site's forms - email address, phone, name and address - so the platform can match the order to your user account ("Advanced Matching"). The platforms never receive this data in clear text, and we receive no data back about your account on those platforms. Details in the providers' policies, linked in the table.
Google Analytics and Google Ads: after acceptance, Google may use cookies such as _ga, _ga_* and _gcl_* for statistics, attribution and conversions. Standard lifetimes may reach 2 years for Analytics identifiers and 90 days for conversion identifiers, depending on configuration and browser limits. Google cookie details.
OpenAI: its SDK may use __oppref and local storage for ad attribution. Actual persistence depends on the SDK and browser. You can remove this data in your browser and stop future collection through “Cookie settings”. OpenAI pixel information.
Besides cookies, the site uses your browser's local storage. These values stay on your device until you delete them, and unlike a cookie they are not sent to us automatically with every request.
dl_cart - the contents of your shopping cart. If you are signed in, the cart is also mirrored on our server so you find it again on another device, and that server copy is deleted automatically after 60 days without any change.dl_recent - the last 8 products you opened, so we can show them to you under the product page.dl_cookie_consent_v2 - a copy of your choice from the banner.dl_prelaunch_dismissed - remembers that you closed the pre-launch notice, so we do not show it again.Some features use third-party services that may set their own cookies, per their policies:
__stripe_mid and __stripe_sid, which Stripe uses for fraud prevention.__cf_bm, a short-lived cookie for automated-traffic detection, and if you are shown a security check it may also set cf_clearance, which records that you passed it. The durations are set by Cloudflare, not by us.cdn.sameday.ro and may set its own cookies, per Sameday's policy.All of these are necessary for payment, security or delivery of your order.
You can manage or delete cookies via your browser settings. Please note that disabling necessary cookies may affect the functionality of the site (authentication, shopping cart).
You can change your mind at any time, as easily as you consented: press "Cookie settings" in the footer of any page. The banner reopens, and if you choose "Necessary only", the marketing cookies stop being used and the pixels no longer load (the page reloads automatically to stop them immediately). Cookies already set by Meta or TikTok can be deleted from your browser settings.
Strictly necessary cookies are used to deliver the service you asked for (authentication, cart, language preference) and rely on our legitimate interest in operating the service correctly, Art. 6(1)(f) GDPR. The marketing cookies (dl_attr, Google, Meta, TikTok and OpenAI tools) are used only with your explicit consent, Art. 6(1)(a) GDPR, in compliance with Law no. 506/2004 on the processing of personal data in the electronic communications sector, and withdrawing consent is as easy as giving it (the "Cookie settings" link in the footer). For data collected through the Meta pixel we act as joint controllers with Meta Platforms Ireland for the collection and transmission stage. The traffic measurement described above falls outside the cookie rules, because it does not access your device in any way, and relies on legitimate interest, Art. 6(1)(f) GDPR.
For any questions regarding cookies, please contact us at: office@drafted-lab.com