Cookie Protocol & Tracking

In the United Kingdom, cookies and similar technologies may be placed on a device only with consent, save where they are strictly necessary to provide a service you have requested. We honour that distinction. Consent, where sought, is recorded in your browser as the preference regency_cookie_consent.

This protocol sits beside our Privacy & Data Protection notice. You may alter your choice at any time by clearing the stored preference and visiting the shop again, whereupon the banner shall reappear.

These cookies and stores are required for the shop to operate. They do not require consent under PECR, for without them we cannot keep you signed in, protect checkout, or remember the contents of your parcel.

• NextAuth session — cookies such as next-auth.session-token, next-auth.csrf-token, and next-auth.callback-url (or their secure equivalents) so that Google authentication may recognise a patron and keep the archive private.
• Stripe checkout — security and session cookies set by Stripe when you are conveyed to payment, including fraud prevention and the completion of the pecuniary transaction. Those cookies are governed by Stripe upon their own domain.
• The parcel — local storage under regency-vignette-cart so that selected curiosities remain in your parcel between pages.
• Consent record — local storage under regency_cookie_consent so that we do not ask the same question upon every visit.

Choosing “Strictly Necessary Only” permits these operations and no others.

We do not at present place analytical cookies (for example to count visitors or measure the popularity of a vignette). Should we introduce such a protocol, it will appear in this category, remain disabled until you choose “Accept Protocol”, and may be refused without impairing the shop.

We do not at present employ marketing or advertising cookies, nor do we permit third parties to track patrons across this shop for the purpose of serving advertisements. A promotional notice of our own devising may remember, in local storage, that you have dismissed it; it is not used to profile you for advertising networks.

Google, as the identity provider, and Stripe, as the payment processor, may set their own cookies when you use their services. OpenAI receives Composer prompts only when you request a verse, and does not place cookies on this shop. Prodigi receives fulfilment particulars after an order, not through the browser.

Session cookies expire when you close the browser or after a short interval of inactivity. The parcel and consent preferences remain until you clear them. Stripe and Google determine the life of cookies on their own domains.

Most browsers allow you to refuse or delete cookies. Blocking strictly necessary cookies may prevent sign-in, checkout, or the keeping of a parcel. Questions may be directed through Enquiries.