Cookie Policy
Cookies are small files a website stores on your device. We keep ours to the minimum — what's needed for the shop to work and stay secure. Anything beyond that, including how we measure which pages get read, is set out below with a way to switch it off.
Last updated · August 2026
Our approach
Timbermere uses strictly-necessary cookies to run the basket and keep the site secure (these need no consent under UK law). Beyond that there are two separate choices, and you can allow one without the other.
Analytics — Microsoft Clarity, so we can see what works and fix what doesn't. Advertising — we run adverts on Google, and these cookies let us see whether an advert actually led to an order. They are set only if you choose Accept all.
We don't sell your data, and we don't use these cookies to follow you around the web with our own adverts. Separately, we count page views without setting any cookies at all — that's the section after next.
The cookies we use
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
snipcart_session | Snipcart (our checkout) | Remembers the pieces in your basket and carries your order through checkout. | Session / up to ~1 year |
__cf_bm | Cloudflare | Tells real visitors from automated bots, to protect the site from abuse. | ~30 minutes |
cf_clearance | Cloudflare | Records that your browser passed a security check, so you aren't re-challenged. | Session / up to ~1 year |
_clck | Microsoft Clarity | Keeps a Clarity ID so repeat visits aren't double-counted. | ~1 year |
_clsk | Microsoft Clarity | Links the pages of one visit into a single session for the recording. | ~1 day |
CLID | Microsoft Clarity (clarity.ms) | Identifies the browser the first time Clarity loads, to group your session. | ~1 year |
_gcl_au | Google (Google Ireland Ltd) | Records that a visit came from a Google advert, so we can tell which adverts lead to an order. | ~90 days |
_gcl_aw | Google (Google Ireland Ltd) | Stores the click reference from a Google advert. Set only if you actually arrived from one. | ~90 days |
_gcl_gs, _gcl_ag, _gcl_dc | Google (Google Ireland Ltd) | Variants of the same click reference, used for different Google advert formats. | ~90 days |
The Snipcart cookie is only set once you start using the basket. The Cloudflare cookies protect the site and its visitors and are part of our hosting.
The Microsoft Clarity cookies are set only if you accept analytics — and the checkout is masked from recordings. If you change your answer to no, we switch Clarity off and delete the two it set on this site (_clck and _clsk); CLID is set by clarity.ms on its own domain, so only your browser can clear that one.
The Google cookies are set only if you choose Accept all, and never on the strength of an analytics-only answer.
Measuring without cookies
Not every kind of measurement needs a cookie. These tell us how the site is doing without storing anything on your device, without identifying you, and without following you to other websites:
- Umami — plain visitor statistics: which pages get read, which parts of the shop get used (such as items added to the bag), which site or search engine sent you, roughly which country you're in.
- Cloudflare Web Analytics — counts page loads and measures how quickly pages actually render for you, so we can tell when the site is slow. Cloudflare already protect and serve the site.
Because nothing is stored on your device, UK cookie rules don't require us to ask first, so this starts when you arrive. Our lawful basis is legitimate interests — knowing which pages are worth keeping and whether the site is fast enough.
The cookie notice does not control this. Reject answers a question about cookies, and these two set none, so they keep counting either way. We'd rather say that plainly than have a button quietly mean less than it looks like it means — so here is the switch that does stop them. No account, no cookie banner, no catch:
Turning it off reloads the page. That's deliberate: it's how we make sure anything already running actually stops, rather than just promising it will. Your choice is remembered on this device and survives any later change to this policy — we won't make you object twice.
Advertising
We advertise on Google. When someone clicks one of those adverts and later buys something, we need a way to connect the two — otherwise we're paying for adverts with no idea whether they work. That connection is what the _gcl cookies above do, and it is the only thing we use them for.
What this does not do, deliberately: we have switched off Google's advertising-audience collection, so these cookies are not used to build a profile of you, to personalise adverts, or to follow you around other websites with pictures of chopping boards. We don't sell your data. Google acts as an independent controller for the advert data it receives — their privacy policy covers what they do with it.
Because these cookies are for advertising rather than for running the shop, UK law requires us to ask first. Nothing is set until you choose Accept all, and Analytics only means exactly that — no advertising cookies at all. If you change your mind, use Cookie settings in the footer: we switch the tag off, delete the cookies it already set, and reload the page so nothing keeps running on the promise that it stopped.
Fonts & third parties
Our typefaces are served from our own domain — no font provider sets cookies, and loading a page doesn't fetch a typeface from anyone else. We don't load social-media widgets, and we don't sell or share your browsing. The one analytics script that needs your permission is Microsoft Clarity, and it loads only after you choose Accept. The one advertising script is Google's, and it loads only after you choose Accept all — if you don't, your browser never contacts Google at all.
Local storage
Alongside cookies, the site keeps a few small preferences in your browser's local storage: tm-consent (your cookie choice from the notice above), tm-analytics-optout (whether you used the switch above to stop the cookieless counting), tm-nl (whether you've dismissed or joined the workshop-letter invitation, so we stop showing it), and tm-fav (your saved favourites, so your list is there when you come back). None of these identifies you, and none leaves your device — clearing your browsing data removes them.
Separately, if you compose an engraving, pick a size, or choose a juice groove or feet on a product page, the wording, layout and choices you make are kept in tm:engraving for the current visit only (session storage, gone when the tab closes), so following a link — say, to the returns policy — doesn't lose your work. That information stays on your device unless you add the piece to your bag, when it travels inside your own order and nowhere else.
Managing cookies
You can block or delete cookies in your browser settings at any time. Please note that blocking the essential cookies above may stop the basket or checkout from working properly. You can change your choice any time via Cookie settings in the footer. That answer covers the cookies; the cookieless counting has its own switch in the section above. Advertising is a separate answer — changing one never changes the other.
See also our Privacy Policy.