Effective date: 21 February 2026 · Version 2
This Cookie Policy explains how LOFT PRESS LTD (“LoftPress”, “we”, “us”, company no. 16676296, registered in England and Wales) uses cookies and similar technologies on loftpress.shop (the “Site”). It supplements our Privacy Policy.
1. What cookies are
A cookie is a small text file that a website places on your device to remember information between page loads or visits. We also refer here to comparable technologies such as localStorage, sessionStorage and browser fingerprints that serve the same purpose.
2. Cookies we use today
We use two categories only. We do not run advertising cookies, cross-site tracking pixels, ad-personalisation cookies or third-party marketing tags.
2.1 Strictly necessary — always on
These are essential for the Site to work securely. You cannot turn them off; blocking them will break login, cart-like flows and security checks. No consent is required under UK PECR / EU ePrivacy for this category.
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
lp_access | Signed short-lived JWT that authenticates every API call once you log in | LoftPress | ~30 minutes (renewed silently) |
lp_refresh | Signed refresh token used to obtain a new access token without asking for the password again | LoftPress | 14 days |
csrf_token | Cross-site request forgery protection for state-changing requests | LoftPress | Session |
lp_lang | Remembers your language preference (EN / TR) | LoftPress | 1 year |
lp_consent | Remembers your cookie-banner choice so we don’t ask again | LoftPress | 6 months |
_bf_state | Brute-force protection state per IP/account | LoftPress | 30 minutes |
| Creem session cookies | Set during the Creem-hosted checkout flow only. Never set on loftpress.shop itself. | Creem (Armitage Labs OÜ) | See Creem cookie notice |
2.2 Preference / analytics — off by default
We do not currently deploy analytics or preference cookies on the marketing site. If we introduce them we will:
- Add them here before they go live.
- Load them only after you tick “Accept all” in the cookie banner.
- Give you a “Cookie Preferences” link in the footer to withdraw consent at any time (withdrawal takes effect immediately for future page loads).
We will never combine analytics with cross-site profiling and we will never sell any cookie-derived data.
3. How we ask for consent
On your first visit we show a cookie banner with two equally prominent buttons: “Only necessary” and “Accept all”. If you close the banner without choosing, we treat that as “Only necessary”. Your choice is stored in lp_consent and honoured across visits until it expires or you clear it.
4. How to control cookies
You can change or withdraw your choice at any time:
- In-site: the “Cookie Preferences” link in the footer re-opens the banner.
- In your browser: every modern browser lets you view, block, delete or restrict cookies per site. Refer to your browser’s help pages (Chrome, Firefox, Safari, Edge).
- Do Not Track / GPC: we honour Global Privacy Control (
Sec-GPC: 1) as a withdrawal of consent to non-essential cookies where applicable.
Blocking strictly necessary cookies will prevent login and checkout from working. Blocking optional cookies has no effect on core functionality.
5. Third parties in the payment flow
When you click Subscribe or Top-up you are redirected to a checkout page hosted by Creem (Armitage Labs OÜ), our Merchant of Record. Creem sets its own cookies on its own domain, subject to its own cookie notice. We do not read those cookies and Creem does not read ours.
6. Changes to this policy
We will announce material changes on the Status page and by bumping the version number at the top of this document.
7. Contact
Questions about cookies: support@loftpress.shop — response within 3 business days.