Cookie Policy

Cookies are small text files stored on your device when you visit a website. They are widely used to enable websites to function, to remember preferences, and to provide information to the website's operator about how the site is being used.

Similar technologies such as local storage and session storage are used by browsers to store data on your device for related purposes. References to 'cookies' in this Policy also cover these similar technologies where the same considerations apply.

Cosmedi Global uses the cookies necessary to operate the website and the signed-in buyer experience and, where you have consented, cookies and similar technologies for analytics and for measuring marketing performance. No cookie other than a strictly necessary one is set before you have given your consent, and no request is sent to the third party concerned before then.

Third-party analytics and marketing tags operate on public pages only. They are not loaded on shared links, invitation links, or the signed-in admin, buyer, and account areas, regardless of your consent, because those addresses themselves carry access rights or identify a counterparty.

• Strictly necessary cookies — required to operate the website. This includes secure session handling for buyer-account sign-in, detection of authentication abuse, and remembering choices you make such as your preferred locale. They are shown as always on in the consent banner and cannot be turned off.
• Analytics cookies — cookies and similar technologies used to understand how visitors use the website and to improve service performance. Google Analytics 4 and Vercel Web Analytics and Speed Insights fall into this category.
• Marketing cookies — cookies used to measure the performance of marketing campaigns. Meta Pixel falls into this category; Cosmedi currently uses it for measurement rather than website personalization.

Analytics and marketing cookies are activated only where you have consented to the category concerned. We operate Google Consent Mode v2: until you have made a decision, all four signals — ad_storage, analytics_storage, ad_user_data, and ad_personalization — are declared denied, and only the signals corresponding to the categories you consent to are updated to granted.

Some cookies and similar technologies are set or operated by third parties that provide services on our behalf. The third parties we use, and the purposes for which we use them, are as follows.

• Google — authentication, where you sign in via Google OAuth (strictly necessary), and, where you have consented to analytics cookies, measurement of website usage statistics through Google Analytics 4 (analytics). Google Analytics 4 sets its own cookies in your browser.
• Meta — where you have consented to marketing cookies, measurement of marketing campaign performance through Meta Pixel (marketing). Meta Pixel sets its own cookies in your browser.
• Vercel — where you have consented to analytics cookies, measurement of traffic through Vercel Web Analytics and performance through Speed Insights (analytics). Vercel states that Web Analytics uses no cookies, creates a daily hash from the incoming request, and discards its visitor session after 24 hours. Speed Insights transmits browser performance data points; Cosmedi has not independently verified an account-specific retention period for those data points.

Except for the verified facts stated in this Policy, Cosmedi does not control third-party cookie contents or retention. Refer to each provider's current cookie and privacy notice for account- or configuration-specific details.

Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them. Where we use persistent cookies, we choose retention periods proportionate to their purpose.

Your cookie consent decision is stored for 180 days in the '__Host-cm_consent' cookie. That cookie is set with the HttpOnly and Secure attributes, so it cannot be read or altered by scripts, and it holds only whether each category was granted, the notice version in force at the time, and the time of the decision. Once 180 days have passed, or the notice version is updated, we ask for your consent again.

The Google Analytics 4 cookies '_ga' and '_ga_<container-id>' have a default expiry of 2 years, but browser settings or tag configuration may delete them or limit their lifetime earlier. Meta's public Business Tools Terms allow Pixel Event Data to be retained for up to two years; Cosmedi has not independently verified the account-specific name or lifetime of every Meta browser cookie, which may vary by configuration and provider policy. Vercel states that Web Analytics sets no cookies; Cosmedi has not independently verified an account-specific retention period for Speed Insights performance data points.

You can change or withdraw your consent to analytics and marketing cookies at any time through 'Cookie settings' at the bottom of the website. Withdrawal is offered by the same means as consent, and the tags in the category concerned stop as soon as you withdraw. Withdrawal takes effect for the future only and does not affect the lawfulness of processing carried out before it.

Most browsers allow you to manage cookies through their settings, including blocking cookies, deleting existing cookies, and receiving notifications when cookies are set. Blocking strictly necessary cookies may impair core functionality, including the ability to sign in to a buyer account.

• Chrome — Settings > Privacy and security > Cookies and other site data.
• Safari — Preferences > Privacy > Cookies and website data.
• Firefox — Settings > Privacy & Security > Cookies and Site Data.
• Edge — Settings > Cookies and site permissions > Cookies and site data.

Some browsers transmit 'Do Not Track' signals to websites. Because no industry-wide standard for responding to such signals has been finalized, we do not currently respond to them. We will revisit this position as standards develop.

We obtain your consent through a cookie consent banner before any cookie other than a strictly necessary one is set. Analytics and marketing tags are loaded only after you affirmatively consent to the corresponding category.

The banner offers accept all, reject all, or a choice by purpose, and rejecting is offered with the same prominence as accepting. Your choice is stored for the period stated in section 5 and can be changed or withdrawn at any time through 'Cookie settings' at the bottom of the website.

If we introduce a new third-party provider or change the purposes of collection, the notice version is updated; in that case your existing choice ceases to apply and we ask for your consent again.

We may update this Cookie Policy from time to time to reflect changes in technology, applicable law, or our use of cookies. Material changes will be indicated by updating the effective date at the top of this Policy and, where appropriate, by additional notice through the website.