Cookie & Privacy Notice
Last updated: October 16, 2026
This page explains what cookies and similar technologies we use, why we use them, and how you can manage your preferences at any time.
How we use cookies
We use essential cookies that are necessary for the basic functioning and security of this website. With your permission, we may also use optional cookies to help us understand how the site is used, improve performance, and deliver relevant content. Some analytics we use may not rely on cookies and only collect aggregated, anonymised data for a limited period.
Cookies we use
Essential cookies
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| lr-cookie-consent | Stores your cookie consent preference. | Cookie182 days | First Party |
| lr_cart | Stores cart products, options and personalisation text/font so you can check out; expires seven days after the cart is written. | Cookie7 days | First Party |
| lr_cart_v2 | Stores cart products, options and personalisation text/font. Items older than 30 days are removed on the next cart load; local storage does not expire automatically and may remain until you revisit or clear it. | Local Storage30 days | First Party |
| lr_session_marker | Helps detect active sessions. | Cookie31 days | First Party |
| lr_session_expired | Shows when a session expires. | Cookie5 minutes | First Party |
| lr_visitor_id | Persistent anonymous visitor identifier used for idempotency and to associate anonymous activity with a user after they sign in. | Cookie730 days | First Party |
| _GRECAPTCHA | Helps protect forms from abuse and fraudulent activity. | Cookie180 days | Google reCAPTCHA |
| lr_hold | Controls access while the holding page is enabled. | CookieSession | First Party |
| next-auth.session-token | Keeps you signed in to your account. | Cookie30 days | NextAuth |
| __Secure-next-auth.session-token | Keeps you signed in to your account on secure connections. | Cookie30 days | NextAuth |
| next-auth.csrf-token | Helps protect sign-in and form submissions from CSRF. | Cookie1 day | NextAuth |
| next-auth.callback-url | Stores the return URL after authentication. | Cookie1 day | NextAuth |
Analytics cookies
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| lr:purchase-success-tracked | Prevents duplicate purchase success tracking within a session. | Session StorageSession | First Party |
| _ga_YLRPLSH3RR | Used to persist session state and track a user’s interaction with the website during a session. | Cookie712 days | Google Analytics |
| _ga | Registers a unique ID used to generate statistical data on how the visitor uses the website. Helps us count visits and understand which pages are popular. | Cookie712 days | Google Analytics |
Signup verification storage
After a successful signup, we use first-party session storage to hold the email address you entered. This lets us show which inbox to check and resend your verification email without putting your email address in the page URL. It is not used for analytics or advertising.
The address is kept for this tab's browser session, including page reloads, and is normally removed when the tab is closed. It is cleared earlier if you choose "Try signing up again" on the confirmation page. Browser session-restore features may restore session storage. If storage is blocked or unavailable, you can enter your email address again to request another verification email.
Signup verification browser storage
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| signup-verification-email | Holds your signup email address to display the verification confirmation and support resending the verification email. | Session StorageSession | First Party |
Optional checkout preferences
Only if you check "Remember my checkout choices on this device" in your bag, we use first-party local storage to remember your delivery method and saved-address selection for your account in this browser. These preferences do not sync across devices and are not used for analytics or advertising. We store a saved-address ID or your choice to enter a new address, not address text or a phone number. The * in the names below represents your account identifier.
Consent lasts 30 days from opt-in; changing a selection does not extend it. After expiry we stop using the preferences and remove them when checkout next accesses them. Local storage does not expire automatically while you are away. Uncheck the option in your bag to withdraw consent and remove these entries immediately, or clear this website's browser site data. You can still check out without opting in. This choice is separate from the cookie banner's category settings.
Checkout preference storage
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| lr_checkout_remember_* | Records your explicit checkout opt-in and its expiry for this account on this browser. | Local Storage30 days | First Party |
| lr_checkout_fulfillment_* | With your checkout opt-in, remembers delivery or local collection until the opt-in expires. | Local Storage30 days | First Party |
| lr_checkout_address_* | With your checkout opt-in, remembers a saved-address ID or the choice to enter a new address; not address text. | Local Storage30 days | First Party |
Your choices
- Manage preferences in our site: Use the Privacy settings button above to accept, reject, or fine-tune categories. Essential cookies cannot be turned off.
- Browser controls: Most browsers let you block or delete cookies and clear local and session storage through their site-data settings. Doing so may affect core functionality.
- Retention: Your consent preferences are stored for up to 182 days unless you clear your cookies or update your choices.
Definitions
- Essential cookies
- Required for security and basic features like authentication and page navigation.
- Analytics cookies
- Help us understand usage so we can improve performance and user experience.
- Performance cookies
- Measure load times, reliability, and responsiveness.
- Marketing cookies
- Used to deliver and measure relevant content or promotions.
Contact
If you have questions about this notice or our data practices, please visit our contact page.
Contact Little Rose