Cookie policy
Last updated 26 October 2026
Draft for review. This wording should be checked by a solicitor or a legal template service before the website goes live.
We use as little as possible. Nothing that tracks you is used unless you say yes.
Your current choice
You haven't made a choice yet, so only essential storage is used.
Essential (always on)
These make the website work. The law allows them without consent because the site can't function without them.
| Name | What it does | How long |
|---|---|---|
| hb-basket | Remembers what's in your basket | Until you empty it |
| hb-consent-v1 | Remembers your cookie choice | Until you change it |
| sb-…-auth-token | Keeps you logged in | Until you log out |
| hb-receipt | Shows your confirmation after paying | Until you close the tab |
| Cloudflare Turnstile | Checks forms are sent by a person, not a robot | The visit |
| Stripe | Fraud prevention on the payment page (on Stripe's site) | Set by Stripe |
Analytics (only if you accept)
If you accept, we use Google Analytics to count visits and see which pages are useful. IP addresses are anonymised.
| Name | What it does | How long |
|---|---|---|
| _ga | Distinguishes visitors | 13 months |
| _ga_<id> | Keeps the state of a visit | 13 months |
| hb-link-v1 | Remembers which of our social media links you followed, so a purchase can be counted for it | 30 days |
When you follow one of our links on social media we count the click, without keeping anything about you. If you haven't accepted analytics we only remember the link while you're on the site.
Managing cookies
Use “Cookie settings” at the bottom of any page to change your choice. You can also clear or block cookies in your browser settings, though the basket and login won't work without essential storage.