This policy explains what cookies the FlymyMall marketplace stores on your device, what each one is for, and how you can control them.
The short version
We use strictly necessary cookies only. The marketplace loads no advertising networks, no analytics trackers and no social media pixels, so nothing here follows you around the web or builds a profile of you. There is no consent banner because there is nothing optional to consent to.
Cookies we set
These are set by FlymyMall and are required for the site to function at all.
- Session cookie: keeps you signed in as you move between pages. Without it, every page would treat you as a new visitor and you could not use your cart, your orders or your account. It expires after a period of inactivity and when you sign out.
- XSRF-TOKEN: a security cookie. It lets us confirm that a request to change something on your account genuinely came from you, and not from another site acting in your name. This protects against cross-site request forgery.
Both are restricted to FlymyMall with a SameSite=Lax policy, meaning they are not sent when another website links into ours. In production both are transmitted over HTTPS only.
Cookies set by our payment provider
When you reach the payment step, we load Stripe's payment library so your card details can be entered directly into Stripe's own secure fields. Card numbers never touch FlymyMall's servers.
Stripe sets its own cookies at that point, which it uses to detect and prevent fraudulent payments. These are loaded on the checkout and order payment pages only, not while you are browsing. Stripe's handling of that data is governed by its own privacy policy.
What we do not use
- No advertising or retargeting cookies.
- No analytics or behavioural measurement cookies.
- No social media tracking pixels.
- No cookies that are sold or shared with data brokers.
Controlling cookies
Every major browser lets you view, block and delete cookies through its settings. Because the cookies described above are strictly necessary, blocking them has a direct consequence: you will not be able to sign in, and any action that changes your account will be rejected as a security precaution. Browsing the public catalogue will still work.
Clearing your cookies signs you out of FlymyMall on that device. It does not delete your account or any of your orders.
Changes to this policy
If we ever introduce a cookie that is not strictly necessary, we will ask for your consent before setting it and update this page first.
Questions
If anything here is unclear, contact us through the support centre and we will explain it properly.