Last updated: October 17, 2026

This page explains the cookies and similar technologies used on nomadrugs.com: what they do, who sets them and how long they last. You can change your choice at any time using the “Your Cookie Settings” link at the bottom of every page.

Essential cookies (always on)

These are needed for the shop, payments and your cookie choice to work.

Cookie	Provider	Purpose	Lasts
wp_woocommerce_session_…, woocommerce_items_in_cart, woocommerce_cart_hash	WooCommerce (this site)	Your cart and checkout	Up to 48 hours / until you close the browser
_savt (on squareup.com), __cf_bm (on pci-connect.squareup.com)	Square	Payment fraud prevention, on product, cart and checkout pages	Up to 400 days / 30 minutes
NID (on google.com)	Google, for the Google Pay button (through Square)	Set by Google when the Google Pay button loads on product pages; Google uses it to remember preferences and for security	Up to 6 months
l7_az, sc_f and one with a random name (on paypal.com); __cf_bm (on paypal.com subdomains)	PayPal	Payment fraud prevention, on cart and checkout pages	Up to 400 days / 30 minutes
moove_gdpr_popup, wp_consent_…	GDPR Cookie Compliance, WP Consent API (this site)	Remember your cookie choice	90 days
__cf_bm, cf_clearance	Cloudflare	Security checks that protect the site and checkout from bots	30 minutes to a few hours

Instagram feed – The Instagram feed on our homepage and contact page is provided by Elfsight. Elfsight’s servers set two short-lived technical cookies on their own domain: _cfuvid (until you close the browser) and elfsight_viewed_recently (a few seconds).

Analytics cookies (only if you allow them)

Cookie	Provider	Purpose	Lasts
_ga, _ga_339HW2JGS9	Google Analytics	Count visits and understand how the site is used	Up to 2 years

Marketing cookies (only if you allow them)

Except our newsletter cookies: these are set for newsletter subscribers unless you turn marketing cookies off (see the last row).

Cookie	Provider	Purpose	Lasts
sbjs_current, sbjs_first, sbjs_session, sbjs_udata and related	WooCommerce order attribution (this site)	Record which website, search, ad or email brought you, and attach it to your order	Your visit (ends after 30 minutes of inactivity)
Google advertising signals (no extra cookie on this site)	Google	Allow advertising measurement from your Google Analytics data	–
mailpoet_subscriber, mailpoet_page_view, mailpoet_revenue_tracking	MailPoet, our newsletter tool (this site)	Set when you click a link in one of our newsletter emails or log in: recognise newsletter subscribers and see which emails lead to purchases. Set unless you’ve turned marketing cookies off.	Up to 400 days / 14 days

Services that run without cookies

These receive basic technical information when a page loads (the page address, the referring page, your browser type and your IP address), whatever you choose in the cookie banner:

Google Analytics (cookieless mode): until you allow analytics, Google receives page views and shop events (such as rugs viewed) without any cookie or lasting identifier, and uses them for aggregated reporting and modelling.
Independent Analytics: our own visitor statistics, stored on our server. It records pages viewed and the referring website or campaign, without cookies.
Cloudflare: security, performance and anonymous page-speed statistics.
Square, Google Pay and PayPal: their payment scripts load on product, cart and checkout pages. The security cookies they set are listed under Essential cookies above.
Google Maps (contact page), Google Fonts, and the Elfsight Instagram feed (its cookies are listed above).

Changing your mind

Click “Your Cookie Settings” at the bottom of any page to open your cookie settings. If you withdraw consent, we delete the analytics and marketing cookies this site set, and the page reloads with them switched off.

Questions

Email us at [email protected]. For how we handle personal information, see our privacy policy.