Cookies & Tracking

The short version

Most of what this site stores is strictly functional — your basket, your sign-in, which country you're browsing from. If you say yes in the cookie banner, we also use Google Analytics to see how many people visit and what they look at. There are no advertising pixels, no third-party trackers and no session recording, and Analytics stays off entirely unless you turn it on.

1. Everything this site stores, in full

drrumikas_cart

Cookie. Strictly necessary. Holds the identifier of your basket so its contents persist between pages. httpOnly and same-site, so no script can read it and no other site can send it. Expires after 30 days.

drrumikas_announcement_dismissed

Browser local storage. Strictly necessary. Remembers that you closed the announcement bar so it does not reappear on every page. Never leaves your device.

drrumikas_consent

Browser local storage. Strictly necessary. Records the choice you made in the cookie banner and when you made it, so we can honour it and evidence it. Reviewed after 12 months.

geo_country

Cookie. Strictly necessary. Holds the country your connection appears to come from, so the site can show prices in your currency and, for cosmetics and jewellery, tell you upfront if import rules mean we can't ship to you. httpOnly. Expires after 24 hours and is set again on your next visit.

drrumikas_account

Cookie. Strictly necessary, only set if you sign in. Holds your session with the store so you don't have to sign in again on every page. httpOnly. Expires after 30 days.

drrumikas_account_verifier / drrumikas_account_state

Cookie, in pairs. Strictly necessary, only set for the few seconds a sign-in is in progress. Proves the sign-in that finishes is the one you started, and is deleted immediately after. httpOnly. Expires after 15 minutes if a sign-in is abandoned.

_ga / _ga_<container id>

Cookie, set by Google Analytics. Optional — only set if you switch on Analytics in the cookie banner. Distinguishes returning visitors from new ones and groups pages into a visit, so we can see how many people are shopping and which pages they use. Not set at all unless you consent, and set by Google under Google's own privacy policy rather than ours. _ga expires after 2 years, _ga_<container id> after 2 years.

That is the complete list. Everything above Google Analytics is on by default because the site cannot function without it — a basket that forgets what's in it, or a sign-in that asks twice, is not a functioning shop. Google Analytics is the one row that only exists if you turn it on. If you audit this site and find something not on it, tell us — that would be a bug, and we would want to fix it.

2. Checkout is a different domain

When you check out you leave this site for Shopify's hosted checkout. Shopify sets its own cookies there for the session, fraud prevention and payment handling, governed by Shopify's own privacy and cookie policies rather than this one. We do not control what Shopify sets, and we do not receive it.

3. Why we still ask

Strictly necessary cookies do not legally require consent, under the ePrivacy Directive or otherwise — you cannot shop without a basket. So the banner is not asking permission for those; it is telling you what is set and recording that you were told.

Google Analytics is not strictly necessary, so the banner asks first and sets nothing until you agree — refusing is exactly as easy as accepting. If we ever add anything else non-essential, the same rule applies to it. The page will not nag you for changing your mind either way; the choice is remembered and honoured until you revisit it yourself.

4. Changing your mind

Use the cookie settings link in the footer at any time. You can also clear cookies and site data in your browser, which resets everything above — your basket included.

We honour Global Privacy Control. If your browser sends a GPC signal we treat it as an opt-out of any non-essential processing, without asking you again.

5. Questions

Write to privacy@bearsystems.in. The Privacy Notice explains what we do with data once collected.