Last updated: 15 May 2026
Cookies are small text files that a website stores on your device when you visit it. They let the site remember things like your login state, your cart contents, or how you got to us. Similar technologies include local storage, session storage, and pixels — we use the term "cookies" in this policy to cover them all.
We group cookies into three categories:
| Name | Purpose | Category | Duration | Set by |
|---|---|---|---|---|
| rr_session | Keeps you signed in during a browsing session. | Strictly necessary | Session | Roast & Rise |
| rr_cart | Remembers your shopping cart between page loads. | Strictly necessary | 7 days | Roast & Rise |
| rr_csrf | Protects checkout forms from cross-site request forgery. | Strictly necessary | Session | Roast & Rise |
| rr_consent | Records your cookie-banner choices. | Strictly necessary | 12 months | Roast & Rise |
| plausible_ignore | Excludes staff devices from analytics. | Analytics | Permanent | Plausible |
| __stripe_mid | Fraud prevention on Stripe checkout. | Strictly necessary | 12 months | Stripe |
| __stripe_sid | Fraud prevention on Stripe checkout. | Strictly necessary | 30 min | Stripe |
For site analytics we use Plausible, which is cookieless by default and does not collect personal data. It records aggregate page-view counts, referrers, and device types only. We chose it over Google Analytics because it did not require us to ask you for consent for analytics under GDPR.
You can control cookies in three ways:
Blocking strictly necessary cookies will make parts of the site (login, cart, checkout) stop working.
We update this policy when we add or remove a service that uses cookies. Material changes will be reflected in the table above and in an updated "Last updated" date.
Questions? privacy@roastandrise.example.