Cookie Policy

This page lists the cookies www.neyvella.com puts in your browser, what each one does and how long it lasts. The list is short, because the store sets only what it needs to keep your cart and your account working. We run no analytics cookie, no advertising cookie and no tracking pixel.

You will not see a cookie banner here. A banner exists to collect your consent for things that need consent. We set nothing that needs it, so asking would be theater.

What Cookies Are and Why We Use Them

A cookie is a small text file that a website saves in your browser: Chrome, Safari, Firefox, Edge or another. On the next page you open, the browser sends the file back. That is how a site remembers you from one page to the next.

Without cookies, your cart would empty on every click. The site would have no way to know that the item added two minutes ago is yours and not another visitor’s.

A cookie is not a program. It does not run anything on your device, it cannot read your files and it cannot carry a virus. It holds a name, a value (usually a string of characters that means nothing to a human) and an expiration date.

Browsers give a site two other places to keep information: localStorage and sessionStorage. We treat them by the same rules as cookies, and the one we use is listed below with everything else.

First-party cookies are set by the site you are visiting. Third-party cookies are set by other companies whose content appears inside a page: an ad network, a video player, a traffic measurement tool. We set only first-party cookies. We embed no third-party fonts, no video players, no share or like widgets and no advertising tags. The social icons in our footer are ordinary links to our own profiles: they load nothing from those networks and set nothing until you click them, and once you click, you are on that network and its rules apply.

There is one case where your browser reaches a company other than ours. If a product review shows a picture next to the reviewer’s name, WordPress fetches that picture from Gravatar, a service run by Automattic, using a scrambled form of the reviewer’s email address. When such a picture loads, your browser tells Gravatar your IP address, the page you are on and which browser you use. Gravatar sets no cookie through us, and it learns nothing about your cart, your order or your account. If you would rather it never loaded, block secure.gravatar.com in your browser: the picture disappears, the review text stays.

Strictly Necessary Cookies We Set

These make the store work. They hold your cart, keep your shopping session together, keep you signed in to your account and remember display settings for the accounts that manage the store. All of them are first-party, set by the store software running on www.neyvella.com. None of them follows you to another website and none of them builds a profile.

Cookie	Who sets it	What it does	How long it lasts
woocommerce_cart_hash	www.neyvella.com, first party	Signals that something in your cart changed, so you are not served a stored copy of a page showing an old cart.	Session, until you close the browser
woocommerce_items_in_cart	www.neyvella.com, first party	Tells the site you have items in the cart, so it does not serve you pages prepared for an empty one.	Session, until you close the browser
wp_woocommerce_session_	www.neyvella.com, first party	Links your browser to the cart and order data held on our server. The name ends in an automatically generated string.	48 hours
wordpress_logged_in_	www.neyvella.com, first party	Keeps you signed in to your customer account, so you do not retype your password on every page. Set only if you sign in.	Until you close the browser, and in any case no longer than 2 days. 14 days if you check “Remember Me”
wordpress_sec_	www.neyvella.com, first party	Protects the signed-in session on the encrypted connection, alongside the cookie above, so a session cannot be reused over an insecure one. Set only if you sign in.	Same as the cookie above: 2 days, or 14 days if you check “Remember Me”
wordpress_test_cookie	www.neyvella.com, first party	Checks that your browser accepts cookies at all, so the sign-in page can tell a blocked browser from a wrong password.	Session, and normally deleted as soon as the check is done
wp-settings-, wp-settings-time-	www.neyvella.com, first party	Remember display choices in the WordPress administration screens. Set only for the accounts that manage the store; a customer account never receives them.	1 year

Session cookie names end in a unique string generated when the store is installed. In your browser you will see them as “wp_woocommerce_session_” followed by that string.

One thing we store is not a cookie. Your wishlist is kept in your browser’s localStorage, under the name neyvella_favorite. It is written only when you click a wishlist button and it stays on the device you used: we do not save it to your account, and it does not travel with you to another phone or computer. When you open the wishlist page, your browser sends us the product numbers on the list so that we can send back the product cards. That request appears in our server logs, which we keep for 12 months as the Privacy Policy explains, and it is not tied to your name or to an account. Clearing site data for www.neyvella.com erases the list.

We give you no switch to turn these off, because turning them off would mean turning off the cart, the checkout and your account. Your browser can still block them, and the section below explains what happens if you do.

Analytics and Advertising: Our Current Position

We run no analytics cookie and no advertising cookie. There is no Google Analytics tag, no Meta Pixel, no Google Ads tag, no TikTok pixel, no Pinterest tag and no Microsoft UET tag on this site. We build no remarketing lists and no lookalike audiences. We do not sell or share your personal information, which the Privacy Policy explains in full.

What this means in practice: nothing you look at here follows you to another site, and no company outside ours builds a profile from your visit. We do read our own server logs, which record the pages requested and the address that requested them, because a server cannot answer a request without them. How long we keep those logs is in the Privacy Policy.

This describes today, and it is not a promise about forever. A shop that grows usually wants to know which pages fail. If we ever turn on an analytics or advertising tool, all of the following happen before it runs, not after:

• A notice goes up at the top of this page and on the home page 30 days before the tool starts, and account holders and newsletter subscribers receive an email, exactly as the Privacy Policy describes for a material change.
• This page is updated first, with the exact cookie names, who provides them, what they do and how long each one lasts.
• A way to refuse appears on the site, and refusing takes the same number of clicks, in the same place, with the same visibility, as accepting.
• For visitors in the EEA, the United Kingdom and Switzerland, nothing outside the strictly necessary list is set until they have answered.
• Everywhere else, the refusal is on the page from the first day the tool runs, and nothing outside the strictly necessary list is set after you have refused.
• If the tool would count as selling or sharing personal information under state law, a link named “Your Privacy Choices”, with the official blue and white icon next to it, appears in the footer of every page, as Cal. Civ. Code 1798.135(a) and 11 CCR 7013 and 7015 require, and we honor the browser signal described below.

Do Not Track Signals

Some browsers can send a “Do Not Track” header with every request. California law, Cal. Bus. and Prof. Code 22575(b)(5) and (b)(6), requires us to tell you how we treat it, and whether anyone else watches what you do here over time and across other sites. A clear negative answer is allowed. Saying nothing is not.

We do not respond differently to a Do Not Track header. The industry never agreed on what a site must do when it receives one, so the signal has no defined effect. At our store it also has nothing to act on: we do not track you across other sites, and no third party collects personally identifiable information about your activity on www.neyvella.com over time or across other websites.

Global Privacy Control

Global Privacy Control, or GPC, is the signal that replaced Do Not Track in practice. Some browsers send it on their own, and browser extensions add it to the rest. Technically it is an HTTP header, Sec-GPC: 1, together with a property the browser exposes to the page, navigator.globalPrivacyControl. Unlike Do Not Track, several state privacy laws treat it as a legally valid request to opt out of the sale or sharing of your personal information.

Today that signal has nothing to switch off here, because we neither sell nor share personal information. Sending it costs you nothing and changes nothing you would want kept.

If that ever changes, we honor the signal automatically. We will not ask you to create an account, sign in, confirm by email or prove who you are before we act on it, and we will show a visible confirmation on the page that your signal was received and honored, as California requires from January 1, 2026 under 11 CCR 7025(c)(6). A signal you have to defend is not a signal.

How to Control Cookies in Your Browser

Your browser, not this site, is where cookies are viewed, deleted and blocked. Menu names differ between browsers and between versions, so here is the path rather than the exact wording.

1. Open your browser’s settings. On a phone this usually sits in the menu next to the address bar.
2. Find the privacy and security section.
3. Look for the entry about cookies and site data. If you cannot find it, type “cookies” into the search box inside the settings.
4. From there you can delete everything, delete the data for one site only, or set rules for what is allowed in the future.

To remove only our cookies, open the list of stored site data and search for www.neyvella.com. Deleting them signs you out, empties your cart and erases your wishlist. That is the expected result, not a fault.

Every browser also offers a private window. Cookies are still set normally while you browse in one, and they are deleted when you close it.

Browsers let you block cookies as well. Blocking third-party cookies costs you nothing here, since we set none. Blocking all cookies, including the strictly necessary ones, breaks the cart and the checkout on this site and on every other online store, because a server has no other way to tell one visitor’s cart from another’s.

Visitors in the EEA, the United Kingdom and Switzerland

We ship worldwide, so this section applies to you directly if you are reading this from Europe.

Article 5(3) of Directive 2002/58/EC, and regulation 6 of the Privacy and Electronic Communications Regulations 2003 in the United Kingdom, require a site to get your consent before it stores information on your device or reads information already stored there. Both exempt storage that is strictly necessary to provide the service you explicitly requested. The United Kingdom now exempts a little more, under Schedule A1 of those Regulations, inserted by the Data (Use and Access) Act 2025: audience statistics used to improve the site, and settings that adapt how the site looks and works for you, on condition that we describe them and give you a way to object. We use neither today. If we ever do, visitors in the United Kingdom get that description and that objection button before either one runs.

Everything in the table above falls inside the strictly necessary exception in all three places. Holding your cart is the service you asked for when you added an item to it. We store nothing outside that exception, which is why you are asked for nothing. If we ever add something that falls outside it, visitors in these countries are asked first, and the tool stays off until they answer.

Your data protection rights are set out in the Privacy Policy. In the EEA and the United Kingdom that includes the right to lodge a complaint with the supervisory authority where you live. In Switzerland, the Federal Data Protection and Information Commissioner can be notified and decides on its own whether to investigate, and the courts remain open to you.

If This Changes

When what we store in your browser changes, this page changes first, and the date below changes with it. We do not add a cookie and describe it afterward.

Changes that affect what we collect about you are also announced through the Privacy Policy, which explains how we tell you about material changes. If you want to check whether anything moved, the date is the fastest way to see it. Last updated: 10 septembrie 2026.

How to Contact Us

www.neyvella.com is operated by Neyvella LLC. For questions about cookies, about what is stored in your browser, or about your data, write to contact@neyvella.com. For anything else, use contact@neyvella.com or the contact page, where the phone number and the hours we answer it are kept up to date.

Formal requests about your personal information, and the deadlines we work to when we answer them, are covered in the Privacy Policy.