Cookie Policy
Last updated: 5 May 2026
This Cookie Policy explains what cookies are, which ones we use on dearmiloshop.com, and how you can control them. It sits alongside our Privacy Policy.
What's a cookie?
A cookie is a small text file stored on your device. We also use similar technologies — localStorage, pixels, and SDKs. We call all of these "cookies" in this policy. Some are set by us (first-party); some are set by third parties (e.g. Stripe's checkout or TikTok's tracking pixel).
Your choices
When you first visit Dear Milo, you'll see a cookie banner. You can Accept all, Reject all, or Customise each category individually. You can change your preferences any time via the "Cookie settings" link in the footer. We re-ask every 12 months.
Strictly necessary cookies cannot be turned off — without them the site can't function.
The cookies we use
Strictly necessary (always on)
- dearmilo_session — Supabase Auth. Keeps you logged in. Expires 1 hour (refresh token: 7 days).
- dearmilo_consent — Dear Milo. Remembers your cookie choices. Expires 12 months.
- __stripe_mid, __stripe_sid — Stripe. Fraud prevention at checkout. Expires 1 year / 30 minutes.
Functional (consent required)
- dearmilo_locale — Remembers your language and currency preference. Expires 1 year.
Analytics (consent required)
- _ga, _ga_* — Google Analytics 4. Aggregate traffic analytics. Expires 13 months.
- vercel_analytics_* — Vercel page-view metrics. Session.
Marketing & advertising (consent required)
- _ttp, tt_pixel_* — TikTok. Conversion tracking and retargeting. 13 months.
- _fbp, _fbc — Meta. Conversion tracking and retargeting. 90 days.
- _gcl_au — Google Ads. Conversion attribution. 90 days.
How to control cookies
Use our banner via the "Cookie settings" link in the footer. You can also block or delete cookies in your browser — see aboutcookies.org for guides. Blocking strictly necessary cookies will break the site.
To opt out of advertising more broadly: youronlinechoices.com (EU) or aboutads.info/choices (US).
Do Not Track
We respect explicit choices made through our cookie banner. For California residents, the Global Privacy Control (GPC) signal is treated as a valid opt-out of sharing for cross-context behavioural advertising, in line with CCPA/CPRA.