Cookie policy

This policy explains storage technologies used on astarforyou.com.

Version 1.0 · Last updated: 10 September 2026

Privacy notice →

Personalised advertising

Marketing consent covers measurement. The separate ‘Personalised advertising’ choice allows eligible visits, basket activity and purchases to be used to create audiences and show you relevant AStarForYou ads on Google, Meta and TikTok when the service is enabled. It also requires Marketing; earlier consent to measurement alone is not extended. You can withdraw this choice in cookie preferences while keeping measurement enabled. Turning off Marketing also turns off personalised advertising. Dedications, names, personal dates, photographs, private links and memorial journeys are excluded. Withdrawal stops subsequent use but does not recall events already received by the platforms.

What cookies are

Cookies and similar storage technologies place or read small values on a device to provide functions, remember choices or measure use.

Cookie categories

Necessary: required for site operation, security, cart, session, locale and cookie choices. They are always active and do not require consent.
Preferences: remember non-essential choices that improve navigation. They are active only with consent.
Analytics: help us understand aggregate site use. They are active only with consent.
Marketing: Allow Google Ads, Meta and TikTok to measure campaigns using events and pseudonymous identifiers. Dedication text is excluded. This choice does not enable personalised advertising.
Personalised advertising: Allow eligible visits, basket activity and purchases to be used to show you relevant AStarForYou ads on Google, Facebook, Instagram and TikTok. Marketing consent is also required; you can leave this off.

Non-necessary categories are never preselected. Without an explicit choice, they remain disabled.

The following table lists the storage technologies used by the site. The locale preference changes language only after the user chooses it; browser or IP language is never forced.

Cookies used by the site, with category, purpose and duration
Name	Category	Purpose	Duration
cookie_consent	Necessary	Stores the version, categories and date of your cookie choices.	1 year
cart_id	Necessary	Links the shopping cart to your visit.	Up to 60 days
asfy_locale	Necessary	Stores the language explicitly chosen by the user.	1 year
asfy_acquisition	Analytics	With consent, links the public visit to the basket and order before payment. Contains no names or dedication text.	Cookie up to 30 days; server evidence up to 30 days from creation, revocable; visit ends after 30 minutes of inactivity
asfy_analytics_attribution_session / asfy_analytics_session_seen	Analytics	With consent, links the public visit to the basket and order before payment. Contains no names or dedication text.	Browser local/session storage; context renewed after 30 minutes of inactivity or a market change and removed on withdrawal
asfy_ga4_binding	Analytics	Links pre-checkout analytics consent to the purchase using a random key, without dedication content.	Up to 24 hours from GA4 session start; revocable
asfy_google_ads_measurement	Marketing	Links the Marketing choice made before checkout to the Google Ads conversion.	Up to 7 days; revocable
asfy_tiktok_measurement	Marketing and personalised advertising	When TikTok is enabled and both purposes are consented to, links eligible events using a random key.	Up to 30 days; revocable
asfy_meta_measurement	Marketing	Links consented events for Meta measurement using a random key; no dedication content.	Up to 7 days; removed on withdrawal
_gcl_ls (localStorage)	Marketing	Local storage used by Google Ads after Marketing consent.	Until withdrawal or clearing browser data
asfy_analytics_attribution (localStorage)	Analytics	Stores first-visit attribution to associate analytics events; created only after consent.	Until cleared from browser data
asfy_analytics_session (sessionStorage)	Analytics	Associates analytics events within the same session; created only after consent.	Session; deleted when the tab or browser closes
_ga	Analytics	Google Analytics distinguishes visits and produces aggregate statistics; set only after consent.	Up to 2 years
_ga_<ID>	Analytics	Google Analytics stores session state; set only after consent.	Up to 2 years
_gcl_*	Marketing	Google Ads measures whether a campaign contributed to a purchase; set only after Marketing consent.	Up to 90 days

Third parties

During payment, the payment provider may set technical and anti-fraud cookies required to secure the transaction.

With current Marketing consent, Meta Platforms receives eligible visit, product view, basket, checkout and qualified purchase events. The server sends pseudonymous identifiers, an advertising click identifier when present, browser technical information, event time, catalogue identifiers and, when available, net value and currency. Without the separate Personalised advertising choice, server requests instruct Meta to use the events for attribution only. When the service is enabled, consent to both purposes also permits the Pixel and audience use; the Pixel receives a limited copy with the same identifier to avoid duplicates. We do not send Meta email addresses, even hashed, names, dedications, personal dates, photographs, private paths or access tokens. Memorial journeys are excluded. The linking cookie lasts up to 7 days. Withdrawal stops subsequent sending and starts removal of linking identifiers; it cannot recall events already received by Meta.

To respect the choice made before purchase, we retain revocable links between consent, visit and order: up to 24 hours from the start of the Google Analytics session, 7 days for Google Ads and Meta, and 30 days for TikTok when enabled. Expired links are rejected immediately; server identifiers are removed in periodic cleanup cycles. Consent evidence and accounting records follow their respective retention requirements. An expired link is not reconstructed retrospectively to attribute a purchase. These periods do not apply to the gift link. When enabled, server delivery to Google Ads may take place within 24 hours of payment even if you do not return to the website, using net value, currency, a pseudonymous transaction identifier and the hash of the order email address. It requires Marketing consent obtained before payment and still valid; withdrawal stops subsequent sending but cannot recall data already received. Dedication content and private or memorial journeys remain excluded.

Google Analytics collects usage statistics only after consent to the Analytics category. Google signals and advertising personalisation are disabled.

Google Ads measures purchases attributed to campaigns only after consent to the Marketing category. It receives value, currency, a pseudonymous transaction identifier and, for enhanced conversions, the SHA-256 hash of the email address normalised on our server. The tag does not transmit the plain-text email, name, postal address or dedication content. Advertising personalisation remains disabled.

We do not use third-party analytics or marketing cookies without explicit consent. If consent is withdrawn, measurement is disabled and accessible Analytics cookies are removed.

Changing consent

Use ‘Manage cookie preferences’ in the footer at any time to change or withdraw optional choices. Withdrawal does not affect prior lawful processing and does not disable necessary storage.

You can also block or delete cookies in your browser. Deleting cookie_consent resets your preferences and the banner will be shown again on the next visit.

Personalised advertising

What cookies are

Cookie categories

Cookies used by this site

Third parties

Changing consent