Cookie Policy
Art. 22.2 LSSI-CE and RGPD (GDPR)
When we ask for your permission
The cookies used by this site are those strictly necessary for the shop to work: remembering your basket, your language, your session, the order you are currently paying for and your response to the statistics notice. Art. 22.2 of the LSSI exempts these from requiring consent.
There is no advertising, no embedded social networks and no services that track you from one website to another: there is no Google Analytics, no Meta pixel and no typefaces loaded from external sources.
We do measure how the shop is used, with PostHog, but only if you accept: until then the script is not loaded. That is why you will see a notice that asks you solely about statistics, with «Accept» and «Reject» at the same level. Which data it receives, on what legal basis and how long it is kept are explained in the Privacy Policy.
Even if you accept, PostHog does not store cookies or any other data in your browser: it counts visits using a pseudonymous identifier that it calculates on its servers and that changes every day.
You can change your response whenever you wish from «Statistics preferences», at the foot of every page. Withdrawing your permission is just as easy as giving it and, from that moment on, the script stops loading.
If one day advertising or any other form of measurement is added, you will be asked about it separately, and nothing will be activated until you choose.
What is stored exactly
None of these cookies is shared with third parties or used for advertising.
Our apps have no cookies, but the phone stores, for the same technical purpose, your session (encrypted) and the delivery details you are entering, which are deleted when you log out; and the basket, any orders you have placed without an account (so that you can track them), the app texts and whether we have already asked you about the notices, which are deleted when you uninstall the app.
| Cookie | Purpose | Duration |
|---|---|---|
| pumpkin_cart | Remembering the items in the basket between visits | 30 days from the last change, or until the basket is emptied |
| pumpkin_checkout | Storing the delivery details you enter during the purchase until you confirm the order | 3 hours, or until you confirm the order |
| pumpkin_pedido | Remembering a part-paid order, so as not to set aside the same stock twice | 24 hours, or until the order is paid or cancelled |
| pumpkin_lang | Remembering the language you have chosen | 1 year |
| sb-… (Supabase) | Keeping you logged in if you have an account | Up to 400 days, or until you log out |
| pumpkin_apple, pumpkin_google | Only while you log in with Apple or Google: checking that the response corresponds to your login attempt | 10 minutes |
| pumpkin_admin_seen | Only in the shop administration: log out after a few minutes of inactivity | Until the browser is closed |
| pumpkin_estadisticas | Remember whether you accept or reject statistics, so that you are not asked on every page | 1 year; after that you are asked again |
| pumpkin_equipo | Only in the browsers of those who work at the shop: so that their visits do not count in the statistics | 1 year |
How to delete them
You can delete them from your browser settings at any time. Please note that, as they are technical cookies, deleting them will empty your basket, log you out and cause you to be asked about statistics again.
At payment
When you click to pay, the browser takes you to the Redsys or PayPal environment, which are separate sites with their own cookie policies. Whatever happens there is governed by their terms.