Cookie policy

Necessary technical cookies

• •next-auth.session-token or __Secure-next-auth.session-token: authenticated session; ordinarily up to 30 days.
• •next-auth.csrf-token: protects authentication flows; session duration.
• •next-auth.callback-url: remembers the post-login destination; session duration.
• •resta_cart: shopping cart; 30 days.
• •resta_locale: selected language; 12 months.
• •resta_cookie_consent: consent preferences; 6 months.

Resta first-party measurement

Only after marketing consent, resta_marketing_session is a pseudonymous first-party identifier used for up to 6 months to measure visit sources, funnel steps and order attribution. Data stays within Resta systems and does not enable Meta. Advertising identifiers such as fbclid, gclid, _fbp and _fbc are collected and used only after the same consent.

Optional external content

Maps use tiles from Esri or OpenStreetMap. Before consent, maps are blocked and no request is sent to those providers. When enabled, the provider may receive the IP address and technical request data.

Meta Pixel and Conversions API

Only after marketing consent, Meta Pixel measures page and product views, cart additions and checkout starts and may set identifiers such as _fbp and _fbc. For Stripe-confirmed purchases, the server may send Meta the Purchase event with amount, products and normalised SHA-256 protected customer data. No such events are sent without consent.

Google and Stripe

Google is contacted only when Google sign-in is started. Stripe is opened when the user proceeds to payment. Those providers may use cookies on their own domains under their policies.

Managing preferences

Optional content can be rejected, enabled or disabled at any time through Cookie preferences in the footer. Browser settings can also delete cookies, but removing technical cookies may prevent sign-in, cart or requested functions.