Cookie Policy
Last updated: 02/11/2026
This policy lists every cookie and browser storage item oraspot.co.uk uses, what each one does and how long it lasts, and explains how to change your choice.
The short version
- We use the cookies OraSpot needs to work: to sign you in, run your basket and take payments safely.
- We use Meta's advertising cookie only if you say yes, and you can change your mind at any time.
- We do not use any analytics cookies.
What cookies are
Cookies are small files a website stores on your phone or computer. Websites can also keep information in your browser's storage (local storage and session storage) and load small pieces of code from other companies, such as an advertising pixel. This policy covers all of them, and we call them all “cookies” for short.
The law lets us use essential cookies without asking, because OraSpot cannot work without them. For everything else we either ask first or, for small functional ones, tell you here and let you refuse.
Essential cookies
These are needed to sign you in, keep your account secure and take payments.
__Secure-next-auth.session-token
- Set by
- OraSpot
- What it does
- Keeps you signed in.
- How long
- 7 days
__Host-next-auth.csrf-token
- Set by
- OraSpot
- What it does
- Protects the sign-in form against forged requests.
- How long
- Until you close your browser
__Secure-next-auth.callback-url
- Set by
- OraSpot
- What it does
- Takes you back to the page you were on after you sign in.
- How long
- Until you close your browser
__Secure-next-auth.state and __Secure-next-auth.pkce.code_verifier
- Set by
- OraSpot
- What it does
- Keep Sign in with Google secure. Only set if you use it.
- How long
- 15 minutes
shopify_oauth_nonce
- Set by
- OraSpot
- What it does
- Protects the link between a Shopify store and OraSpot against forged requests. Only set while a brand links a Shopify store through the OraSpot app for Shopify, and deleted once the link is made.
- How long
- 10 minutes
Stripe cookies
- Set by
- Stripe
- What it does
- Prevent fraud and keep payments secure on the checkout and order confirmation pages. See Stripe's Cookie Policy.
- How long
- Set by Stripe
Functional cookies
This one makes browsing work better. We do not need your consent for it, but you can refuse it, as Your choices explains, and the site still works.
ora_feed_seed
- Set by
- OraSpot
- What it does
- Keeps products in the same order while you browse, so the next page of products does not repeat ones you have seen.
- How long
- Until you close your browser
Advertising cookies (only if you agree)
We use Meta's pixel to measure our Facebook and Instagram adverts. We only load it if you accept advertising cookies. If you do, Meta sets the cookie below and receives the pages you visit, your IP address and browser details, and whether you joined our waitlist or applied to sell. Meta may link this to a Facebook or Instagram account, and the pixel can send Meta a scrambled (hashed) copy of contact details you type into our forms, such as your email address. Our Privacy Policy explains more.
_fbp
- Set by
- Meta
- What it does
- Measures our Facebook and Instagram adverts, for example whether someone who clicked an advert later joined our waitlist. Only set if you accept advertising cookies.
- How long
- 90 days
We do not load Meta's pixel on the OraSpot page inside a brand's Shopify admin.
Brand videos
Browser storage
Local storage stays in your browser until you clear it. Unless marked otherwise, these items are essential.
cart-storage
- Set by
- OraSpot
- What it does
- Your basket. Also holds a short code (not your email address) that shows which account the basket belongs to. Signing out empties it.
- How long
- Until you clear it
wishlist-storage
- Set by
- OraSpot
- What it does
- Your wishlist. Also holds a short code (not your email address) that shows which account the wishlist belongs to. Signing out empties it.
- How long
- Until you clear it
oraspot_cookie_consent
- Set by
- OraSpot
- What it does
- Your cookie choice.
- How long
- Until you clear it
oraspot_session_id
- Set by
- OraSpot
- What it does
- A random ID sent with your cookie choice, so we can keep a record of it.
- How long
- Until you clear it
nextauth.message
- Set by
- OraSpot
- What it does
- Keeps signing in and out in step across your open tabs.
- How long
- Until you clear it
oraspot:last-storefront
- Set by
- OraSpot
- What it does
- Functional: the brand storefront you last opened, so "Continue shopping" can take you back to it.
- How long
- Until you clear it
hasCompletedOnboarding
- Set by
- OraSpot
- What it does
- Functional: that you have already seen the interest picker, so we do not show it again.
- How long
- Until you clear it
lastExternalReferrer and lastExternalReferrerTime
- Set by
- Meta
- What it does
- Advertising: the site that sent you to OraSpot, for measuring adverts. Only if you accept advertising cookies.
- How long
- Until you clear them
Session storage is deleted when you close the tab.
oraspot-checkout
- Set by
- OraSpot
- What it does
- Keeps an order that is waiting for payment if you reload the checkout page.
- How long
- Until you close the tab
oraspot_waitlist_thanks
- Set by
- OraSpot
- What it does
- Shows your thank-you page after you apply to sell.
- How long
- Until you close the tab
shopify-sync-banner
- Set by
- OraSpot
- What it does
- Remembers that a brand closed a notice in its dashboard.
- How long
- Until you close the tab
Your choices
- The first time you visit, we ask whether you accept advertising cookies. Meta's pixel does not load unless you say yes, and saying no does not change how OraSpot works.
- You can change your mind at any time: use Cookie settings at the bottom of our pages to open your choices again. Clearing the cookies and site data for oraspot.co.uk in your browser also deletes your choice, so we ask again.
- To refuse the functional items (ora_feed_seed, the last storefront and the interest picker note), block or clear the cookies and site data for oraspot.co.uk. The site still works.
- Most browsers also let you see, block and delete cookies. Blocking essential cookies stops sign-in and checkout working.
Changes to this policy
We update this policy when the cookies we use change, and we change the “Last updated” date at the top. If we want to add a cookie that needs your consent, we ask you first.
Contact us
Questions about cookies: email us. Our Privacy Policy explains how we handle your personal data.
By post: ORASPOT LTD, 9 Gatwick Road, Birmingham, England, B35 6NE.