Your choices
Essential cookies and browser storage keep the cart and checkout working and remember your privacy choices. Optional Mizuna analytics runs only if you allow Analytics or choose Accept all. Optional Meta Pixel and Google Ads measurement runs only if you allow Advertising or choose Accept all. We ask again for the expanded browser, device and approximate-location analytics notice.
Choose Accept all, Reject optional or Choose settings in the popup. You can review or change your preferences at any time using Cookie settings at the bottom of every page. Ignoring the popup, scrolling or closing settings does not give consent. Declining optional tracking does not stop you browsing or buying.
What cookies and browser storage mean
Cookies are small values stored by your browser. Local storage and session storage are similar ways for a website to remember information on your device. This policy covers both cookies and those storage technologies.
Essential storage we use
- mizuna_collector_preference (local storage): remembers dismissal of the Collector Access popup for seven days, or signup for 90 days. It contains only an expiry date. Footer signup can reopen it anytime. mizuna_collector_code, mizuna_checkout_collector_code and mizuna_checkout_request (session storage) remember a requested welcome code and checkout attempt in the current tab, not the email address. The saved welcome code expires after two hours; checkout request reuse expires after 30 minutes. These support the offer and do not identify visitors for advertising.
- mizuna_consent_preferences (local storage): records your analytics and advertising preferences, the notice version, and saved/expiry dates for up to 180 days. It contains no advertising visitor identifier, contact details or payment details. If your browser prevents storage, your choice applies to the current page only.
- mizuna_art_basket (session storage): remembers selected artworks, formats and quantities for up to two hours in the current browser tab/session. The cart contains no contact or payment details. An older mizuna_augusta_basket entry may be read and migrated when updating an existing cart.
- mizuna_live_checkout (cookie): a random checkout security value that protects checkout and access to order status. It expires after two hours and is Secure, HttpOnly and SameSite=Strict. The isolated test checkout uses mizuna_test_checkout instead.
- __Host-mizuna_owner (owner dashboard cookie): remembers a successful dashboard password sign-in for up to 30 days. It is Secure, HttpOnly and SameSite=Strict, is set only after dashboard sign-in, and is removed when signing out. It is not used to track shoppers.
Payment, hosting and fonts
Stripe and the payment provider you choose, such as PayPal, Apple Pay, Google Pay or Klarna when available, may process device information and use storage to provide payment, authentication and fraud prevention. Their own notices describe their processing. Declining optional Mizuna analytics or advertising does not disable these payment functions.
Cloudflare hosts and protects the website. Google Fonts supplies the typefaces. Requests to hosting, font and payment services can include technical information such as your IP address. Font delivery is not a Google Analytics or advertising tag.
Optional Mizuna analytics
Consented analytics also records browser family/major version, operating system, device family, screen and viewport size, language/timezone, approximate IP-derived city/region/country and network provider, referring domain and arrival-source evidence. Owner/test browser marks and automation signals help separate testing; these are clues rather than proof of identity. No raw IP, full user-agent string, full referring URL or fingerprint is retained. A browser mark named mizuna_analytics_role is saved only when explicitly requested and can be cleared from the private dashboard. Location may be inaccurate with mobile networks, VPNs or privacy services.
With your consent, Mizuna measures pages visited, active browsing and section viewing time, artwork/format choices, cart and checkout progression, error categories and verified purchases. We use campaign tags in landing links to compare interest from different ads and improve the website. This is first-party measurement built by Mizuna and hosted in a separate Cloudflare D1 database. It does not send behaviour to Google or Meta.
Analytics records use random browser/session identifiers. We do not record typed form values, names, email or postal addresses, raw IP addresses, card details or screen/session recordings in behaviour records. Consented purchase records can be associated with an internal order reference, amount and format; customer contact details stay in the separate order system.
mizuna_analytics_visitor (local storage): a random browser identifier, retained for up to 30 days. mizuna_analytics_attribution (local storage): source, medium, campaign and ad tags, including first and last known campaign information, retained for up to 30 days after a tagged visit. mizuna_analytics_session (cookie): a random analytics-session security value, Secure, HttpOnly and SameSite=Strict, refreshed during consented activity and expiring after 30 minutes. These are set only after analytics opt-in.
Detailed behaviour, campaign spend and analytics purchase associations are retained for up to 90 days. Cleanup runs when analytics or private-report requests are received; if there is no traffic, deletion takes place on the next relevant request. Previously exported reports are reviewed separately and are not automatically deleted by this cleanup.
Optional Meta advertising measurement
With advertising consent, Meta Pixel shares page visits, artwork identifiers, selected formats and values, cart additions, checkout starts, new Collector Access sign-ups (never your email address) and verified completed purchase values in USD with Meta. Meta also receives technical information such as browser/device information, IP address, page URL and referrer, and may associate activity with your Facebook or Instagram account to measure and improve ads. We do not send typed form values, names, email addresses, postal addresses or card details to the pixel; automatic advanced matching and automatic event detection are off.
Meta may set _fbp and, following a Facebook ad click, _fbc first-party cookies, normally lasting up to 90 days. It may use its own third-party cookies subject to browser restrictions and its policies. mizuna_meta_purchases in local storage records random order event references and timestamps to suppress repeated purchase events when confirmation is refreshed. Entries older than 90 days are removed when consented tracking next runs, or when you withdraw consent. Browser purchase events require a server-verified paid order and current advertising consent.
Meta Platforms Ireland Limited provides the measurement service; processing may occur internationally. See Meta’s privacy policy at https://www.facebook.com/privacy/policy/ and business tools information at https://www.facebook.com/legal/technology_terms for its purposes, retention and transfer safeguards. Google Analytics and server-side advertising forwarding are not connected.
Optional Google Ads measurement
With advertising consent, the Google tag measures page and artwork views, cart additions, checkout starts and server-verified purchases with USD values and a random transaction reference. It receives browser/device information, IP address, page URL and advertising click/cookie identifiers such as gclid, gbraid and wbraid, to attribute purchases and improve Google ads. Basket and checkout conversions are observation signals, with zero revenue; only paid orders send purchase revenue. We do not send typed form contents, customer names, email addresses, postal addresses or card details. Enhanced contact matching is disabled.
We use basic consent mode: the Google tag does not load before advertising consent. Google may set _gcl_ cookies for ad attribution, configured for up to 90 days. mizuna_google_purchases in local storage prevents repeat purchase events and is pruned after 90 days on consented use. Withdrawal stops new events, updates Google consent to denied, removes accessible Google ad cookies and our purchase-deduplication storage. Already received Google records are subject to Google’s retention and controls, not deleted automatically by withdrawal.
Google Ireland Limited provides the service; information may be processed internationally under its terms and transfer safeguards. See https://policies.google.com/privacy and https://business.safety.google/adsprocessorterms/.
Changing your mind
Use Cookie settings at the bottom of any page to change preferences or select Reject optional. Your changes are saved for this browser. You can also clear site storage in your browser to remove the saved preference and see the popup again. Each browser and device has its own choice. We will ask again after expiry or when the services or purposes materially change.
Reject optional or turn Analytics off and save to stop measurement. We clear the analytics browser identifiers and request deletion of the analytics-session cookie and revocation of its server association. Withdrawal stops further collection; it does not automatically erase information collected before withdrawal. Contact us about deletion requests. Turn Advertising off and save to stop Meta and Google events and remove our accessible _fbp/_fbc cookies and purchase-deduplication storage. Meta receives a consent-revoke command if its pixel was loaded. Provider-controlled records and third-party cookies follow Meta’s settings and policies. We do not use a server-side route to bypass a refusal.
Contact and updates
For questions about cookies or your information, contact Lukas Roe, trading as Mizuna Art, at info@mizunaart.com or 6 South Road, Baldock, SG7 6BY, Hertfordshire, United Kingdom. See the privacy policy for order processing, sharing, retention and your rights. Updated 11 October 2026.