Cookies
The German version is legally binding. This translation is for convenience.
A banner is only necessary when cookies are set that go beyond what is technically required — analytics, advertising, tracking. We use none of these. For purely functional cookies, § 25 (2) no. 2 TDDDG permits setting them without consent. Hence: no banner, no "Accept all" button, no consent service.
Complete list
| Name | Type | Purpose | Retention |
|---|---|---|---|
vestra_retail |
session cookie | Holds your session together: contents of the bag, Vault reservations, seller login and the security token against form forgery (CSRF). Contains only a random identifier, no personal content. | until the end of the browser session |
vr_lang |
functional | Remembers the chosen language so you do not have to choose it again on every click.
Content: a language code such as en. |
180 days |
vr_member |
functional | Set only once you have confirmed Vault membership by e-mail, and unlocks early access to new lots. Contains an expiry date, a truncated hash of your e-mail address and a signature — not your address in plain text. | 1 year |
vr_wish |
functional | Your wishlist. Content: a list of item identifiers, nothing else. Not reported to the server unless you open the wishlist page yourself. | 180 days |
vr_seen |
functional | The items you viewed most recently, so you can find them again. Likewise item identifiers only. | 30 days |
Cookies from Stripe
When paying you switch to a page operated by Stripe. There Stripe sets its own cookies, which are required for payment processing and fraud prevention. This happens on Stripe's domain and is subject to Stripe's privacy policy. No Stripe script is embedded on our own pages.
No local storage, no fingerprints
We use neither localStorage nor sessionStorage, no pixels, no
fingerprinting techniques and no cross-device recognition. All fonts, styles, scripts and images
are hosted on our own server; no connection to third parties is made when a page loads.
Deleting or blocking cookies
You can delete or block cookies at any time in your browser settings. If you block the session cookie, the bag, checkout and seller login stop working — the technical thread connecting your steps is missing. Language and Vault access can be blocked without problems; we then ask for the language again and early access is not available.