Legal information
Cookie policy
What we use on this website
We only use technical cookies and storage, which are essential for the bag, checkout, your account and the security of the website to work, and storage for the appearance of the website (light, dark or automatic) when you are the one who chooses it. They are exempt from consent (Article 22(2) of Spanish Law 34/2002, LSSI), which is why we do not show you a cookie banner.
We do not use analytics, advertising or social media cookies.
For every visitor
- `yu_cart_v1` (local storage, first party). Saves the products and quantities in your bag so they are not lost when you move between pages, with the name, photo and price you saw when you added each one: this lets us show you your bag straight away and tell you if a price has changed. It stays until you empty the bag, your order is completed or you clear your browser data. What you pay is never worked out from this data: prices and the total always come from our server.
- `yu_checkout_v1` (session storage, first party). Keeps what you have typed in the checkout form and a technical reference to your purchase attempt, so you do not have to type it again if the payment is not completed and you come back. It is deleted when you close the tab, or earlier if the order is completed.
- `yu_theme_v1` (local storage, first party). Remembers the appearance you choose with the dark mode button at the top of every page or in the appearance row at the bottom: light, dark or automatic (your device's setting). It is only created if you choose one and stays until you change it or clear your browser data. If you do not choose anything, nothing is saved and the website is shown in light mode.
- `yu_order` (first-party cookie, secure and not accessible from JavaScript). Lets you see your order confirmation when you come back from the payment page. It is only created after you place an order, only sent to the order confirmation pages and lasts 1 day.
If you sign in to your customer account
- `yu_session` (first-party cookie, secure and not accessible from JavaScript). Keeps you signed in. It is only created if you sign in with the link we email you, and it lasts 30 days or until you sign out.
Only if the website is under attack
If the website is attacked and we switch on the enhanced protection of Vercel, our hosting provider, you will see a short browser security check before you enter.
- `_vcrcs` (Vercel technical security cookie, on our domain). Remembers for 1 hour that your browser has already passed that check, so you are not asked again on every page. It is only created while the protection is switched on and is only used to protect the website.
Only for the management team
These cookies and this storage are only created when an administrator signs in to the management panel. Shop visitors never receive them.
- `payload-token`: keeps the management panel session open (8 hours).
- `payload-totp`: confirms the administrator's two-step verification (8 hours).
- `payload-lng`: remembers the panel language if the administrator changes it (1 year).
- `payload-theme`: remembers the light or dark theme of the panel if the administrator chooses one (1 year).
- `payload-pending-success-toast` (session storage): shows the notice that a change has been saved when the panel reloads the screen, and is deleted once shown.
- `_payloadClipboard` (local storage): keeps what the administrator copies in the panel so it can be pasted elsewhere, and is replaced with each copy.
On the payment page
When you pay by card, Bizum, Apple Pay or Google Pay, you leave our website for Stripe's secure payment page. That page uses its own cookies, which are needed for the payment and to prevent fraud, and are governed by Stripe's cookie policy.
How to manage them
You can view and delete cookies and local storage in your browser settings. If you block them, the bag will not remember your products, the website will not remember the appearance you choose and you will not be able to complete your purchase or sign in to your account.
Changes
If we ever add cookies that are not technical, such as analytics or advertising cookies, we will first ask for your consent with a notice that lets you accept or reject them just as easily, and we will update this policy.