1. What we store and why
When you visit our shop, information can be stored in or read from your browser (cookies, local storage, session storage). Without your consent this is only permitted if it is strictly necessary for us to provide a service you expressly requested (§ 25(2) no. 2 TDDDG) – such as the cart or secure payment. Everything else (statistics, marketing) is used only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
The shop language is derived from the address (URL) and is not stored.
2. Strictly necessary storage (no consent required)
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| bloomda_consent | bloomda; local storage (first party) | Stores your cookie choice (statistics/marketing separately), policy version, timestamp and expiry date. No identifier for recognising you is generated. | 12 months from choice |
| bloomda_cart_id | bloomda; local storage (first party) | Remembers the technical identifier of your cart so it is kept on your next page view. | until the order is completed or you clear your browser data [max. 30 days] |
| [Customer account login/session token] | bloomda; [local storage or cookie] (first party) | Keeps you logged in and protects your account (only if you log in). | [end of session or 7 days] |
| __stripe_mid | Stripe Payments Europe, Ltd.; cookie (set by Stripe.js) | Fraud prevention and secure payment processing in checkout. | 1 year |
| __stripe_sid | Stripe Payments Europe, Ltd.; cookie (set by Stripe.js) | Fraud prevention and secure payment processing in checkout. | 30 minutes |
Stripe identifiers are only set when you open the checkout with the payment form.
3. Statistics (only with your consent)
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Ireland Limited / Google LLC; cookie | Google Analytics 4: recognising the browser and measuring sessions (page views, cart, purchases). | up to 2 years (depending on configuration) |
| _gid, _gat* | Google; cookie (only if set by the tag) | Measurement/session or request throttling. | 24 hours / 1 minute |
| bloomda_tracked_purchases | bloomda; session storage (first party) | Prevents a purchase event from being sent to measurement services several times in the same session (provider/order number only, no contact or payment data). | end of browser session (tab) |
4. Marketing (only with your consent)
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| _gcl_* | Google Ireland Limited / Google LLC; cookie | Google Ads: attributing ad clicks to purchases (conversion measurement). | up to 90 days |
| _fbp, _fbc | Meta Platforms Ireland Ltd.; cookie (first party) | Meta Pixel: browser and click attribution for ad measurement. | up to 90 days |
These providers are only active if we have set up the respective service and you have consented to the category. Privacy information on these services is in the privacy policy.
5. Changing settings or withdrawing consent
- Click “Cookie settings” in the footer to change or withdraw your choice at any time. On withdrawal we stop data transmission immediately, remove the scripts and delete the cookies we can reach; cookies held on a third-party domain can be deleted via your browser settings.
- You can also block or delete cookies in your browser. Some functions (e.g. the cart) may then no longer work.
Declining is as easy as accepting. You can use the shop fully without consenting to statistics and marketing.
6. Google Consent Mode v2
We use Google Consent Mode v2 in basic mode: until you consent, “analytics storage”, “ad storage”, “ad user data” and “ad personalisation” are set to “denied” and no Google or Meta scripts are loaded. Only after you consent to the respective category is the service loaded and the status set to “granted”. Page views are not sent automatically; only the shop events mentioned above (product view, cart, checkout, purchase) are transmitted.
7. Changes
We update this policy when we change or add services. If a consent needs to change as a result, we will ask again. As of: 2026-11-03.