Cookies
Last updated October 31, 2026
UglySweater.shop uses cookies that the site needs to work or that remember a choice you made. Only if you click “Accept all” in the cookie banner (or switch on analytics in Settings → Privacy) do we also use Google Analytics, to see which pages and sweaters people look at, the Meta Pixel, to measure our ads on Facebook and Instagram, and session recordings of how you use the site (see below).
That consent banner is shown to visitors in the EU, the rest of the EEA, the UK and Switzerland (and to anyone whose country we can’t tell from their IP address). Elsewhere, for example in the United States, analytics and advertising cookies are on by default: you can switch them off in Settings → Privacy, and the “Do not sell or share my personal information” link at the bottom of every page turns off the Meta Pixel and Google’s advertising features. We treat a browser’s Global Privacy Control signal the same way.
Essential cookies
| Cookie | What it does | Kept for |
|---|---|---|
uglysweatershop-session | Keeps you signed in and your session working | 120 minutes after your last visit |
XSRF-TOKEN | Protects forms against cross-site request forgery | Same as the session |
remember_web_… | Keeps you signed in, only if you tick “Remember me” | Up to 400 days, or until you sign out |
guest_token | Remembers the designs you made before signing in | 1 year |
cookie_consent | Remembers your cookie banner choice | 180 days |
do_not_sell | Remembers that you opted out of the sale and sharing of your personal information | 1 year |
tinsel | Remembers whether you switched the snow on or off | 1 year |
Analytics and advertising cookies
| Cookie | What it does | Kept for |
|---|---|---|
_ga, _ga_… | Google Analytics: tells visits apart so we can count visitors and see which pages they view | 2 years |
_fbp | Meta Pixel: recognises your browser so we can see which Facebook and Instagram ads lead to visits, sign-ups and orders | 90 days |
session_replay_id, and sr:… in your browser’s local storage | Session recording: links the pages of one visit into one recording and remembers your choice | Until the visit ends; the choice until you change it |
Session recordings
With your consent we record what happens on the pages you visit (clicks, scrolling, what the page shows) so we can see where the site confuses people or breaks. What you type in forms is masked, and your photos, addresses and email address are left out. Recordings stay on our own server. Only our staff can watch them, and an AI assistant reads them once a week to find errors and places where people get stuck; it never sees names or email addresses. They are deleted after 30 days.
You can change your mind at any time in Settings → Privacy (with an account) or by deleting the cookie_consent cookie, which brings the banner back.
When you pay, Stripe’s checkout page (on stripe.com) sets its own cookies for payment security and fraud prevention; see Stripe’s privacy policy.
You can delete cookies in your browser settings at any time. Without the session cookie you can’t sign in or order.