Effective 24 September 2026
Cookie Policy
Every cookie and storage key this site sets, listed by name. There are fewer than you are probably expecting, and none of them follow you anywhere.
What cookies are
A cookie is a small file a website asks your browser to keep, so the site can recognise you on the next page — that is how staying signed in works. Browsers also offer local storage and session storage, which do a similar job for data that never needs to be sent to a server.
This page covers all three, because listing only cookies would be a technically true way of leaving things out.
Everything this site sets
The complete list. If something is not here, this site does not set it.
Essential — needed for the site to work
next-auth.session-tokenCookieKeeps you signed in. Set httpOnly and SameSite=Lax, and marked Secure over HTTPS, so it cannot be read by scripts.
Lasts: Until you sign out or the session expires
next-auth.csrf-tokenCookieProtects forms against cross-site request forgery — it is what stops another site submitting actions as you.
Lasts: Session
next-auth.callback-urlCookieRemembers which page to return you to after signing in.
Lasts: Session
azafah_guest_cartCookieHolds the cart of someone not signed in: which fragrances and how many. Read only by our server (httpOnly), and moved into your account when you sign in.
Lasts: 30 days
azafah_guest_wishlistCookieHolds the fragrances you saved with the heart while not signed in. Read only by our server (httpOnly), and moved into your account when you sign in.
Lasts: 90 days
These cannot be switched off without breaking sign-in and checkout, which is why the cookie notice does not offer to disable them.
Convenience — stored in your browser only
cookie-consentLocal storageRecords that you answered the cookie notice, so it is not shown on every page. Stays in your browser.
Lasts: Until you clear site data
recentlyViewedLocal storageThe fragrances you have looked at, so the site can show them again. Never leaves your browser.
Lasts: Until you clear site data
giftOptionsSession storageHolds gift-wrapping choices between the cart and checkout.
Lasts: Until the tab is closed
Everything in the second table stays on your device. It is never sent to us, never shared, and clearing your browser data removes it entirely.
What we do not use
This site runs no advertising pixels and no cross-site trackers. There is no Google Analytics, no Meta pixel, no tag manager and no session recorder. We do not build an advertising profile of you, and we have nothing of that kind to sell or share.
To see which pages are visited and how fast they load, we use Vercel Web Analytics and Speed Insights. They set no cookie, store nothing in your browser, do not identify you and do not follow you to other sites. Account pages are not counted, and anything personal in a page address, such as a password reset link, is removed before it is sent.
If that ever changes, this page changes first, and the cookie notice will ask before anything non-essential is set.
Third-party cookies
One third party sets cookies during a purchase: Stripe, which processes payment and uses them for fraud prevention on the checkout. That is a necessary part of taking a card payment safely, and Stripe's own privacy notice governs what it does with them.
No other third party sets a cookie through this site. What each processor receives is listed in the Privacy Policy.
How to control them
Every browser lets you view, block and delete cookies and site data, usually under Privacy or Site settings. You can clear everything this site has stored at any time, and nothing here will stop you.
Blocking essential cookies will sign you out and prevent checkout from completing — not as a penalty, but because the session token is what keeps a basket attached to you. Clearing site data also resets the cookie notice, so it will ask again on your next visit.
Changes to this policy
The effective date above is set by hand and changes only when this policy genuinely does. Questions go to support@azafahusa.com.