Cookie Policy

Last updated: September 24, 2026

Short version: nothing third-party loads until you say so. Your cart and display settings live in your browser's local storage (stays on your device). Google Analytics 4 and Microsoft Clarity are used only if you tap Accept on the cookie banner — they help us understand visits in aggregate. No ad pixels, no cross-site trackers, ever.

Your choice

You can change your mind at any time — the change takes effect on the next page load:

Rejecting also deletes any Google Analytics or Clarity cookies already set in this browser.

Cookies we use

Strictly necessary

Cloudflare security (__cf_bm, ~30 minutes) — set by Cloudflare, which delivers our site and blocks bots and attacks. Required for the site to work securely; it can't be switched off here.

Analytics — only with your consent

Google Analytics 4 (_ga 2 years, _ga_<ID> 2 years) — distinguishes visits and measures traffic and shop activity in aggregate. Data goes to Google under Google's Privacy Policy. Google's opt-out browser add-on also works.
Microsoft Clarity (_clck 1 year, _clsk 1 day) — anonymized session recordings and heatmaps showing where visitors click and scroll. Anything typed into forms is masked, so we never see it. Data goes to Microsoft under the Microsoft Privacy Statement.

Neither of these loads — and none of these cookies are set — unless you accept.

Set by others during checkout and forms

PayPal — when you check out, PayPal may set its own cookies as described in the PayPal Privacy Statement. These are outside our control.
FormSubmit — our contact and mailing-list forms are delivered by FormSubmit (formsubmit.co); see their privacy policy.

What we keep in your browser's local storage

Local storage stays on your device — it's never sent to ad networks. We use it for:

Your cart (bsr-cart-v1) — the slides you've added, so your cart survives a page refresh.
Display settings (bsr-theme and accessibility options) — dark mode, text size, contrast, and the other toolbar options.
Cookie choice (bsr-consent) — whether you accepted or rejected analytics cookies, and when.
A random visitor ID (bsr-vid) — a meaningless random string used to count daily visitors in our own statistics. It can't identify you.
Dismissed notices (bsr-purchased) — so we don't keep showing you banners you've already closed.

Our own statistics

We count page views and shop activity (listing views, add-to-cart, checkout starts) with a beacon to our own server. It sets no cookies, stores no IP addresses with the counts, and the data is aggregated daily. Because it's first-party and minimal, it runs under our legitimate interests (see the Privacy Policy) — the Accept/Reject choice above applies to Google and Microsoft only.

Managing cookies in your browser

Every major browser lets you block or delete cookies in its settings — check your browser's help pages. Note that blocking strictly-necessary security cookies may break parts of the site.