Cookie policy
Operated by Web Window OÜ, Tallinn, Estonia. Last updated: 28 September 2026.
1. Cookies and browser storage
We use cookies and browser storage to remember your cart and choices. Some entries are sent with requests to the site; others stay in your browser. The sections below explain the main customer-facing entries and the separate analytics settings.
2. Your cart, contact and design
lr-cart stores your cart in local storage so it survives a reload. If you give us an email and cart recovery is enabled, a snapshot of your cart and contact details can be sent to our server before checkout. This supports cart recovery and, when enabled, reminder emails. See the privacy policy for server-side records.
lr-contact remembers the artwork contact details you enter. They can be attached to your cart lines and sent when you order or when a cart snapshot is saved. Local storage remains until it is cleared or replaced.
lr-design-doc stores your current editor layout in session storage for that browser tab. Your source logo may need to be reattached after a reload. When you add a design to the cart, the manufacturing artwork is uploaded separately to private storage.
lr-design-previews keeps up to ten small design previews in local storage for cart review. These previews are not sent with checkout or cart-recovery requests. Previews older than 30 days are no longer shown; old entries are removed when a new preview is saved.
lr-code holds a discount-link reference in session storage while you browse. Session storage normally clears when you close the tab.
3. Your preferences
lr-currency remembers the currency you choose. lr-country supplies an initial delivery country, and lr-units remembers metric or imperial measurements. These cookies last for 30 days and can be refreshed by a new choice.
lr-region remembers the country or region you pick in the region picker. It keeps you on that site, even when your location suggests another one. It lasts one year.
lr-cookie-consent stores whether you accepted or rejected analytics cookies. lr-consent-region tells the site whether to show an initial consent panel based on the request’s approximate country; the region cookie lasts 30 days. When the country is unavailable, the site asks first.
lr-design-colours-v2 remembers, in local storage, that you hid the colours that mark your design in the design editor. It stays until you show them again or clear site storage.
These preferences and cart functions are separate from analytics and remain available when you reject analytics cookies.
4. Stripe checkout
Payment takes place on Stripe’s hosted checkout, where Stripe uses cookies for payment, security and fraud prevention. Stripe’s own privacy and cookie policies apply on those pages.
5. Analytics
When enabled, Google Analytics 4 helps us understand use of the store. We use advanced consent mode: the Google script can load and send measurements without analytics cookies before you make a choice. Those requests can include page, browser, timing and consent information. We do not describe this as no data collection or guaranteed anonymity.
In the EEA, UK and Switzerland, analytics cookie storage starts off until you accept. You can open manage cookies on the first panel and save your choice without analytics. In other configured regions it starts on unless you have rejected it or your browser sends Global Privacy Control.
When allowed, Google may set _ga and a property-specific _ga_ cookie to distinguish browser visits. Their lifetime follows the Analytics cookie settings. Rejecting or withdrawing consent tells Google not to read or write analytics cookies; existing cookies can also be deleted in your browser settings.
Global Privacy Control keeps analytics cookie storage off in regions without the initial panel, even if an earlier choice was accepted. Where the consent panel is shown, your explicit choice controls analytics cookie storage.
Vercel Analytics and Speed Insights may also measure visits and performance without analytics cookies. These measurements are separate from the Google cookie choice. We do not enable advertising storage, advertising personalisation or advertising user data in Google’s consent settings.
When analytics cookies are allowed, Rolly also keeps its own visit log on our servers. The lr-jv cookie is a random browser identifier lasting up to 180 days. It records which pages of the shop you open, how long you actively spend on each, and moments such as adding to the cart, opening the designer, starting checkout and paying. It never records what you type. When you enter your email in the cart, check out or pay, the log is linked to that email so we can see how you found and used the shop. It stays with us and is not shared with analytics or advertising companies. It is deleted 12 months after your last visit, or straight away when you reject analytics cookies with the button below. If that deletion cannot finish at once, an lr-jv-erase cookie holds the identifier until your next page view completes it. Global Privacy Control turns the visit log off.
If you click Accept cookies, or turn on Session recordings under manage cookies, PostHog records masked replays of how you use the shop, and where people click, so we can see where the store is hard to use. Everything you type and all text on the page is masked, and images, uploaded logos, the contact form, payment and order pages are never recorded. PostHog keeps its identifier in your browser's local storage (keys starting with ph_) and the recordings on its EU servers for up to 30 days. A recording can be linked to our own visit log for the same visit. lr-recording-consent remembers this choice. Recordings never start without that click, Global Privacy Control turns them off, and you can switch them off at any time with the button below.
6. Change your choice
Use the Cookie settings button below to review or change your analytics choice. You do not need to delete your cart or contact details to do this. If browser storage is blocked, your choice applies to the current tab but may need to be made again after a reload.
You can also delete or block cookies and browser storage in your browser settings. Clearing site storage removes saved carts, contact details, design previews and preferences from that browser. It does not delete an order or other record already sent to our server; contact us for that request.
7. Questions and updates
We update this policy when the way the store uses storage changes. For a question about cookies or personal data, email support@rollyme.com.