Cookie Policy
Last revised: 11 September 2026
1. Introduction to Cookies & Tracking Technologies
This Cookie Policy explains how PanyBox (“we”, “us”, “our”) uses cookies and similar technologies (including local storage, session storage, and server tokens) when you access and navigate panybox.com.
A cookie is a small text file placed on your computer, smartphone, or tablet when you visit a website. Cookies allow the website to recognize your device, maintain your shopping cart, verify authentication tokens, and preserve your preferences.
2. Legal Basis for Using Cookies
In compliance with the UK Privacy and Electronic Communications Regulations (PECR), the UK Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR):
- Strictly Necessary / Essential Cookies: Exempt from requiring prior consent under Regulation 6 of PECR because they are strictly necessary to provide the service explicitly requested by you (e.g., adding merchandise to a cart, logging into your account, and paying via Stripe).
- Optional Cookies (Analytics & Marketing): We only activate non-essential cookies after receiving your freely given, affirmative consent through our Cookie Consent notification. You may grant or withdraw this consent at any time.
3. Categories of Cookies We Use
A. Strictly Essential Cookies (Required)
These cookies are crucial for the basic operation of the store. Without them, core e-commerce functions such as shopping cart synchronization, secure checkout, and user authentication cannot operate. They do not store personally identifiable promotional tracking data.
B. Functional & Preference Cookies (Optional)
These allow the website to remember choices you make (such as your chosen currency GBP/USD, dark mode settings, or recently viewed product items) to deliver a personalized experience.
C. Performance & Analytics Cookies (Optional)
These cookies collect aggregated, anonymous information about how visitors navigate the website (e.g. page load speeds and traffic volume) to help us troubleshoot technical issues and optimize layout.
4. Table of Cookies & Storage Used by PanyBox
| Cookie / Key | Provider | Purpose | Category | Expiry |
|---|---|---|---|---|
| panybox-token | PanyBox | Stores encrypted Sanctum bearer token to keep you authenticated across devices. | Essential | Session / 30 Days |
| panybox-cart | PanyBox | Maintains chosen product items, variants, and quantities in your active shopping cart. | Essential | Persistent / Local |
| panybox_cookie_consent | PanyBox | Stores your cookie preferences (Essential Only vs Accept All) so you are not repeatedly prompted. | Essential | 1 Year |
| XSRF-TOKEN | PanyBox API | Cross-Site Request Forgery (CSRF) security token protecting form submissions and API calls. | Essential | Session |
| __stripe_mid, __stripe_sid | Stripe Inc. | PCI-DSS Level 1 fraud prevention, bot mitigation, and secure payment session handling. | Essential | 1 Year / 30 Mins |
| panybox-recently-viewed | PanyBox | Stores your recently viewed products to make rediscovering items effortless. | Functional | 30 Days |
5. Why Essential Cookies Cannot Be Disabled
Strictly essential cookies are mandatory for our website to function. If these cookies are blocked by your browser settings:
- You will be unable to add items to your shopping cart or retain items while browsing.
- You will be unable to sign into your account or access order tracking.
- Stripe will be unable to generate secure payment tokens, preventing checkout completion.
Under UK and EU law, website operators are permitted to set strictly essential cookies without prior consent because they are essential for fulfilling user-requested transactions.
6. Third-Party Cookies & Processors
We partner with trusted third-party providers who may place cookies on your device during checkout or authentication:
- Stripe Payments UK Ltd: Used to securely process credit/debit card transactions and identify fraudulent payment behavior. Privacy Policy: stripe.com/privacy.
- Google OAuth: If you choose to log in using Google sign-in, Google sets authentication verification tokens to confirm your identity. Privacy Policy: policies.google.com/privacy.
7. Managing & Modifying Cookie Preferences
You have full control over your cookie choices. You can modify your preferences at any time by clicking the button below:
Your Current Preference
Choose between Accept All, Accept Essential Only, or Customize Categories.
8. Browser-Specific Cookie Controls
Most modern web browsers allow you to manage cookie settings through their preferences. Instructions for major browsers:
- Google Chrome: Settings > Privacy and security > Cookies and other site data.
- Apple Safari: Preferences > Privacy > Block all cookies.
- Mozilla Firefox: Options > Privacy & Security > Enhanced Tracking Protection.
- Microsoft Edge: Settings > Cookies and site permissions.
9. Changes to This Cookie Policy
We may periodically update this Cookie Policy to reflect changes in applicable regulations or platform functionality. Any updates will be posted on this page with an updated “Last revised” date.
10. Contacting Our Data Protection Officer
If you have questions, concerns, or inquiries regarding our use of cookies and personal data handling, please contact our Data Protection Officer: