Cookie Policy — Satmart

1. What cookies are

Cookies are small text files placed on your device by the websites you visit. A cookie typically contains the name of the site that set it, a value, and an expiry. Browsers send the cookies they hold for a given site with every request to that site, which is how a website "remembers" you between page loads.

We also use a small number of similar technologies, including localStorage (a built-in browser storage area) and pixel-free first-party analytics. Where this Policy refers to "cookies", it includes these similar technologies unless we say otherwise.

2. Categories of cookie we set

We classify the cookies we set into four categories. Strictly necessary cookies cannot be switched off; the other three categories are managed through the Cookie preferences widget.

2.1 Strictly necessary

These cookies are essential to the operation of the Services. They include the session cookie used to keep you signed in, the CSRF token used to protect form submissions, the cart cookie that remembers items in your basket between visits, and the cookie-preferences cookie itself.

authjs.session-token (or equivalent): Holds the encrypted session for signed-in users. HttpOnly, Secure, SameSite=Lax.
nm_csrf: CSRF protection token issued at first form load.
nm_cart: Identifier for the cart held against your Account.
nm_consent: Records your choices in the Cookie preferences widget.
nm_src: Records the referring domain for our first-domain attribution (cleared after 30 days).

2.2 Preferences

These cookies remember choices you make that customise the Services (for example, language, currency, and theme). Switching them off does not break the Services but each visit starts at the defaults.

2.3 Analytics

These cookies help us understand how the Services are used in aggregate (which pages are popular, which steps of the checkout cause drop-off, error rates). We use a privacy-respecting first-party analytics setup that does not share personal data with third-party advertising networks and does not build cross-site profiles.

2.4 Marketing

We do not currently run third-party advertising trackers and do not set marketing cookies. If we change this in the future, we will update this Policy and the Cookie preferences widget so you can opt in or out as required by applicable law.

3. How to manage cookies

You can manage non-essential cookies at any time using the Cookie preferences widget, accessible from the link in the footer or directly via the in-page anchor. You can also control or delete cookies through your browser settings; instructions are available in the help pages of each major browser. Disabling strictly-necessary cookies through the browser will prevent core features — including sign-in and checkout — from working.

4. Do Not Track and Global Privacy Control

We honour the Global Privacy Control (GPC) signal where it is presented by your browser: when GPC is set to "on" we treat the visit as having declined analytics and marketing cookies, regardless of any prior choice stored in nm_consent. We do not currently respond to legacy "Do Not Track" headers because they no longer have a consistently defined meaning across browsers.

5. Contact

Questions about this Policy can be sent to [email protected].