Cookie notice
The cookies and browser storage used on elaraone.app and in the store admin, what each one does and how long it lasts.
Last updated
In short
elaraone.app sets no analytics or advertising cookies. The only things it keeps in your browser are your theme choice, if you make one, and a sign-up draft while you are signing up.
The store admin uses a few strictly necessary cookies to keep you signed in and secure.
Shops that run on Elara One set their own cookies, explained in each shop's own cookie notice.
About this notice
Elara One is a trading name of Elara Labs Ltd, a company registered in England and Wales with company number 17541993, whose registered office is at 128 City Road, London, United Kingdom, EC1V 2NX.
This notice covers elaraone.app, including our documentation, and the store admin that our customers and their staff sign in to at {store}.admin.elaraone.app. It explains what we store in your browser and why, as the Privacy and Electronic Communications Regulations (PECR) require. Read it with our privacy notice.
What cookies and similar technologies are
A cookie is a small file a website saves in your browser and reads back later. Websites can also keep information in your browser's local storage or session storage. The law treats them all the same way: a site may store or read something on your device only with your consent, unless it is strictly necessary to provide a service you asked for.
- Cookie
- Sent back to the website with each request. Can last for the browser session or until a set date.
- Local storage
- Kept in your browser until you or the site clear it. Not sent to the website automatically.
- Session storage
- Kept only until you close the tab.
On elaraone.app
We do not use analytics, advertising or social media cookies on elaraone.app, and we do not put third-party tracking pixels on it. What we do store is strictly necessary or something you asked for, so we do not need a cookie banner.
- Name
elaraone:theme- Type
- Local storage, set by us
- What it does
- Remembers whether you chose the light or dark theme. Only saved when you pick one.
- How long
- Until you clear it
- Name
elaraone:signup-draft- Type
- Session storage, set by us
- What it does
- Keeps your sign-up answers if you come back from the payment page, so you do not have to type them again.
- How long
- Until you close the tab; removed once sign-up is complete
- Name
__cf_bm- Type
- Cookie, set by Cloudflare
- What it does
- Cloudflare protects our website from automated attacks and may set this cookie to tell people from bots.
- How long
- 30 minutes
- Name
- Cloudflare Turnstile
- Type
- Script on our forms, provided by Cloudflare
- What it does
- Checks that a form is sent by a person, not a bot, without a puzzle. Used only on forms.
- How long
- For the check only
In the store admin
When you sign in to a store's admin, we set these cookies on that store's admin address only. All of them are strictly necessary for signing in securely, so they do not need consent.
- Name
elaraone-session- Type
- Cookie, set by us
- What it does
- Keeps you signed in as you move between pages.
- How long
- Until you sign out or the session ends
- Name
XSRF-TOKEN- Type
- Cookie, set by us
- What it does
- Protects your forms from cross-site request forgery, where another site tries to act as you.
- How long
- For the session
- Name
__Host-elaraone_device- Type
- Cookie, set by us
- What it does
- Recognises a browser you have signed in from before, so we can email you when a new device signs in. If your store allows it and you tick "Remember this device", it also skips the second sign-in step on this browser for up to 30 days.
- How long
- Up to 400 days
Payment pages
When you pay for an Elara One plan, you complete payment on a checkout page hosted by Stripe. Stripe sets its own cookies there to process the payment and prevent fraud. They are covered by Stripe's cookie policy (opens in a new tab), not this notice.
Shops that run on Elara One
Each shop built on Elara One has its own website, and that website sets its own cookies on its own domain. The shop decides which ones to use and is responsible for its cookie notice and consent banner. Please read the shop's own notice.
Our platform is designed so that shops can respect consent: identifiers are first-party only, scripts in the page cannot read them, and analytics identifiers are only set after a shopper agrees. Our documentation explains the consent model for merchants and developers.
Analytics and the 2025 Act
The Data (Use and Access) Act 2025 allows some analytics cookies to be used without consent, provided people are told and can object easily. We do not rely on this: elaraone.app runs no analytics cookies at all. If that changes, we will update this notice first and explain how to object.
Managing cookies
You can see, block and delete cookies and site data in your browser's settings. Clearing site data for elaraone.app removes your theme choice. Blocking the store admin cookies will stop you signing in, because they are needed for it to work.
Guides for the most common browsers: Chrome (opens in a new tab), Safari (opens in a new tab), Firefox (opens in a new tab) and Edge (opens in a new tab).
Changes and contact
We will update this notice, and the date at the top, whenever what we store changes. Questions about cookies: [email protected].
Other legal documents
- Privacy notice
- Customer terms
- Data processing agreement
- Sub-processors
- Website terms of use
- Acceptable use policy
- Deleting your data
Questions about this document? Email [email protected].