Cookie Policy
Last updated: 21.9.2026
The short version: This site uses a few cookies that make it work (like your cart and secure checkout), a couple that quietly note which link or search brought you here so we know what’s working, and Google Analytics / Hotjar cookies that help us understand how people use the site – controlled by the cookie banner. No ad networks, no tracking across the web.
What cookies are
Small text files stored in your browser. Some are needed for the site to function; others help us see what’s working.
The cookies we use
1. Necessary – always on
These keep the site running and payments secure: they remember your cookie choice, what’s in your cart and your checkout session, and – once you reach payment – a couple of cookies our payment processor Stripe sets on your browser to screen out fraud. They don’t track you for marketing and can’t be switched off, because the site and checkout wouldn’t work without them.
| Cookie | What it does | How long |
|---|---|---|
| cookie consent (banner) | remembers your yes/no choice | up to 12 months |
| shop session cookies | cart and checkout | cleared when you close your browser |
| __stripe_mid | Stripe – recognises your browser across a checkout to prevent card fraud | 1 year |
| __stripe_sid | Stripe – same purpose, for the current checkout session | 30 minutes |
2. Order origin – necessary for order handling
WooCommerce’s built-in order attribution feature notes which link, search engine or campaign brought you to the site, so that if you place an order, we can see what led to it. It doesn’t identify you personally and isn’t used for advertising.
| Cookie | What it does | How long |
|---|---|---|
| sbjs_current, sbjs_first (and _add variants) | records the source of your current and first visit | cleared when you close your browser |
| sbjs_session, sbjs_udata, sbjs_migrations | supporting technical data for the above | cleared when you close your browser, or up to 30 minutes |
3. Analytics & session recording – only with your consent
We use Google Analytics 4 to see things like how many people visit and which pages they read, and Hotjar to see how people use the site (clicks, scrolling, session recordings) so we can spot what’s confusing and fix it. Both are aggregated tools we use to improve the site – we don’t use them to identify you individually.
| Cookie | What it does | How long |
|---|---|---|
| _ga | Google Analytics – tells returning visitors from new ones | 2 years |
| _ga_* | Google Analytics – keeps session statistics | 2 years |
| _hjSession_* | Hotjar – keeps track of your current visit | 30 minutes |
| _hjSessionUser_* | Hotjar – recognises you as a returning visitor | 1 year |
Google may process this data in the USA under the EU–US Data Privacy Framework. More in Google’s privacy policy. Hotjar is provided by Hotjar Ltd; more in Hotjar’s privacy policy.
Your choice
When you first visit, the banner asks what you allow for analytics and session recording (Google Analytics and Hotjar). The necessary and order-origin cookies above run regardless, because the site and checkout can’t work without them.
Changed your mind? Click Cookie settings in the footer and switch analytics off – we’ll stop collecting from that moment. You can also delete existing cookies in your browser settings anytime.
Questions?
Write to gdpr@threebodyproduct.com. How we handle personal data in general is described in our Privacy Policy.