Cookie policy
Last updated October 2026.
The cookies and browser storage we use
| Name | Stored as | Type | What it does | Kept for | Consent |
|---|---|---|---|---|---|
| mxd_cart_id | Cookie | strictly necessary | Keeps your basket. | 90 days | Not required |
| mxd_session_id | Cookie | strictly necessary | Keeps your basket session consistent so a repeated add cannot create a duplicate. | 90 days | Not required |
| mxd_session | Cookie | strictly necessary | Your signed-in account session. | Until you close the browser | Not required |
| mxd_pkce | Cookie | strictly necessary | Proves the browser that asked for a sign-in link is the one redeeming it. | 15 minutes | Not required |
| mxd_track | Cookie | strictly necessary | Carries a verified order's tracking display after a lookup. | 15 minutes | Not required |
| mxd_return_order | Cookie | strictly necessary | Holds the verified order id while you choose items to return. | 15 minutes | Not required |
| mxd_return_email | Cookie | strictly necessary | Holds the verified email while you choose items to return. | 15 minutes | Not required |
| sonoras_checkout_draft | Cookie | strictly necessary | Keeps your entered checkout details for a few minutes if the form bounces. | 10 minutes | Not required |
| sonoras_nl_state | Cookie | strictly necessary | Shows the newsletter signup result once after subscribing. | 2 minutes | Not required |
| sonoras_nl_hint | Cookie | strictly necessary | Marks that a newsletter signup result is waiting to be shown; holds no personal data. | 2 minutes | Not required |
| sonoras_nl_email | Cookie | strictly necessary | Prefills the checkout email field after a newsletter signup. | 30 days | Not required |
| mxd_cancel_ack | Cookie | strictly necessary | Shows the cancellation confirmation once. | 10 minutes | Not required |
| mxd_details_ack | Cookie | strictly necessary | Shows the saved-details confirmation once. | 10 minutes | Not required |
| mxd_acct_ack | Cookie | strictly necessary | Shows the account-action confirmation once. | 10 minutes | Not required |
| mxd_refund_ack | Cookie | strictly necessary | Shows the refund-request confirmation once. | 10 minutes | Not required |
| mxd_reorder_ack | Cookie | strictly necessary | Shows the reorder confirmation once. | 10 minutes | Not required |
| mxd_rst_ack | Cookie | strictly necessary | Shows the restock-signup confirmation once. | 10 minutes | Not required |
| mxd_return_ack | Cookie | strictly necessary | Shows the return confirmation once. | 10 minutes | Not required |
| mxd_rev_ack | Cookie | strictly necessary | Shows the review confirmation once. | 10 minutes | Not required |
| mxd_unsub_ack | Cookie | strictly necessary | Shows the unsubscribe confirmation once. | 10 minutes | Not required |
| sonoras_consent | Cookie | strictly necessary | Mirrors your analytics choice so the server can apply it. | 1 year | Not required |
| sonoras_consent_v1 | Browser storage | strictly necessary | Remembers your analytics choice on this browser. | Until you change or clear it | Not required |
| sonoras_presence_session_v1 | Browser storage (this tab) | analytics | Identifies your tab for the anonymous “viewing now” count on product pages. | Until the tab closes or analytics is turned off | Required — only used while analytics is on |
| sonoras_evt_once | Browser storage (this tab) | analytics | Remembers that a once-per-basket analytics event (basket viewed, checkout started) was already sent this session, so it is not counted twice. | Until the tab closes | Required — only used while analytics is on |
| sonoras_a11y_reported | Browser storage (this tab) | analytics | Remembers that the one-time accessibility-preferences signal was already sent this session. | Until the tab closes | Required — only used while analytics is on |
| ph_* | Browser storage | analytics | PostHog analytics identifier, kept in browser storage (not a cookie). | Until you withdraw consent or clear browser storage | Required — off until you accept |
| ph_*_posthog | Browser storage (this tab) | analytics | PostHog's per-tab copy of your analytics session — the same ph_<key>_posthog name as the browser-storage row, but in this tab's session store. | Until the tab closes or you withdraw consent | Required — only used while analytics is on |
| ph_*_session_registered_properties | Browser storage (this tab) | analytics | PostHog's list of session-level properties it has already attached to your analytics events this session. | Until the tab closes or you withdraw consent | Required — only used while analytics is on |
| ph_*_window_id | Browser storage (this tab) | analytics | PostHog's identifier for this tab within your analytics session. | Until the tab closes or you withdraw consent | Required — only used while analytics is on |
| ph_*_primary_window_exists | Browser storage (this tab) | analytics | PostHog's marker tracking which open tab is the main one for your analytics session. | Until the tab closes or you withdraw consent | Required — only used while analytics is on |
| __ph_opt_in_out_* | Browser storage | analytics | PostHog's own opt-in/opt-out flag. It sits outside the ph_* prefix, so turning analytics off does not remove it today. | Until you clear browser storage | Required — written by PostHog when you turn analytics on or off (only after you have first accepted) |
Changing your choice
Use the controls above to change your mind at any time — your choices are remembered on this browser. To stop basket-reminder emails, use the unsubscribe page.