Cookies and browser storage used by this shop.
This inventory explains each current technology, why it is used, how long it lasts, and how to change optional choices.
Rejecting optional storage is as easy as accepting it. Optional analytics and marketing remain off unless you actively enable them.
Essential cookies
Essential cookies are set only to provide a service you request or protect it. They do not require optional consent and are not used for advertising or audience measurement.
- stava_cookie_consent — stores essential=true, the analytics and marketing choices, decision time, and version; first-party; 180 days.
- NEXT_LOCALE — remembers Czech or English routing after you switch language; first-party; 365 days.
- next-auth.session-token or __Secure-next-auth.session-token — signed-in JWT session; first-party; up to 30 days.
- next-auth.csrf-token or __Host-next-auth.csrf-token — prevents forged sign-in and account requests; first-party; session cookie.
- next-auth.callback-url or __Secure-next-auth.callback-url — returns you to the requested page after sign-in; first-party; session cookie.
Essential local storage
stava.cart.v1 is first-party localStorage containing product snapshots, quantities, update times, and an entered coupon code. It does not contain your account, address, or payment-card details. It remains until checkout clears it, you clear the cart, or you clear browser storage.
Local storage is used to keep the cart you requested between pages and visits. It is not read for analytics or advertising.
Optional analytics and error monitoring
No general audience-analytics provider is currently connected. Browser-side Sentry-compatible error monitoring starts only after analytics consent and sends minimised error and performance events to the configured monitoring service. Server-side security and failure diagnostics may run under legitimate interests without reading your optional browser choice, but request bodies, query strings, cookies, authentication and IP headers, and user identity are removed before external reporting.
Refusing or withdrawing analytics does not affect browsing, sign-in, cart, checkout, or orders. After withdrawal, browser error and transaction events are blocked. If a new analytics vendor or identifier is added, this inventory and consent version must be updated before it runs.
Optional marketing storage
No marketing cookie or advertising provider is currently connected. The category is reserved for a future campaign-measurement or personalisation tool and remains off until consent. A provider may not be enabled merely because this switch exists; its identifiers, recipient, purpose, duration, and any international transfer must first be added to this notice and the consent version changed.
Sign-in, payment, and other third parties
If you choose Google or GitHub sign-in, or enter a hosted payment page in a future enabled payment flow, that separate domain may use its own strictly necessary or optional technologies under its notice. The shop's consent cannot control cookies on another provider's domain.
A third-party service must not be loaded on shop pages before the consent category it requires is granted. Payment and authentication technologies that are strictly necessary for a flow you explicitly request are limited to that flow.
Consent, withdrawal, and browser controls
Use the settings below to accept, reject, or select optional categories. The switches start off, and accepting or refusing has no effect on essential storefront access. You can return here and withdraw consent at any time; withdrawal is effective for future processing and does not undo processing that was lawful while consent was active.
The decision is remembered for 180 days. We ask again after expiry or sooner if the purpose, vendor, storage inventory, or consent wording changes materially. Clearing cookies, changing browser profile, or using another device removes the saved evidence and may show the choice again. Browser settings can also inspect or delete any cookie or localStorage entry.