Cookie policy
1. The short version
Visits are counted without cookies, for everybody, by Vercel Web Analytics: nothing is stored on your device for that.
Two items in your browser are strictly necessary for the shop to work: your basket, and your answer to the cookie notice. They need no consent.
One more thing is stored only if you press Accept: an analytics identifier from PostHog, so that we can see how the shop is used (section 2). If you decline, it is never set and nothing about your visit is sent to PostHog.
There is no advertising cookie, no tracking pixel, no tag manager and no advertising network on any page. Our payment processor, Stripe, may store items for payment and fraud prevention (section 5).
2. What is stored, and why
imposter.cart — what you have put in your basket, as a list of items and sizes. Without it the basket empties every time you open a new page. Stored in local storage. Kept until you clear it, empty the basket, or clear your browser's storage for this site.
imposter.cookies — whether you have answered the notice at the bottom of the screen, and what you answered. Without it the notice reappears on every page. Stored in local storage. Kept until you clear your browser's storage for this site.
Only if you accepted: ph_phc_…_posthog — a random identifier and the settings PostHog needs, stored as a cookie and in local storage, so that your visits to the shop can be counted as one person's. Set by PostHog. Kept for up to one year, or until you clear your browser's storage for this site.
The administrative area of this site, which only we can reach, sets one session cookie so that we do not have to sign in on every page. It is never set for visitors to the shop.
3. Legal basis
Under Article 5(3) of Directive 2002/58/EC and applicable implementing rules, consent is not required for storage that is strictly necessary to provide a service explicitly requested by the user. Remembering the contents of a basket, and remembering your answer to the notice, both fall within that exception.
The PostHog identifier is not strictly necessary, so it relies on your consent: it is set only after you press Accept. Declining is recorded and respected — nothing is set and nothing is sent.
You can withdraw consent at any time by clearing this site's data in your browser; the notice will then ask you again.
4. How to remove it
Clearing site data for this site in your browser removes everything listed above. Every current browser offers this under privacy or site settings, and every browser also offers a private or incognito window in which nothing is kept after the window is closed.
Doing so empties your basket and withdraws any consent you gave; the notice will ask you again on your next visit.
5. Payments, and pages that are not ours
Payments are handled by Stripe. The Apple Pay and Google Pay buttons on poster pages are loaded from Stripe, and the rest of the payment is completed on a page hosted by Stripe. Wherever Stripe's code runs — on our pages or on theirs — Stripe may set cookies such as __stripe_mid and __stripe_sid, which it uses to process the payment and to detect fraud. These are strictly necessary for paying safely, are not used by us for anything, and do not require consent. They are governed by Stripe's own privacy and cookie notices (stripe.com/privacy and stripe.com/cookie-settings).
Links from this site to anywhere else are subject to the notices of the site you arrive at.
6. Changes
This notice was last updated on 4 October 2026. If we ever add anything that stores or reads information on your device beyond what is listed above, this notice will be updated before it goes live, and consent will be requested where the law requires it.