Client care
Cookies & analytics
What this boutique stores on your device, who measures it, and how to change your choice. This page covers measurement and storage. It is not a complete privacy policy for the house.
Your choice
Acceptlets us set an analytics cookie and record browsing sessions, so we can see where an order is abandoned and why. Anything you type into a field is masked in those recordings, and card details are never in our page to begin with — they are entered inside Stripe’s own payment frame.
Decline is a real decline. Nothing is written to your device for measurement: no cookie, no local storage, no session storage, no recording. Visits are counted cookie-free, by a daily-rotating server-side hash that cannot be traced back to you or followed from one day to the next.
Until you answer, the analytics tool is not loaded at all. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a decline and never ask.
Stored on your device
| st0pevil_cart_v1 | Local storage | Your shopping bag, so it survives a reload. Strictly necessary — the shop cannot work without it. |
| st0pevil_analytics_consent | Cookie · 1 year | Your answer to the banner, so you are not asked again. Strictly necessary; it exists only to record a choice. |
| st0pevil_sid, st0pevil_funnel | Session storage | A random tab identifier and the steps you took in this visit (viewed a piece, added to bag, opened checkout), used by our own first-party measurement. Cleared when you close the tab, never shared with anyone, never joined to your order. |
| st0pevil_preferred_source_v1 | Local storage | Remembers that you dismissed the “Follow the house on Google” prompt, so it does not return. |
| PostHog cookie | Cookie · after Accept only | Identifies this browser to the analytics tool so a funnel can be followed across pages. Never set if you decline or ignore the banner. |
| st0pevil_atelier | Cookie · staff only | A signed session for the house’s own operator panel. Never set for a customer. |
Who measures this boutique
- Our own measurement (first party). Funnel steps — a piece viewed, a bag opened, a checkout started or abandoned — are sent to this domain and nowhere else, with the page path, the referring site and your browser name. No account, no profile, and never your name, address or email.
- PostHog Cloud EU (Frankfurt, Germany). Product analytics and, after Accept, session replay. Hosted on European infrastructure in Frankfurt, where IP capture is off by default. Loaded only once you have answered the banner.
- Microsoft Clarity (United States). Heat maps and frustration signals. If it is switched on for this boutique at all, its script is injected only after you press Accept — never before, and never if you decline.
- Stripe.Payment. The card form is Stripe’s own, hosted by Stripe inside the page; card numbers never reach ST0PEV!L. Stripe sets its own storage on the payment step, which is strictly necessary to take a payment.
- Google.The “Follow the house on Google” button loads a small script from Google on the pages that show it. It is a button, not measurement, and it is never loaded on the bag, the checkout or the payment page.
What is never sent to a measurement tool
Your name, email address, telephone number, billing or shipping address, and your card details. Order references are one-way digests, not readable identifiers. Query strings are stripped from every address before it is sent to an outside tool, so a payment link or an order reference in the address bar never leaves this domain. When a completed sale is counted, it is counted by our server from the payment confirmation — not from your browser.
Questions
Write to the house through Contact and we will answer, including for a request to delete what has been measured about your visits.