Small print· 5 of 7
Cookies, and no surprises
The four categories, every key this site writes in your browser with its real name and lifetime, how long your answer stands, and what an advertising tag may and may not do before you agree.
Last revised 29 September 2026.
In short
- The shop writes 3 items into your browser’s local storage, all of them strictly necessary; the country order pages add up to 3 more, one of them for advertising. It sets no cookies of its own.
- Advertising tags stay restricted until you say yes. “No thanks” keeps them that way and the shop works exactly the same.
- Your choice stands for 12 months, then we ask again. Change it sooner with “Cookie settings” at the foot of any page.
Cookies, local storage and tags
Three different things get lumped together under the word cookies. A cookie proper is a scrap of text a site asks your browser to hold on to, and which then rides along with every request you make to that site. Local storage is a cousin with a useful difference: a notebook kept inside your browser, legible only to the site that wrote in it, whose contents are never attached to a request and so never travel anywhere. A tag, sometimes a pixel, is something else again — code belonging to another company, here only Google for its advertising tag, which can plant cookies of its own and send word home.
The law draws the line in the same place for all three. Anything strictly necessary for something you asked the site to do needs no permission. Everything else needs your agreement first, freely given, and as easy to take back as it was to give. That is how this site is built, and the rest of this page is simply the detail.
The four categories
Cookie choices across Europe are built out of the same four groups, so you have met them before. What follows is the meaning of each, and beside it the only thing that really matters: what BonnyBuy actually puts in there.
Strictly necessary
No consent needed. Without these the thing you asked for cannot be done.
Every one of the 3 items the shop itself writes belongs here: the record of your cookie choice, and the pair that let the confirmation screen read your order back to you. So do 2 of the keys written by the country order pages. All of them are read only by this site.
Preferences
Consent needed. Remembers settings you chose, such as a language or a layout.
Empty. This site has no setting worth remembering, so it writes nothing in this category.
Statistics
Consent needed. Counts visits and pages so the shop can be improved.
Empty. Nothing is set for statistics: this shop runs no analytics product of any kind. The switch is there only because it also governs what the Google tag may do with analytics storage.
Advertising
Consent needed. Lets an advertising company recognise a browser and connect an advertisement to an order.
In use. What the tags may do before and after you agree, and exactly what they send, is set out further down. The country order pages also keep bny_conv_<language>_<product>_<order time>, a marker noting that a sale has already been reported to Google Ads.
Two of the four are empty, and we would rather say so than pad the list. If that ever changes, this page changes with it, and the date at the top moves.
Every key this site writes
BonnyBuy sets no cookies of its own for visitors. It uses the local storage keys below, listed by their real names, exactly as your browser holds them. None is sent to us with a page request, none is shared with anyone, and none can be read by another website: all of them are read only by this site.
bny_cookieslocal storage · strictly necessary
- Purpose:
- Remembers the cookie choice you made, so we do not ask on every page.
- Holds:
- Yes or no for advertising, yes or no for statistics, and the time you chose.
- Lifetime:
- 12 months, then the choice is asked again. Sooner if you change it or clear this site's data.
bny_parcellocal storage · strictly necessary
- Purpose:
- Shows your order recap on the confirmation screen after you place an order.
- Holds:
- Order reference, time, total, quantity, the item, your first name, phone number and country.
- Lifetime:
- Until your next order replaces it or you clear this site's data. It is written only after the order has been accepted.
bny_parcel_told_<order time>local storage · strictly necessary
- Purpose:
- Marks an order as already counted, so reloading the confirmation screen never counts it twice.
- Holds:
- The single character 1.
- Lifetime:
- Until you clear this site's data.
Only on product pages written in your language
Some products also get a page in the language of a single country, with its own short order form. Those pages write up to 3 further keys: 2 strictly necessary, and one that belongs to advertising, as its label shows.
bny_lead_<language>_<product>local storage · strictly necessary
- Purpose:
- Lets the confirmation screen of that page show your details back to you once the order form has gone.
- Holds:
- The name, phone number (with the country's dialling code) and address just sent from that form, the time it went, and a mark saying whether it repeated an order already received.
- Lifetime:
- Until the next order sent from the same page replaces it, or you clear this site's data.
bny_lead_lock_<language>_<product>local storage · strictly necessary
- Purpose:
- Caps orders from this browser at two per phone number and product in any 24 hours: a third one from the same number for the same product is not sent.
- Holds:
- The final seven digits of that phone number, plus a timestamp for each order it has sent.
- Lifetime:
- Until you clear this site's data. A send time stops counting once it is 24 hours old.
bny_conv_<language>_<product>_<order time>local storage · advertising
- Purpose:
- Notes that the sale has already been reported to Google Ads, so reloading the confirmation screen never reports it a second time.
- Holds:
- The single character 1.
- Lifetime:
- Until you clear this site's data.
Two things deliberately absent from that list. The one-time token that protects the forms lives in the page’s memory while the page is open and is never stored. And there is no shopping basket to keep, because an order is placed on one page in one go.
Nothing from outside on those pages
The order form on a country page sends your order to this site and to nowhere else. No script, pixel or image from another company is loaded there, apart from the Google Ads tag described below; the checks that keep invented orders out run on our own server, as the privacy notice explains.
Your choice lasts 12 months
When you answer the card, the answer is written into bny_cookies together with the moment you gave it. We treat that answer as valid for 12 months. After that it expires: the record is discarded, the card asks again, and until you answer, the optional categories are treated as refused.
It is not a formality. Consent given a year and a half ago is not a reliable picture of what you want today, and a shop that never asks again is quietly relying on a decision you have long forgotten making.
Clearing this site’s data in your browser has the same effect at any time: the record goes, and you are asked afresh on your next visit.
Advertising tags, and Consent Mode v2
This site loads the Google Ads tag, and no other advertising tag. What follows describes what it may do, and when.
Google Consent Mode v2
The Google tag, when present, is governed by Consent Mode v2. Before you have answered the card, it is started in a state where ad_storage, ad_user_data, ad_personalization and analytics_storage are all denied. In that state it writes no cookies and reads none, and any signal it sends to Google is cookieless and has advertising identifiers redacted. Your answer, whenever it comes, is passed to the tag immediately as a consent update; a refusal leaves it exactly where it was.
Agree to advertising, and it may then set Google’s own cookies to remember that you arrived from an advertisement, typically _gcl_au and _gcl_aw, with a life of about 90 days. After an order, the confirmation screen tells Google that a sale took place, carrying its euro value and the order reference. Who you are — your name, where you live, how to telephone or email you — forms no part of that message.
The statistics switch, and why it is there
We run no analytics product, so the statistics switch changes nothing you would notice. It is a switch of its own because Consent Mode treats analytics storage as its own permission: this switch, not the advertising one, decides whether the Google tag may use it. Keeping the two apart is the honest way round.
Google uses what its tag collects for its own purposes as well as ours, under its own privacy policy (policies.google.com/privacy), and may process it in the United States. Provider: Google Ireland Limited, Dublin. The advertising accounts this tag reports to are in the name of WHATECH MOBILE CO., LIMITED, which pays for them and answers for them. The legal basis for all of it is your consent, and it is yours to withdraw whenever you like. More on the role Google plays is in the privacy notice.
How to change your choice
On a first visit a thin strip offers “Accept” and a × that refuses (and saves the refusal); the full card, with three buttons of equal weight — yes to everything, no thanks, or let me choose — opens from the “Cookie settings” control in the footer. Nothing optional is ticked in advance, and closing the card without answering grants nothing. The “Cookie settings” control sits in the footer of every page on this site, so the choice is never more than one scroll away, and it reopens the same card with your current answer showing.
A new answer bites immediately, on the very page you are standing on. Turn advertising off and the tags are told to stop using their cookies from that second onwards. What went out while it was on has gone out, and no switch can call it home.
To remove what is already stored, open your browser’s settings, find the section for site data or cookies, look up this site and delete its data. That clears the record of your choice along with everything else, so the card will greet you again next time. Blocking storage altogether is your right and the shop will still work — but the screen after an order will have nothing to build your recap from.