Loading…
Loading…
Legal
Last updated: 5 March 2026
What cookies are, which ones Sphelios uses, and how you can control them. Transparency by default; full control over the non-essential ones.
How we keep this minimal
Sphelios uses cookieless analytics (Umami) and minimises cookie usage. We only set cookies that are strictly necessary for the site to function. You can manage your non-essential preferences via the cookie banner at the bottom of any page.
Cookies are small text files placed on your device by a website when you visit. They serve a range of purposes — from keeping you logged in (essential) to helping us understand how our site is used (analytics). Cookies do not contain executable code and cannot install software on your device without your permission.
These cookies are necessary for the website to function and cannot be switched off. They are typically set in response to actions you take — such as setting your privacy preferences, logging in, or adding items to your cart.
These cookies allow us to count visits and understand how visitors move around the site. This helps us improve the way the site works. All analytics data is aggregated and anonymous.
These cookies enable the site to remember choices you make — such as your preferred currency or language — to provide a more personalised experience.
These cookies may be set by advertising partners. They are not currently active on Sphelios. If activated in future, they will only be set with your explicit consent.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| sp_consent | Sphelios | Stores your cookie consent choice (analytics + marketing toggles). | 13 months · localStorage | Essential |
| sp_visitor_id | Sphelios | Anonymous random ID linking your consent record to your visit. Not shared with third parties. | 13 months · localStorage | Essential |
| shh_cookie_consent | Sphelios | Legacy consent key. Read for backwards-compatibility only. | 1 year · localStorage | Essential |
| x-user-country | Sphelios | Geo-routes pricing (€ / ₹ / $). Set from the Vercel x-vercel-ip-country header. | 24 hours · cookie | Essential |
| admin_session | Sphelios | Admin panel JWT — only set after successful /admin/login. | 12 hours · HttpOnly · Secure | Essential |
| next-auth.session-token | Sphelios | User account session for authenticated routes. Only set when you sign in. | 30 days · HttpOnly | Essential |
| next-auth.csrf-token | Sphelios | CSRF protection during sign-in flow. | Session · HttpOnly | Essential |
| next-auth.callback-url | Sphelios | Where to send you after sign-in. | Session | Essential |
| cf_clearance | Cloudflare | Cloudflare Turnstile bot verification. Set when you complete the captcha on a form. | 30 days · cookie | Essential |
| __cf_bm | Cloudflare | Cloudflare bot management. | 30 minutes · cookie | Essential |
| Stripe session cookies | Stripe | Required by Stripe Checkout to process card payments. Only set on the checkout page. | Session | Essential |
| formLoadedAt | Sphelios | Hidden form field used to detect bot-speed submissions. Not a cookie — never leaves the page. | Page session | Essential |
| Umami | Self-hosted Umami | Privacy-friendly aggregate analytics. Cookieless — no persistent storage on your device. | None (cookieless) | Analytics |
| plausible | Plausible Analytics | Privacy-friendly analytics that does not use persistent cookies or cross-site tracking. | None (cookieless) | Analytics |
| shh_currency | Sphelios | Remembers your preferred display currency. | 1 year · localStorage | Personalization |
| shh_locale | Sphelios | Remembers your preferred language / locale. | 1 year · localStorage | Personalization |
On our site:You can update your cookie preferences at any time by clicking “Cookie Settings” in the footer of any page. Your preferences are saved in your browser's localStorage under the key shh_cookie_consent.
In your browser: Most browsers allow you to view, block, or delete cookies through their settings. Note that blocking all cookies will prevent authentication and cart functionality.
We may update this Cookie Policy as we add new features or change our analytics setup. Material changes will be reflected in the “Last updated” date above. We will re-request your consent if we add new non-essential cookie categories.
Questions about our use of cookies? Email us at support@sphelios.com.