Cookies
What FreshMart stores on your device, what each item is for, and how long it lasts.
We use 4 cookies, and all of them are essential
We do not use cookies for advertising, tracking or profiling, and we do not build a profile of you across other websites. Everything below is needed to keep you signed in, keep your basket, keep the site secure, and show you the right shop's prices and delivery slots.
That is why we have not asked you to accept anything. There is nothing here you could decline and still be able to shop, so a consent box would be asking a question whose answer changes nothing. We tell you instead.
The cookies we set
| Name | What it is for | When it is set | How long it lasts |
|---|---|---|---|
__csrfEssential | Protects you from cross-site request forgery. Every form and action you submit carries a copy of this value, and the server refuses anything that does not match — which is what stops another website acting on your behalf. | On your first visit to any page. | 30 days |
cart_session_idEssential | Identifies your basket while you are not signed in, so the things you add are still there when you move between pages. When you sign in, the basket is merged into your account and this is discarded. | The first time you add something to your basket as a guest. | 30 days |
store_preferenceEssential | Remembers which FreshMart store serves your postcode, so prices, stock and delivery slots are the ones you can actually order from. Without it every page would have to ask for your postcode again. | Only when you enter a postcode to check delivery. | 30 days |
freshmart-storeEssential | Keeps you signed in. It holds your session and is what proves to us that a request for your orders, addresses or loyalty balance is really coming from you. | Only when you sign in. | Until the session expires or you sign out |
What we do not do
- No advertising or marketing cookies, and no ad networks.
- No cross-site tracking, and no profiling of you for targeted content.
- No session recording. We do not replay what you saw or what you clicked.
- Nothing is kept in your browser's local or session storage — the cookies above are the whole of what we store on your device.
- We do not sell or share any of it.
Other services your browser contacts
Some parts of the site are provided by other companies. None of them sets a cookie on FreshMart, but your browser does talk to them, so they are listed here.
- Stripe — taking payment
- When you pay, we send you to Stripe's own secure checkout page. Your card details never reach us. Any cookies used there are Stripe's, set on Stripe's site and covered by Stripe's privacy policy.
- Cloudflare Turnstile — sign-in security
- A challenge on the sign-in and registration forms that tells a person from an automated attack. It is what protects your account from password guessing.
- Vercel — hosting, page counts and speed
- Counts page views and measures how quickly pages load, so we can find the slow ones. It is cookie-free and stores nothing on your device.
- Sentry — error reports
- If something breaks, a report is sent so we can fix it. Email addresses are stripped from those reports and your cookies are removed before they are sent.
Controlling cookies
Every browser lets you see, block and delete cookies — usually under Settings, then Privacy. Because the four above are the ones that keep you signed in, hold your basket and protect your account, blocking them will stop those things working: you would not be able to sign in or check out.
There is no setting for us to offer you here, because there is nothing optional to switch off. If we ever add something that is optional, we will ask you first.
For everything else we do with your data — what we collect, why, and your rights over it — see our Privacy Policy. Questions about this page can go to privacy@freshmart.co.uk.