Cookie Policy
& Settings
Cookies are small text files placed on your device — computer, tablet, or smartphone — when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to the website owner about how visitors use the site.
Cookies are not programs and cannot carry viruses or malware. They cannot read other data from your device or access files stored on it. A cookie can only be read by the website that created it.
In addition to traditional cookies, we also use similar technologies including:
- Local storage — browser-based storage used to retain session preferences such as your currency selection or recently viewed products.
- Session tokens — temporary identifiers that keep you logged in to your account during a browsing session.
- Pixel tags — small invisible elements embedded in pages that help us understand page engagement.
All references to "cookies" in this policy also apply to these similar tracking technologies unless stated otherwise.
We categorise all cookies used on vaultandhide.com into three types. Only essential cookies are set automatically. All other categories require your consent, which you can give or withdraw at any time.
The tables below list all cookies currently in use on vaultandhide.com. We audit and update this list every 90 days. Last audited: 1 April 2026.
| Cookie name | Set by | Purpose | Duration |
|---|---|---|---|
| _vh_session | 1st party | Maintains your active session — keeps you logged in and your cart intact as you browse. | Session |
| _vh_csrf | 1st party | Cross-site request forgery protection. Ensures form submissions originate from our site. | Session |
| _vh_cart | 1st party | Stores the contents of your shopping cart so items are not lost if you navigate away. | 30 days |
| _vh_currency | 1st party | Remembers your selected currency so prices display correctly throughout your session. | 90 days |
| _vh_cookie_consent | 1st party | Records your cookie consent choices so we do not ask you again on every visit. | 12 months |
| __stripe_mid | 3rd party | Set by Stripe to prevent fraud during payment processing. Required for checkout to function. | 12 months |
| __stripe_sid | 3rd party | Set by Stripe to maintain a secure payment session during checkout. | Session |
| Cookie name | Set by | Purpose | Duration |
|---|---|---|---|
| _vh_size_pref | 1st party | Remembers your size selection so it is pre-filled on product pages during future visits. | 90 days |
| _vh_recently_viewed | 1st party | Tracks the products you have recently viewed to display them in the recently viewed section. | 30 days |
| _vh_wishlist | 1st party | Persists your wishlist items between visits if you are not logged in to an account. | 30 days |
| Cookie name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | 3rd party | Google Analytics. Distinguishes unique users by assigning a randomly generated number. Data is anonymised and aggregated. | 2 years |
| _ga_* | 3rd party | Google Analytics 4. Persists session state and campaign data for traffic source reporting. | 2 years |
| _gid | 3rd party | Google Analytics. Distinguishes users across a 24-hour window for daily unique visitor counts. | 24 hours |
Some cookies on our site are set by third-party services we integrate with. These providers have their own privacy policies governing how they process data. We have selected providers who meet GDPR standards.
| Provider | Category | Data location | Privacy policy |
|---|---|---|---|
| Google Analytics (GA4) | Analytics | USA (SCCs in place) | policies.google.com |
| Stripe | Essential | USA (SCCs in place) | stripe.com/privacy |
SCCs = Standard Contractual Clauses, the legal mechanism approved by the European Commission for transferring personal data outside the EEA. We are not responsible for the content or privacy practices of third-party websites linked from our site.
You can control and delete cookies directly through your browser settings. Please note that disabling essential cookies may prevent parts of our website from functioning correctly — in particular, checkout and account login.
For opt-out tools specific to advertising cookies, you can also use these industry platforms:
Some browsers allow you to send a "Do Not Track" (DNT) signal to websites you visit, indicating that you do not wish to be tracked. There is currently no universally agreed standard for how websites should respond to DNT signals.
At present, vaultandhide.com does not alter its data collection practices in response to DNT signals. Our cookie consent banner provides you with a more granular and reliable way to control tracking — one that we honour consistently. We continue to monitor developments around the Global Privacy Control (GPC) standard and will update this policy if our approach changes.
Our website is not directed at children under the age of 16, and we do not knowingly collect personal data — including through cookies — from anyone under 16. If you are a parent or guardian and believe your child has provided personal data through our website, please contact us at [email protected] and we will delete the relevant data promptly.
We may update this cookie policy from time to time to reflect changes in the cookies we use or changes in applicable law. When we make material changes, we will:
- Update the "last reviewed" date at the top of this page.
- Display a notification banner on vaultandhide.com for 30 days following the update.
- Send an email notification to registered account holders where the change is significant.
- Reset the cookie consent prompt if the changes affect the categories or purposes of cookies we set.
Previous versions of this policy are available on request by emailing [email protected].
If you have any questions about this cookie policy, want to understand how a specific cookie works, or wish to exercise your data rights under GDPR or UK PECR, please contact our privacy team.
We aim to respond to all cookie and privacy enquiries within 5 business days. For GDPR data subject requests (access, erasure, portability), our statutory response window is 30 days from receipt of a valid request.