Cookie Policy

Last Updated: 8th of August 2026

This Cookie Policy explains what YourCarpet.com stores in your browser, what we measure when you visit, and what we deliberately do not do. It is written to be read in full rather than skimmed, because the honest answer is short: we store what the shop needs to work, we count page views without identifying you, and Stripe protects your payment at checkout.

What are cookies

Cookies are small units of data that a website asks your browser to keep on your device. They are what lets a site remember something from one page to the next — that your cart holds three rugs, that you would rather see prices in euros, that you are signed in.

Browsers offer two other ways to store data for a site — local storage and session storage — and European law treats all three the same way. This matters here because of a fact worth stating plainly: for an ordinary visitor, this site sets no cookies of its own at all. Everything we keep, we keep in local or session storage instead, and the only cookies you can end up with come from Stripe when you pay. The table below says which is which in every case.

Everything we store in your browser

This is the complete list of what our own pages store, and of the other companies that can store something through them. If it is not in this table, our pages do not put it there. The one thing we cannot itemise for you is what Stripe or Google keep inside their own frames once those load — that is their doing, under their notices, and the last section tells you where to read them.

What it is for	What it does	Who sets it	How long it lasts
Your cart and your preferences	Remembers the rugs in your cart and the choices you make while browsing: currency, measurement units, delivery country, a delivery address you have saved, your shoe-size scale, which floor backdrop you picked for the rug visualiser, and whether you prefer the light or dark theme. Held in your browser's local storage rather than in a cookie. Your delivery country is guessed once, on your first visit, from the country our host reads from your connection — a two-letter code, nothing more, and you can change it whenever you like. A saved address stays on your device; if you type an address into the site, the part you have typed is sent through our own server to an address-lookup service so it can offer suggestions, but your IP address is not.	YourCarpet.com (first-party)	Until you clear your browser data or remove the items yourself. To erase a saved address, open the delivery dialog, empty every field and save.
Your checkout details, while you are ordering	Keeps what you have typed into the checkout form — your name, contact details, delivery and billing address, any company or VAT details, and the free-text note if you leave one — so that reloading the page does not make you start over. The same details are held alongside the open payment session, so that moving between the checkout steps does not accidentally start a second order and put a second hold on the same rug. Both live in session storage, on your device.	YourCarpet.com (first-party)	Discarded when you close the tab, and cleared as soon as the order goes through. The payment session is treated as stale after 25 minutes.
A booking you have started for a cleaning or a valuation	If you begin a cleaning booking or a rug valuation, the form keeps what you have entered — your name, email, phone, the collection address, and any notes and measurements per rug — so that you can leave the page, or come back from the payment screen, without retyping it. Unlike the shop checkout, nothing clears this automatically when you are done: it lasts until you close the tab.	YourCarpet.com (first-party)	Until you close the tab.
A photo of your own floor, if you choose to add one	Our rug visualiser can show a rug on a photo of your actual floor. That photo is held in your browser and is never uploaded — not to us, not to anyone. It stays on your device, which also means clearing your browser data is the one thing that will lose it for good.	YourCarpet.com (first-party)	Until you replace it or clear your browser data.
Counting page views	Tells us which pages people read, through Vercel Analytics. It sets no cookie and stores nothing at all in your browser, and no identifier for you is created on your device. Each page view reports the page address, the time, and the address of the site that referred you, if any; we strip identifying details out of that address first, so the confirmation link for an order never reaches it. Vercel also works out your approximate country, browser and device type from the request itself, and states that it does not tie the measurements to your IP address.	Vercel Analytics, requested from our own domain	Nothing is stored in your browser.
Taking payment and stopping fraud	Loads Stripe's secure payment fields and lets Stripe judge whether a payment is genuine. Stripe sets two cookies — __stripe_mid, which identifies the device, and __stripe_sid, for the session — and because they are set on our domain you will see them listed under yourcarpet.com rather than under Stripe's name. To assess risk, Stripe collects characteristics of your browser and device and indicators of how the page is being used, and it may show a bot check inside its own frame. This is how stolen-card fraud is caught. It does not happen while you browse the shop: Stripe's scripts load only once you press through to checkout, though your browser does open an early connection to Stripe while your cart is on screen so that the payment step is quick.	Stripe	Stripe sets them, not us: about a year for the device cookie, thirty minutes for the session one.
Showing our shops on a map	Our contact and store pages have a button that opens a Google Map of the shop. Nothing from Google loads unless you press it. Once you do, Google receives your IP address, your browser details and the page you came from, and can store data inside its own map frame under Google's terms rather than ours. Closing the map stops the connection, though anything Google has already stored stays until you clear your browsing data. If you would rather not, the full address is written out on the page and works just as well in any map app.	Google Maps — only after you open a map	Set by Google inside its own frame, not by us.
Small technical odds and ends	Two housekeeping entries with no personal data in them: whether your device offered Apple Pay or Google Pay last time, so the checkout does not reserve space for buttons you will not see; and a one-off marker that lets a page reload itself once, and only once, if we have just deployed an update underneath you.	YourCarpet.com (first-party)	The wallet note persists; the reload marker dies with the tab.
Keeping our own staff signed in	If you are one of our administrators, signing in sets a session cookie and a privilege-free marker that means "this browser has signed in before". An administrator's browser also remembers their place in the product-review queue, and, if they switch on order alerts, registers a notification worker. None of this is ever set for customers or ordinary visitors, and no visitor to this site is given a service worker of any kind.	YourCarpet.com (first-party)	The session cookie lasts twelve hours and survives closing the browser; the sign-in marker lasts a year.

What we do not do

These are the things people most often want to know, so we would rather state them outright than let the silence imply otherwise:

No advertising or marketing cookies. We run no ad network, no retargeting, and no conversion pixels.
No Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel or anything comparable — none of them appear anywhere in this site's code. Apart from counting page views, the only other thing we record is a crash report when a page breaks in your browser, and those deliberately hold no IP address, no cookies and no part of the web address after the question mark.
No cross-site tracking and no profiling. We do not follow you to other sites, we build no advertising profile, and we cannot see where you go after you leave.
No fingerprinting by us. We do not probe your fonts, canvas or hardware to identify your device. Stripe does assess device characteristics at checkout, which is disclosed in the table above and exists to stop card fraud.
We never sell your personal data, and we never hand it to anyone for advertising. We have no arrangement to do either. Running a shop does mean sharing what is necessary with the companies that process payments, store orders and deliver goods and email — every one of them is named in our Privacy Policy.
No third-party scripts, typefaces or images while you browse. Every script, typeface and photograph on our shop pages is served from yourcarpet.com — product photographs are fetched by our own server and passed on to you, so the company that stores them never sees your IP address. Other companies enter the picture in only two places, both in the table above and both by design: Stripe once you press through to checkout, which may bring its own bot check and, if you use a wallet, involves Apple or Google; and Google Maps, only if you choose to open a store map.

Managing what is stored

You can remove all of it whenever you like from your browser's settings: the same controls that clear cookies also clear local and session storage for a site, and most browsers can block a site's storage altogether.

Two things are worth knowing before you do. Clearing this site's storage will empty your cart, forget your currency, units and saved address, and permanently delete any photo of your own floor you uploaded — that photo exists nowhere else, so it cannot be recovered. And blocking Stripe's cookies will stop checkout from working, because Stripe can no longer confirm the payment is legitimate; everything else on the site will carry on as normal. If all you want is to remove the saved name and address, open the delivery dialog, clear every field and save — that erases it without touching anything else.

Where to read the other companies' notices

Other companies can store or receive something through this site, and you are entitled to read their side of it rather than only ours. Stripe brings its own bot check with it, and paying by Apple Pay or Google Pay involves Apple or Google as well:

Stripe (opens in a new tab) — payments and fraud prevention, on the checkout page.
Vercel (opens in a new tab) — hosting and our page-view counting.
Google (opens in a new tab) — only if you open a store map.

our own Privacy Policy sets out everything we do with personal data, who processes it for us, and how to ask us to delete it.

Why there is no cookie banner

You will not see a cookie banner here, and that is a deliberate decision rather than an oversight. European law requires your consent before a site stores anything on your device that is not strictly necessary for the service you asked it for. We have gone through that test row by row. Your cart, your checkout details and the housekeeping markers are what make the shop work. Your currency, units, theme, floor backdrop and saved address are choices you made yourself, and they never leave your device unless you order. Our page-view counting stores nothing on your device at all, so it never engages the rule. Stripe's cookies are needed to take a payment and stop fraud, and they appear only when you go to pay.

The one item we will not pretend is a choice you made is your delivery country, which we guess once on your first visit so the shop can tell you whether we ship to you. It is a two-letter code, it identifies nobody, and you can change it whenever you like — but if you would rather we had not, that is fair, and clearing this site's storage removes it. Everything else we would rather earn your trust by not collecting than ask you to click past a banner about collecting it. If we ever adopt something that does need consent, we will ask before storing anything, and this page will say so first.

Changes to this policy

We may update this Cookie Policy from time to time. Changes take effect immediately upon posting to this page.

Contact Us

Email: info@yourcarpet.com
Phone: +34 644 529 368
Support Hours: Mon–Fri 10:00–20:00, Sat 10:30–15:00, Sun closed (CET/CEST, Madrid time)
Response Time: Within 1 business day