What we actually set
| Name | Purpose | Provider | Duration | Type |
|---|---|---|---|---|
GLITCH |
PHP session ID — keeps your cart and wishlist alive between page loads, and stores the CSRF token for form submits. | Glitch Tavern Ltd (our own server) | Session (cleared when you close the browser) | Strictly necessary |
What we do not set
- No Google Analytics, no Matomo, no Plausible.
- No Facebook Pixel, no Google Ads, no TikTok Pixel.
- No third-party tracker. No heat-mapping. No session-replay.
- No remarketing tags. No conversion pixels beyond Stripe / PayPal (which fire on their own checkout pages, not ours).
Legal basis (PECR + UK GDPR)
The GLITCH cookie is strictly necessary under regulation 6(4) of the Privacy and Electronic Communications Regulations 2003 (PECR) — without it, the cart and CSRF protection do not work. No consent banner is required for strictly necessary cookies.
Clearing the cookie
Delete it in your browser settings. Your cart will reset. You can also use private / incognito mode where no cookie persists past the window.
Full data-handling policy on the Privacy page.
Last updated: 09 Jun 2026
