Cookie Policy
Cookies are small files a website stores on your device. We keep ours to the minimum — what's needed for the shop to work and stay secure. Anything beyond that, including how we measure which pages get read, is set out below with a way to switch it off.
Last updated · October 2026
Our approach
Timbermere uses strictly-necessary cookies to run the basket and keep the site secure (these need no consent under UK law). Beyond that there are two separate choices, and you can allow one without the other.
Analytics — Microsoft Clarity, so we can see what works and fix what doesn't. Advertising — we run adverts on Google and Pinterest. These cookies let us see whether an advert actually led to an order, and let Pinterest show our adverts, on Pinterest, to people who've visited this site. They are set only if you choose Accept all.
We don't sell your data. Google's cookies are never used to aim adverts at you; Pinterest's are, on Pinterest only, and only after Accept all — the Advertising section below says exactly what that means. Separately, we count page views without setting any cookies at all — that's the section after next.
The cookies we use
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
snipcart_session | Snipcart (our checkout) | Remembers the pieces in your basket and carries your order through checkout. | Session / up to ~1 year |
__cf_bm | Cloudflare | Tells real visitors from automated bots, to protect the site from abuse. | ~30 minutes |
cf_clearance | Cloudflare | Records that your browser passed a security check, so you aren't re-challenged. | Session / up to ~1 year |
_clck | Microsoft Clarity | Keeps a Clarity ID so repeat visits aren't double-counted. | ~1 year |
_clsk | Microsoft Clarity | Links the pages of one visit into a single session for the recording. | ~1 day |
CLID | Microsoft Clarity (clarity.ms) | Identifies the browser the first time Clarity loads, to group your session. | ~1 year |
_gcl_au | Google (Google Ireland Ltd) | Records that a visit came from a Google advert, so we can tell which adverts lead to an order. | ~90 days |
_gcl_aw | Google (Google Ireland Ltd) | Stores the click reference from a Google advert. Set only if you actually arrived from one. | ~90 days |
_gcl_gs, _gcl_ag, _gcl_dc | Google (Google Ireland Ltd) | Variants of the same click reference, used for different Google advert formats. | ~90 days |
_pin_unauth | Pinterest (Pinterest Europe Ltd) | Groups the pages you view and the pieces you add, so Pinterest can tell us whether a Pinterest advert led to an order — and show our adverts on Pinterest to people who've visited. | ~1 year |
_epik | Pinterest (Pinterest Europe Ltd) | Stores the click reference from a Pinterest advert. Set only if you actually arrived from one. | ~1 year |
_derived_epik | Pinterest (Pinterest Europe Ltd) | Remembers a match Pinterest has already made for this browser, so it needn't make it again. | ~1 year |
The Snipcart cookie is only set once you start using the basket. The Cloudflare cookies protect the site and its visitors and are part of our hosting.
The Microsoft Clarity cookies are set only if you accept analytics — and the checkout is masked from recordings. If you change your answer to no, we switch Clarity off and delete the two it set on this site (_clck and _clsk); CLID is set by clarity.ms on its own domain, so only your browser can clear that one.
The Google cookies are set only if you choose Accept all, and never on the strength of an analytics-only answer.
The Pinterest cookies are set only if you choose Accept all, never on an analytics-only answer. If you change your answer to no, we delete the ones set on this site (_pin_unauth, _epik and _derived_epik); any Pinterest sets on pinterest.com itself are outside our reach, so only your browser can clear those.
Measuring without cookies
Not every kind of measurement needs a cookie. These tell us how the site is doing without storing anything on your device, without identifying you, and without following you to other websites:
- Umami — plain visitor statistics: which pages get read, which parts of the shop get used (such as items added to the bag), which site or search engine sent you, roughly which country you're in.
- Cloudflare Web Analytics — counts page loads and measures how quickly pages actually render for you, so we can tell when the site is slow. Cloudflare already protect and serve the site.
Because nothing is stored on your device, UK cookie rules don't require us to ask first, so this starts when you arrive. Our lawful basis is legitimate interests — knowing which pages are worth keeping and whether the site is fast enough.
The cookie notice does not control this. Reject answers a question about cookies, and these two set none, so they keep counting either way. We'd rather say that plainly than have a button quietly mean less than it looks like it means — so here is the switch that does stop them. No account, no cookie banner, no catch:
Turning it off reloads the page. That's deliberate: it's how we make sure anything already running actually stops, rather than just promising it will. Your choice is remembered on this device and survives any later change to this policy — we won't make you object twice.
Advertising
We advertise on Google. When someone clicks one of those adverts and later buys something, we need a way to connect the two — otherwise we're paying for adverts with no idea whether they work. That connection is what the _gcl cookies above do, and it is the only thing we use them for.
What this does not do, deliberately: we have switched off Google's advertising-audience collection, so these cookies are not used to build a profile of you, to personalise adverts, or to follow you around other websites with pictures of chopping boards. We don't sell your data. Google acts as an independent controller for the advert data it receives — their privacy policy covers what they do with it.
We also advertise on Pinterest. Its tag does two things, and we'd rather name both: it tells us whether a Pinterest advert led to a visit, a piece added to the bag or an order — and it lets Pinterest show our adverts, on Pinterest, to people who have visited this site. That second part is what the advertising industry calls retargeting, and it is why the Pinterest cookies above are worded the way they are.
What Pinterest receives: the pages you look at here, the pieces you add to your bag, and — if you buy — the order number, the value of the goods and which pieces they were, with your IP address and browser details. Never your name, email address or delivery address: Pinterest's “enhanced match”, which would send them, is switched off. We don't sell your data. Pinterest decides how it uses what it receives under its own privacy policy.
Because these cookies are for advertising rather than for running the shop, UK law requires us to ask first. Nothing is set until you choose Accept all, and Analytics only means exactly that — no advertising cookies at all. If you change your mind, use Cookie settings in the footer: we switch both tags off, delete the cookies they already set, and reload the page so nothing keeps running on the promise that it stopped.
Fonts & third parties
Our typefaces are served from our own domain — no font provider sets cookies, and loading a page doesn't fetch a typeface from anyone else. We don't load social-media widgets, and we don't sell your browsing — it is shared only with the advertising tags described above, and only after Accept all. The one analytics script that needs your permission is Microsoft Clarity, and it loads only after you choose Accept. The two advertising scripts are Google's and Pinterest's, and they load only after you choose Accept all — if you don't, your browser never contacts either.
Local storage
Alongside cookies, the site keeps a few small preferences in your browser's local storage: tm-consent (your cookie choice from the notice above), tm-analytics-optout (whether you used the switch above to stop the cookieless counting), tm-nl (whether you've dismissed or joined the workshop-letter invitation, so we stop showing it), tm-fav (your saved favourites, so your list is there when you come back), and tm-fav-nudge (when the small “email your favourites” reminder by the heart was last shown, declined or used, so it stays rare — times and a short fingerprint of the list, never the list itself). None of these identifies you, and none leaves your device on its own — clearing your browsing data removes them. The one exception is your choice: if you ask us to email your saved boards, the list is sent with that email (see our Privacy Policy).
Separately, if you compose an engraving, pick a size, or choose a juice groove or feet on a product page, the wording, layout and choices you make are kept in tm:engraving for the current visit only (session storage, gone when the tab closes), so following a link — say, to the returns policy — doesn't lose your work. That information stays on your device unless you add the piece to your bag, when it travels inside your own order and nowhere else.
Three more session-storage notes last only for the current visit: tm:nl (that the workshop-letter invitation has already been offered in this tab, so it doesn't ask twice), tm:prompt (which of the site's two small invitations has been shown, so you see one at most) and tm:fav-nudge (whether this tab opened with favourites already saved). None of them identifies you or leaves your device.
One more, only if you have accepted advertising cookies and place an order: tm:pinPendingCheckout holds that order's number, goods value and pieces for the moment between payment and the confirmation page, then they go to Pinterest as described above and the note is deleted (session storage, gone when the tab closes either way).
Managing cookies
You can block or delete cookies in your browser settings at any time. Please note that blocking the essential cookies above may stop the basket or checkout from working properly. You can change your choice any time via Cookie settings in the footer. That answer covers the cookies; the cookieless counting has its own switch in the section above. Advertising is a separate answer — changing one never changes the other.
See also our Privacy Policy.