Introduction
Cookies are alphanumeric strings, pixels, tags, and analogous technologies that remember states between HTTP requests. Movewywashing.world uses them to secure transactions, honor privacy preferences, and—when you approve—measure marketing performance.
The policy complements our Privacy Policy. For questions email talk@movewywashing.world or write to Sarphatistraat 72, 1018 EX Amsterdam, Netherlands.
Scope of application
This document covers visitors to https://movewywashing.world and linked subdomains under our control. Embedded content from payment processors may issue their own cookies; consult their notices during checkout.
Denying optional cookies never removes access to mandatory product disclosures or adverse-event reporting channels required by food law.
Detailed categories
Strictly necessary
Session continuity, cart integrity, bot mitigation, load-balancing tokens, and storage of your CMP choices. These are exempt from opt-in under ePrivacy implementing acts when strictly tied to a service explicitly requested.
Functional preference
Optional UI memories such as collapsed FAQ states or language hints when we rollout localized copies. Disabled by default unless you toggle them in future preference centers.
Analytics
Pseudonymous measurements of navigation funnels, scroll depth, and consent interaction rates. IP truncation may occur before servers outside the EEA receive events.
Marketing
Attribution identifiers for education campaigns about new Lumora batches. No automated profiling produces legal effects; creatives remain generic unless you separately sign up for newsletters.
Lawful bases under GDPR
Necessary cookies rely on Article 6(1)(f) legitimate interests balanced against fundamental rights, documented in our data protection inventory. Analytics and marketing cookies activate only after Article 6(1)(a) consent captured through the banner or preference modal.
Withdrawal is as easy as granting consent: reopen Cookie settings, disable the category, and press save. Previous processing remains lawful; future reads stop unless reauthorized.
Representative signals
- lumora_cmp_v1 — stores JSON consent snapshot (necessary, analytics, marketing) for twelve months.
- cart_guardian — tamper token for checkout sessions; session length plus two-hour slack.
- session_trace — diagnostic identifier only when you opt into “support mode” during a ticket.
Vendor-specific names adjust when we rotate tools; material changes trigger a banner re-prompt.
Consent proofs
We log timestamp, banner version, anonymized session key, and granular toggles. Logs support supervisory audits and publisher accountability under IAB Transparency frameworks where adopted.
Third-party processors
Infrastructure partners sign Article 28 processing agreements. When a vendor stores data in the United States we rely on EU Commission adequacy decisions or Standard Contractual Clauses with supplementary technical measures.
Browser-level controls
Major browsers let you block third-party cookies, delete on exit, or send Global Privacy Control signals. We honor GPC as a request to deny sale/sharing where Colorado or similar laws apply to our US-facing experiments.
Review cadence
Legal and engineering teams reconcile this Policy quarterly. The dynamic stamp below always mirrors the calendar day you loaded the document, while archived PDF snapshots are available upon authenticated merchant request.
Questions