Cookie policy

What a cookie is

A cookie is a small text file that a website asks your browser to store and hands back on your next request. It is how a site can remember that the basket you filled a minute ago is yours, or that you are still signed in after moving between pages.

We also use your browser's local storage, which works similarly but keeps the data on your device until it is cleared rather than sending it with every request. Where this page says "cookies", it means both unless it says otherwise.

Why we use them

• Strictly necessary — the site cannot work without these. They keep your basket attached to you before you sign in, keep you signed in afterwards, and protect forms against cross-site request forgery. They are never used for advertising.
• Preferences — remember choices you have already made, so the site does not ask twice.
• Analytics — tell us in aggregate which pages and products people look at and where journeys break, so we can fix what is not working.
• Marketing — measure whether an advertisement led to a visit or an order, and support relevant advertising on other platforms.

The cookies we set ourselves

• `guest_cart_id` — strictly necessary. Attaches your basket to your browser before you sign in, so it survives a refresh. Set by our server and not readable by page scripts.
• Sign-in session cookies — strictly necessary. Created when you log in and cleared when you log out. They are how the site knows an order, an address or a saved item is yours.
• `salextra-analytics-session` — analytics. A random identifier that groups the pages of a single visit together so we can see a journey rather than isolated hits. It carries no name, email or phone number.
• `sx_click` — marketing. Records the advertising click that brought you here — the click identifier and any campaign tags in the link — so that an order placed afterwards is attributed to the right campaign. Stored for up to 90 days.

Cookies set by others

Some measurement and advertising tools set their own cookies from their own domains. Which of them run depends on the tags this store has switched on; where a service is off, its cookies are not set.

• Google Analytics 4 and Google Tag Manager — audience and journey measurement, and the container we use to manage tags. Google's own cookies, typically `_ga` and `_ga_<id>`.
• Meta Pixel — measures conversions from Facebook and Instagram advertising and supports remarketing. Meta's own cookies, typically `_fbp` and `_fbc`.

These cookies are set by the third party under its own privacy policy, and we do not control how long they last or what else that company does with them. Payment is completed on your payment provider's own page — anything set there is governed by that provider, not by us.

Other storage on your device

The following are kept in your browser's local storage rather than sent to us as cookies. All of it stays on the device you are using, and clearing your browser data removes it:

• Products you have recently viewed, and your recent search terms.
• The analytics session identifier described above.
• The delivery area you last checked on a product page, so the estimate is ready next time.
• A record of on-site messages you have already seen or dismissed, so you are not shown the same one repeatedly.

Controlling cookies

We do not currently show a cookie consent banner. Analytics and marketing cookies are set when you use the site. We would rather tell you that plainly than imply a choice the site does not yet offer — the controls below are the ones that genuinely work today.

• Every major browser lets you see what a site has stored, delete it, and block or restrict future cookies. In Chrome, Safari, Firefox and Edge this sits under privacy or site settings.
• Blocking strictly necessary cookies will stop the basket and sign-in from working. That is not a setting we can work around.
• Google publishes an opt-out for Analytics, and your Facebook or Instagram account settings control Meta's advertising preferences.
• Most browsers also offer a private or incognito window, which discards all of this when you close it.

Your browser's "Do Not Track" signal is not currently acted on, because there is no agreed standard for what a site should do when it receives one. We say so rather than list a control we do not honour.

Changes to this policy

We update this page when the tools we use change. The date at the top is the day the wording last changed — it is not a build date, so if it has not moved, nothing here has.

How we handle the personal information behind these cookies is set out in our Privacy Policy & Terms.