Cookie Policy
Last updated: 11 November 2026
This site only uses technical cookies that it needs to work and to protect payments. We do not use analytics or advertising cookies, which is why we do not ask for your consent. When you pay, our payment provider Stripe sets a few security cookies in your browser (see section 5).
1. What cookies are
Cookies are small files that a website stores in your browser to remember information from one page to the next, for example which products you have added to your cart.
2. Cookies we use
- Cookie
- NEXT_LOCALE
- What it is for
- Remembering the language you chose
- Duration
- Until you close the browser
- Type
- First-party, technical
- Cookie
- _bipunt_cart_id
- What it is for
- Remembering your shopping cart
- Duration
- 30 days
- Type
- First-party, technical
- Cookie
- _bipunt_ref
- What it is for
- Remembering a friend's invitation (a link with ?ref=) so that, if you sign up, you both get the loyalty programme points
- Duration
- 30 days (deleted when you sign up)
- Type
- First-party, technical
- Cookie
- _bipunt_jwt
- What it is for
- Keeping you logged in to your account
- Duration
- 4 hours or until you log out
- Type
- First-party, technical
- Cookie
- _bipunt_form_draft
- What it is for
- Giving back what you typed in an address form if the server refuses it, so you do not have to type it again
- Duration
- 3 minutes (removed when you save, log in or log out)
- Type
- First-party, technical
- Cookie
- _bipunt_last_order
- What it is for
- Showing your address and email only to you on the order confirmation page
- Duration
- 24 hours
- Type
- First-party, technical
- Cookie
- _bipunt_oauth_locale
- What it is for
- Bringing you back to the page in your language after logging in with Google
- Duration
- 10 minutes
- Type
- First-party, technical
- Cookie
- _bipunt_oauth_state
- What it is for
- Checking that you started the Google login yourself, from this browser
- Duration
- 10 minutes
- Type
- First-party, technical (security)
None of the cookies in this table is used to analyse your browsing or to show you advertising.
Visit statistics are measured without cookies or any other data stored in your browser (see the Privacy Policy).
3. Why we do not ask for your consent
Technical cookies needed to provide a service you have asked for (keeping your cart, your session or your chosen language, or protecting the payment against fraud) are exempt from consent under Article 22(2) of Spanish Law 34/2002 (LSSI), which implements the EU ePrivacy Directive, and the cookie guidelines of the Spanish Data Protection Agency.
If we ever add cookies that are not technical (for example, analytics), we will ask for your consent before setting them, and you will be able to change your choice at any time.
4. Logging in with Google
If you click “Continue with Google”, you go to Google's site to identify yourself. Any cookies Google uses there are its own and are governed by the Google cookie policy (policies.google.com/technologies/cookies).
5. Card payment (Stripe)
Payments are processed by Stripe. Its form loads only when you reach the payment step, and Stripe then sets these security cookies on this site to detect fraud and protect your payment. They are not used for advertising or to analyse your browsing.
- Cookie
- __stripe_mid
- What it is for
- Fraud prevention: recognising the device in payments
- Duration
- 1 year
- Type
- Stripe's, technical (security)
- Cookie
- __stripe_sid
- What it is for
- Fraud prevention during the payment session
- Duration
- 30 minutes
- Type
- Stripe's, technical (security)
Stripe may also set other security cookies on its own domain and show an anti-bot check from its provider hCaptcha. They are governed by the Stripe cookie policy (stripe.com/cookies-policy/legal).
6. How to block or delete cookies
You can delete or block cookies in your browser settings. Please note that without them the cart and login will not work.
7. More information
How we process your personal data is explained in the Privacy Policy. For any question, email us at hola@bipunt.com.