Cookie Policy
Version 2026.10.28b-template, effective October 28, 2026
Template — requires legal review. This document is a starting template prepared from how the store software actually works. It has not been reviewed by a lawyer. Check every statement against your actual practices and have it reviewed before launch.
This Cookie Policy explains how femmeelixir uses cookies and similar technologies (browser storage) on https://femmeelixir.com. It is part of our Privacy Policy.
What cookies and similar technologies are
Cookies are small text files a website stores in your browser. Browser storage (localStorage and sessionStorage) works in a similar way but is not sent to our servers automatically; sessionStorage is cleared when you close the tab. All of the technologies listed below are set by us on our own domain, unless marked as third party.
What we use and what we do not use
- Strictly necessary technologies are always on. They keep you signed in, remember your shopping bag, keep checkout and the AI consultant working, protect forms and accounts against forged requests and spam, and remember your privacy choices. When you answer "Was this helpful?" under a journal article without signing in, a cookie with a random id (
__Host-fe_rx) remembers your answer so that each browser is counted once; it is set only when you answer and contains no personal data. While you take a quiz, your answers are kept in your browser tab (fe-quizin sessionStorage) so that a page reload does not lose them; it also holds a random link to your result if you are not signed in. Answers to sensitive quiz questions stay only there and are cleared when you close the tab. - Functional technologies are off unless you turn them on: one remembers across visits that you have read the AI consultant introduction, one remembers the display name you used for journal comments, and video players play videos embedded in journal articles.
- Analytics and marketing technologies are not currently used. We do not load analytics tools, advertising cookies, tracking pixels or social media plugins. If we add any, we will list them here first, publish a new version of this policy, ask for your consent again and load them only after you agree.
Videos in the journal
Journal articles may contain YouTube or Vimeo videos. Until you play one, the page shows only a still image and the title served from our own media domain — no request is made to YouTube or Vimeo. The player is loaded only if functional technologies are switched on and you click the video; otherwise the page offers to switch them on or to watch the video on the provider's site. We use YouTube's privacy-enhanced mode (youtube-nocookie.com) and Vimeo's player with Do Not Track (player.vimeo.com, dnt=1). Once a player is loaded, the provider receives your IP address and browser details and may store data in your browser under its own privacy policy (Google/YouTube, Vimeo); we do not receive data from them.
We use no third-party fonts, analytics or social media plugins. Images are served from our own media domain.
List of cookies and similar technologies
This list is generated from the same data as the cookie settings panel, so the two always match.
Strictly necessary (always on)
Needed for the store to work: sign-in, your shopping bag, checkout, the AI consultant session, security (protection against forged requests and spam) and remembering your privacy choices. They cannot be switched off and are never used for advertising.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
fe_checkout_email (sessionStorage) | femmeelixir.com (first party) | Keeps the email you entered at checkout while you move between checkout steps. | Until the tab is closed |
fe_consent | femmeelixir.com (first party) | Stores your cookie choices and the Cookie Policy version, so optional scripts are blocked or allowed before the page loads. | 13 months |
fe_consent_checked (sessionStorage) | femmeelixir.com (first party) | Avoids re-checking your cookie choices on every page. | Until the tab is closed |
fe_consent_id | femmeelixir.com (first party) | Copy of the consent log id readable by the page, used to check whether your choices need renewing after a policy update. | 13 months |
fe-consultant-disclaimer (sessionStorage) | femmeelixir.com (first party) | Remembers for this visit that you have read the AI consultant introduction. | Until the tab is closed |
fe-consultant-less-motion (sessionStorage) | femmeelixir.com (first party) | Remembers the "Less motion" setting of the consultant for this visit. | Until the tab is closed |
fe-consultant-session (sessionStorage) | femmeelixir.com (first party) | Keeps the AI consultant conversation visible when you move between pages. | Until the tab is closed |
fe_order_tokens (sessionStorage) | femmeelixir.com (first party) | Lets a guest open the confirmation page of the order just placed. | Until the tab is closed |
fe-quiz (sessionStorage) | femmeelixir.com (first party) | Keeps your answers while you take a quiz and, if you are not signed in, a random link to your result so you can reopen it or save it to your skin profile after signing in. Answers to sensitive questions stay only in this tab. | Until the tab is closed |
__Host-fe_2fa | admin.femmeelixir.com (first party, staff only) | Staff sign-in: links the password step to the two-factor code step. | 5 minutes |
__Host-fe_adm | admin.femmeelixir.com (first party, staff only) | Staff sign-in session for the admin panel. | 30 minutes of inactivity (12 hours at most) |
__Host-fe_cart | femmeelixir.com (first party) | Remembers the shopping bag of a guest (not signed in) visitor. | 30 days |
__Host-fe_cid | femmeelixir.com (first party) | Random id that links your cookie and "Do Not Sell or Share" choices to our consent log, so we can honor and prove them. | 13 months |
__Host-fe_cs | femmeelixir.com (first party) | AI consultant session: lets the consultant continue the current conversation. Unsaved conversations are deleted when it expires. | 24 hours |
__Host-fe_csrf | femmeelixir.com (first party) | Security: protects forms and account actions against cross-site request forgery. | Browser session |
__Host-fe_rx | femmeelixir.com (first party) | Set only when you answer "Was this helpful?" on a journal article without signing in: a random id so each browser is counted once and can change its answer. No personal data; not used for tracking. | 13 months |
__Host-fe_s | femmeelixir.com (first party) | Keeps you signed in to your account. Contains only a random session id; the session is stored on our server and ends when you sign out. | Session; 30 days with "Keep me signed in" |
Functional (off unless you opt in)
Optional features you choose to use: remembering that you have read the AI consultant introduction, remembering the display name you used for journal comments, and playing videos embedded in journal articles (YouTube in privacy-enhanced mode, Vimeo with Do Not Track). Video players are third-party and load only when this category is on and you click the video. Off unless you turn them on.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
fe-comment-name (localStorage) | femmeelixir.com (first party) | Remembers the display name you used for your last journal comment, so you do not have to type it again. Stays in your browser; the name is sent to us only when you post a comment. | Until you clear site data or withdraw consent |
fe-consultant-disclaimer (localStorage) | femmeelixir.com (first party) | Remembers across visits that you have read the AI consultant introduction. Set only with functional consent. | Until you clear site data or withdraw consent |
Vimeo video player (player.vimeo.com) | Vimeo, Inc. (third party) | Plays Vimeo videos embedded in journal articles with Do Not Track enabled. Loaded only with functional consent and after you click the video. See vimeo.com/privacy. | Set by Vimeo; see its policy |
YouTube video player (youtube-nocookie.com) | Google LLC / YouTube (third party) | Plays videos embedded in journal articles in YouTube's privacy-enhanced mode. Loaded only with functional consent and after you click the video; YouTube may then store data in your browser. See policies.google.com/privacy. | Set by YouTube; see its policy |
Analytics (off unless you opt in)
Currently not used: we do not load analytics cookies or third-party analytics tools. If we add them, they will be listed here, the Cookie Policy will be updated and they will load only with your consent.
No cookies or similar technologies in this category are currently used.
Marketing (off unless you opt in)
Currently not used: we do not load advertising cookies, pixels or cross-context behavioral advertising. If we add them, they will be listed here and load only with your consent, and never when your browser sends a Global Privacy Control signal.
No cookies or similar technologies in this category are currently used.
Your choices
- When you first visit, the banner offers "Accept all", "Reject all" and "Customize" with equal weight. Nothing optional is enabled unless you choose it.
- You can change your choice at any time with the "Cookie settings" link in the footer of every page. Withdrawing consent stops the optional technologies from loading and deletes the cookies of that category that we set.
- We keep your choice for 13 months, then ask again. We also ask again when a new version of this policy changes the categories.
- If your browser sends a Global Privacy Control (GPC) signal, marketing technologies stay off whatever you choose, and the site shows that the signal is honored. See Your Privacy Choices.
- You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, sign-in, the shopping bag and checkout will not work.
We record each choice (the categories, the policy version, the date and time, and where you made it) in a consent log linked to a random id, so we can honor and demonstrate your choices.
Changes
We publish changes on this page with a new version and effective date; earlier versions stay available below.
Contact
femmeelixir
Email: [email protected]
Questions about this document? Write to [email protected].