Cookie notice
The storage that helps this shop work.
Policy version: 2 November 2026.
How this shop uses storage
Cookies and similar browser storage help keep your basket, sign you in and process payments securely. Optional advertising, visit-attribution and abandoned-basket marketing tracking are off. Free samples do not require a newsletter signup.
Basket and payment cookies
The following cookies were identified in the shop review. Durations are approximate maximum browser lifetimes and may restart when a cookie is refreshed.
| Name | Provider and purpose | Duration |
|---|---|---|
| woocommerce_cart_hash | WooCommerce: detects basket changes. | Browser session |
| woocommerce_items_in_cart | WooCommerce: remembers whether your basket contains items. | Browser session |
| wp_woocommerce_session_* | WooCommerce: connects your browser with its basket data. | 2 days |
| __stripe_mid | Stripe: payment security and fraud prevention. | 1 year |
| __stripe_sid | Stripe: payment security and fraud prevention. | 30 minutes |
| __ssid | WooPayments payment infrastructure: payment processing and fraud detection. | Up to 400 days |
Other browser storage
| Name or group | Purpose | Lifetime |
|---|---|---|
| storeApiCartData, storeApiNonce, wc_cart_hash_* | Basket data and request validation in local storage. | Persistent browser storage, updated or cleared by the shop or your browser. |
| wcpay_appearance_shortcode_checkout | Caches payment-form display settings in local storage. | Persistent browser storage; refreshed by the payment software or cleared by your browser. |
| wc_cart_created, wc_cart_hash_*, wc_fragments_* | Basket timing and display state in session storage. | Browser tab/session |
| wpEmojiSettingsSupports | Checks whether your browser can display the relevant emoji characters. | Browser tab/session |
Signing in
WordPress uses additional cookies to test cookie support and maintain a signed-in account session, including wordpress_test_cookie and wordpress_logged_in_* / wordpress_sec_*. Their lifetime depends on the login and remember-me settings. These are separate from an anonymous visit to the catalogue.
Payment security services
WooPayments and Stripe use device, browser and transaction signals to process payments and detect fraud. The payment flow can also load Sift fraud protection and hCaptcha bot protection. Their secure frames may use additional browser storage depending on the browser and the security checks required. MFL Satchel does not use these integrations to run advertising campaigns.
Provider information: Automattic cookies, Stripe privacy and payment storage, Sift service privacy notice and hCaptcha privacy notice. See also WooCommerce cookie information.
Fonts and your choices
The theme and page-builder fonts are served locally from mflsatchel.com. You can use your browser controls to remove or block cookies and local storage, although blocking basket, login or payment storage may stop those functions working. Browser privacy settings can also affect third-party payment storage.
If optional tracking is introduced later, we will provide the appropriate consent choices before enabling it. We review this notice when shop features or providers change.
Questions: hello@mflsatchel.com. See our privacy notice for how we handle personal information.