Cookie Policy

Cookies are small files a website stores on your device. We keep ours to the minimum — what's needed for the shop to work and stay secure. Anything beyond that, including how we measure which pages get read, is set out below with a way to switch it off.

Last updated · July 2026

Our approach

Timbermere uses strictly-necessary cookies to run the basket and keep the site secure (these need no consent under UK law), and — only with your consent — Microsoft Clarityfor anonymous session analytics (heatmaps and recordings, with form fields masked) so we can see what works and fix what doesn't. We never use advertising or sell your data, and the analytics cookies below are set only after you choose Accept. Separately, we count page views without setting any cookies at all — that's the section after next.

The cookies we use

Cookie	Set by	Purpose	Lasts
`snipcart_session`	Snipcart (our checkout)	Remembers the pieces in your basket and carries your order through checkout.	Session / up to ~1 year
`__cf_bm`	Cloudflare	Tells real visitors from automated bots, to protect the site from abuse.	~30 minutes
`cf_clearance`	Cloudflare	Records that your browser passed a security check, so you aren't re-challenged.	Session / up to ~1 year
`_clck`	Microsoft Clarity	Keeps a Clarity ID so repeat visits aren't double-counted.	~1 year
`_clsk`	Microsoft Clarity	Links the pages of one visit into a single session for the recording.	~1 day
`CLID`	Microsoft Clarity (clarity.ms)	Identifies the browser the first time Clarity loads, to group your session.	~1 year

The Snipcart cookie is only set once you start using the basket. The Cloudflare cookies protect the site and its visitors and are part of our hosting. The Microsoft Clarity cookies are set only if you accept analytics — and the checkout is masked from recordings.

Measuring without cookies

Not every kind of measurement needs a cookie. These tell us how the site is doing without storing anything on your device, without identifying you, and without following you to other websites:

Umami— plain visitor statistics: which pages get read, which site or search engine sent you, roughly which country you're in.
Cloudflare Web Analytics — counts page loads and measures how quickly pages actually render for you, so we can tell when the site is slow. Cloudflare already protect and serve the site.

Because nothing is stored on your device, UK cookie rules don't require us to ask first, so this starts when you arrive. Our lawful basis is legitimate interests — knowing which pages are worth keeping and whether the site is fast enough. You can still say no: choosing Rejectin the cookie notice switches this off too, not just the cookies. We think a notice that says we measure how the site is used ought to mean exactly that. Changing your answer reloads the page — that's how we make sure anything already running actually stops, rather than just promising it will.

Fonts & third parties

Our typefaces are served from our own domain — your browser never contacts Google, and no font provider sets cookies. We never load advertising pixels or social widgets, and we don't sell or share your browsing. The one analytics script that needs your permission is Microsoft Clarity, and it loads only after you choose Accept.

Local storage

Alongside cookies, the site keeps two small preferences in your browser's local storage: tm-consent (your cookie choice from the notice above) and tm-nl(whether you've dismissed or joined the workshop-letter invitation, so we stop showing it). Neither identifies you, and neither leaves your device — clearing your browsing data removes both.

Managing cookies

You can block or delete cookies in your browser settings at any time. Please note that blocking the essential cookies above may stop the basket or checkout from working properly. You can change your analytics choice any time via Cookie settings in the footer — that one control covers both the analytics cookies and the cookieless counting.