This website contains information about tobacco products and is intended for adults only.
By entering, you confirm that you are of legal age to purchase tobacco products in your country and that you agree to our terms of service.
This Cookie Policy explains how we use cookies and similar technologies on our website, what types of cookies we use, and how you can manage your preferences. For more information on how we process personal data, please see our Privacy Policy.
We use Google Analytics 4 (GA4) to measure and analyze website usage, which helps us understand how visitors interact with our site and how to improve its content and performance.
In practice, GA4 provides insights into which pages are visited, how users navigate the site, and what content is most engaging. Importantly, we do not use Google Analytics for any advertising or profiling purposes – it is solely used for aggregate analytics to improve the website's user experience.
Google Analytics 4 operates using first-party cookies (cookies set by our website's own domain) to distinguish users and their sessions. The common GA4 cookies set on our site are:
Cookie Name: _ga
Purpose: Distinguishes unique users (assigns a random ID to each user)
Expiration: 2 years
Cookie Name: _ga_XXXX (Where XXXX is our GA4 container ID)
Purpose: Persists session state (maintains session count and timestamps)
Expiration: 2 years
These cookie names are specific to Google Analytics 4. (Universal Analytics, the previous version, used additional cookies like _gid (24-hour user ID) or _gat (1-minute throttle) which GA4 no longer uses.)
Aside from Google Analytics, our site currently does not use any other third-party cookies.
Google Analytics does not collect information that directly identifies you (such as your name, address, or email) – in fact, GA4 is designed to avoid capturing personally identifiable information. However, it does collect various pseudonymous data and usage statistics through its cookies and tracking code. This data helps us understand how the site is used. Key categories of information collected include:
Device and browser details: GA4 records technical data about the device and browser you use to access the site – for example, your browser type (e.g. Chrome, Firefox), browser version, operating system (e.g. Windows, iOS), and device type (desktop, mobile, tablet). It may also collect screen resolution and language settings of your browser. This information helps us ensure the website works well on different devices and platforms.
Pages visited & navigation: Google Analytics tracks which pages you visit on our site, the order in which you view pages, and how you navigate through the site's content. It records events like page views and can track actions you take on the page (for example, link clicks, button clicks, file downloads, video plays, etc., if we have enabled tracking for those interactions).
Session information & timing: GA4 measures your session duration and timing – it can timestamp your visits, showing when you visited and how long you spent on each page or on the site overall. It also logs how often you visit (e.g. whether you are a new or returning visitor).
Referring source: The analytics also captures how you arrived at our site – for instance, whether you clicked a link from a search engine, a social media post, or another website (the "referrer" URL), or if you came directly. This traffic source data helps us understand where our visitors are coming from.
Geographic insights: Google Analytics uses your IP address to determine a coarse geographic location, such as your country, region, and city (this is approximate location, not a precise GPS location). For example, we might know that a user visited our site from "Paris, France," or "California, USA," but not an exact address. This helps us understand our audience distribution. The location is inferred from the IP address and is not more detailed than the city level.
Client ID (unique user identifier): Google Analytics assigns a random unique ID to each user to distinguish different visitors. This identifier is stored in the _ga cookie and is a string of numbers that does not reveal your identity – it's only used to differentiate one user from another for analytics purposes. For example, this allows GA to know that the same user who visited page A is the one who later visited page B, without knowing who that user is personally.
IP address (internet protocol address): When you load a page, your device's IP address is used by GA4 to get the location data as noted above. However, GA4 does not store full IP addresses in its database, thanks to IP anonymization (discussed below in section 4). The IP address is used momentarily to derive location and then discarded – Google Analytics never keeps the raw IP in GA4. This means we cannot see or retrieve your precise IP address from Google Analytics reports.
Because an IP address is considered personal data under GDPR (it can identify a device/approximate location), Google Analytics 4 employs IP anonymization by default. In GA4, as soon as an IP address is received for analytics, it is anonymized or masked. Specifically, Google's systems do not log or store your full IP address at all:
- For users in the EU, GA4 extra care: the IP address lookup for location is done on European servers and the raw IP is immediately discarded before any analytics processing. Even for non-EU users, GA4 does not permanently store IPs in analytics databases.
- In practical terms, this means only truncated or anonymized IP data is briefly used to determine (for example) that a visitor is in a certain city/region, and the full IP number is not recorded. Full IP addresses never appear in our Google Analytics reports or dashboards.
- GDPR compliance note: By anonymizing IP addresses by default, GA4 reduces the risk associated with collecting personal identifiers. We have ensured this feature remains enabled (in fact, GA4 does this automatically and it cannot be turned off, which is a privacy-by-design improvement over Universal Analytics). This is an important step in protecting user privacy and complying with European data protection requirements.
When you interact with our site, the usage data described above is sent to Google Analytics servers for processing. In this setup, Google LLC acts as our data processor for analytics data, and we (our website) are the data controller. We have entered into the appropriate Data Processing Agreement with Google as required by GDPR (via Google's Ads Data Processing Terms) to ensure your data is handled safely and lawfully.
Data storage and international transfer: The analytics data collected may be processed and stored by Google on servers located outside of your home country. In particular, Google Analytics data is often stored on Google's servers in the United States (and/or other countries). Therefore, there is an international data transfer of pseudonymous personal data (e.g. online identifiers and usage data) to the U.S.
- Safeguards for EU/UK data: Google states that it will protect data transfers in line with EU requirements. In practice, Google relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) for data transfer. (As of 2023, Google LLC is also certified under the EU–US Data Privacy Framework, which establishes that the U.S. provides an adequate level of protection for transferred EU personal data.) These measures are in place to ensure that your data enjoys a high level of protection even when stored or processed in the U.S. or other non-EU countries.
- We also want to clarify that Google only uses the Analytics data for our purposes, not for its own purposes. In other words, the data collected through these cookies is only used to provide us with aggregated reports and information about our website performance. Google does not share this analytics data with other parties or use it for advertising unless we explicitly enable additional Google features. We have not enabled any Google Analytics Advertising Features or data sharing with Google Ads on our GA4 property, so the data is not being used for remarketing or ad personalization. It is used strictly to help us understand website traffic.
(For example, if we had linked Google Analytics with Google Ads or enabled Google "Signals," additional advertising cookies and data collection would be involved, but we have not done that. This keeps our Analytics data focused only on general website statistics.)
- Data retention: We have configured our Google Analytics 4 property to retain collected data for a limited period. User-level and event-level data associated with cookies and user IDs in GA4 are retained for no more than 14 months (the maximum allowed in GA4's settings, which we use) before automatic deletion. This retention period is in line with the principle of data minimization – we do not keep analytics data longer than necessary.
Under EU and UK privacy laws – notably the ePrivacy Directive and the GDPR – cookies used for analytics (i.e. non-essential cookies) require the user's prior consent before they are placed on your device. Google Analytics cookies are not considered "strictly necessary" for the basic functioning of the site, so we do not activate GA4 tracking until you have given consent via our cookie banner or settings.
- Cookie Banner: When you first visit our site, you will see a cookie consent banner. Analytics cookies are defaulted to off (or blocked) initially. If you choose to "Accept" analytics cookies (or select preferences that enable analytics), only then will GA4 cookies be set and start collecting data. If you decline or ignore the banner, no Google Analytics cookies will be placed.
- Legal basis: The processing of analytics data is based on your consent (GDPR Article 6(1)(a)). You are free to refuse or withdraw consent at any time, without affecting your ability to use the core features of the site. We do not rely on legitimate interest for Google Analytics; we only operate it with consent, given the guidance from EU regulators.
- We record and honor your cookie choices. Unless and until you consent, the GA scripts will remain inactive (or run in a mode that doesn't store identifiable analytics data, such as Google's Consent Mode where applicable).
Opting out / withdrawing consent: If you have given consent to Google Analytics cookies but later change your mind, you can withdraw your consent at any time. We provide a few ways to do this:
- You can use our site's cookie settings mechanism (often accessible via a "Cookie Preferences" link on the site) to deselect or disable analytics cookies. Once you save your updated preferences, our site will stop using Google Analytics for your visits and will remove or disable the GA cookies on your browser.
- You can also clear cookies from your browser for our site, which will reset your cookie consent state. The next time you visit, you can choose not to opt in to analytics.
- Google also offers a more global opt-out option: the Google Analytics Opt-out Browser Add-on, which you can install in your browser. This add-on, provided by Google, prevents Google Analytics JavaScript from running and collecting your data on any site that uses GA (effective for all websites, not just ours).
We respect any of these choices and will not collect analytics data once you opt-out. Remember that because Google Analytics uses browser cookies, an opt-out is browser-specific. If you use multiple devices or browsers, you'll need to adjust settings on each.
For a more general description of how we handle personal data (beyond cookies) and to understand your rights (access, deletion, etc.), please see our site's Privacy Policy. Additionally, you can review Google's Privacy Policy for details on how Google handles data on its end. Google's privacy documentation also outlines its data protection measures and compliance with frameworks like the EU-U.S. Data Privacy Framework and SCCs for international transfers.
Last updated: 17.12.2025.