Cookie Policy

A cookie is a small text file that a website asks your browser to store. It lets the site remember something between clicks — that your basket has three items in it, or that you prefer to read in English.

Some cookies come from us (first-party). Others come from a company whose tools we load, such as Google, TikTok or Pinterest (third-party) — and those tools are only ever loaded after you have said yes to the category they belong to.

Cookies last for different lengths of time. A session cookie disappears when you close the browser. A persistent cookie stays until its expiry date, or until you delete it.

We also use closely related technologies — local storage in your browser, and small tracking pixels inside advertising tags. This policy covers those too, because from your point of view they do the same job.

Cookies cannot read files on your computer and they do not carry viruses.

The first time you visit, a banner appears. You can accept everything, accept only what is essential, or open "Customise" and switch categories on individually.

Nothing in the analytics or marketing categories loads before you choose — not in a limited mode, not in a restricted mode, not in any mode at all. If you close the banner without choosing, only essential cookies run.

We record your choice in a cookie called hc_consent, which lasts 180 days. After 180 days we ask again, so your answer never becomes a decision you made once and forgot.

Essential cookies do not require consent under the EU ePrivacy rules or the UK PECR, because the shop cannot function without them. Everything else does require consent, and we treat it that way.

• Strictly necessary — makes the basket, the checkout and security work. Cannot be switched off.
• Preferences — remembers a choice you made, such as your language. Optional.
• Analytics — tells us, in aggregate, which pages and products are useful. Optional.
• Marketing — measures whether an advert led to a sale, and lets advertising platforms show our adverts to relevant audiences. Optional.

The sections below list the actual cookies in each category, with a stated duration for every one. If we add one, this page is updated before it goes live.

These run on every visit. Without them you could not add anything to a basket or pay for it.

• _medusa_cache_id — identifies your session against our shop backend, so that the right region, prices and basket are shown. First-party. Duration: 24 hours.
• _medusa_jwt / cart id — keeps you signed in where relevant and keeps your basket attached to you between pages, so your items are still there when you come back. First-party. Duration: from the browser session up to 7 days.
• hc_consent — stores which cookie categories you agreed to, so that we can honour your choice and show that we asked. First-party. Duration: 180 days.

No consent is needed for these. Blocking them in your browser will break the basket and the checkout.

These remember a setting so that you do not have to choose it again.

• hc_locale — remembers the language you are reading the site in, so that we do not send you back to the wrong version on every visit. First-party. Duration: 1 year.

This category contains no third-party cookies and sends nothing to anyone outside our own systems. If you decline it, the site still works — it will simply fall back to the language your browser or region suggests.

These only load after you accept the Analytics category. Until you do, the Google tag is not on the page at all: no script, no cookie, and nothing sent to Google. Once loaded, they tell us which designs people look at and where people give up, which is how we decide what to make next.

• _ga — Google Analytics. Assigns a random identifier to your browser, so that repeat visits are counted as one visitor rather than several. Third-party (Google). Duration: up to 2 years.
• _ga_* (for example _ga_XXXXXXXX) — Google Analytics. Keeps the session state for our specific property. Third-party (Google). Duration: up to 2 years.

IP anonymisation is switched on, so your IP address is truncated by Google before it is stored, and we have set user-level data retention to 14 months.

We do not use analytics data to identify you personally, and we never combine it with your personalisation text or your order details.

These only load after you accept the Marketing category. Until you do, neither tag is on the page and neither company receives anything from your visit. They exist so that we can tell whether the money we spend on advertising actually results in orders.

• _ttp — TikTok advertising pixel. Links a visit or a purchase back to a TikTok advert, and helps TikTok build advertising audiences. Third-party (TikTok). Duration: up to 13 months.
• _pinterest_ct_ua — Pinterest advertising tag. Measures conversions from Pinterest and supports audience targeting. Third-party (Pinterest). Duration: up to 1 year.

If you decline this category, neither tag is loaded at all and neither cookie is written. You will still see our adverts elsewhere on the internet; they will simply be less relevant, and we will not know whether they worked.

TikTok and Pinterest may transfer data outside the EEA once their tags have been loaded with your consent. See our Privacy Policy for the safeguards that apply.

This is the section where a lot of shops explain the "restricted" or "limited" state that an advertising tag can sit in before consent. We do not need one, because we do not work that way.

Before you have accepted a category, the tags in that category are simply not on the page. There is no script, no cookie, no event, no page view and no cookieless ping. Google, TikTok and Pinterest receive nothing at all from your visit — not a truncated IP address, not the fact that a page was opened, nothing.

When you accept a category, the corresponding tag is loaded for the first time and starts working from that moment onwards. Nothing is backfilled about the part of your visit that happened before you consented, because we never collected it in the first place.

If you never accept, no analytics or marketing tag loads for the whole visit. Our figures simply have you missing from them, and that is a trade we are happy to make.

If you withdraw consent later, we stop loading the tag again from that point. Cookies already stored on your device by a category you have now switched off can be cleared in your browser — see section 10.

There is a "Cookie settings" link in the footer of every page. Click it and the consent banner reopens with your current choices shown.

Change any switch and save. Turning a category off stops those tags loading straight away. Cookies already stored by that category can be cleared in your browser, as described in the next section.

Withdrawing consent is as easy as giving it, and we will never nag you for changing your mind.

We ask again automatically every 180 days, when the hc_consent cookie expires.

Every modern browser lets you see, block and delete cookies. Blocking all cookies will stop our basket and checkout working, so if you want to shop, allow at least the essential ones.

• Chrome: Settings → Privacy and security → Third-party cookies, and Settings → Privacy and security → Delete browsing data.
• Safari (Mac): Safari → Settings → Privacy → Manage Website Data. On iPhone or iPad: Settings → Apps → Safari → Advanced → Website Data.
• Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data.

Private or incognito windows discard cookies when the window closes, which also means your basket and your consent choice will not survive.

Your browser may also offer a "Do Not Track" or Global Privacy Control signal. There is no agreed standard for how sites should respond to Do Not Track, so we do not rely on it — our banner is the setting that governs what we load.

If you follow a link from our shop to Facebook, Instagram or Pinterest, that platform sets its own cookies under its own policy, and we have no control over them.

Embedded content — a video or a social post shown inside one of our pages — can also set cookies from the platform hosting it. Where we embed anything of that kind, it is loaded only after you accept the relevant category; before that, the embed is not loaded and the platform is not contacted.

Please read the cookie policy of any third-party site you visit. This policy covers hehecorner.com only.

We update this page whenever we add, remove or change a cookie, and always before the change goes live.

The date of the last update is shown at the top. If a change affects a category you have consented to, we will ask you again rather than assume your old answer still holds.

Questions about anything on this page can go to [email protected].