Four of them, and none of them watches you

No banner will ever interrupt you here, and that is not an oversight. A consent banner is required when a site stores things it does not need. This one stores four things it cannot work without, so there is nothing to consent to.

4cookies, all first-party
0third-party cookies
0tracking or advertising
Noneconsent banner needed

1Every cookie this site sets

Name	What it holds	Why it must exist	Lifetime
`ch_sess`	A random session token. No name, no e-mail, nothing readable.	Keeps you signed in, if you chose to open an account. Never set for guests.	Until you close the browser, or 30 days if you ticked “remember me”
`ch_csrf`	A random token, matched against the one in the form.	Stops another site from submitting our forms in your name. Without it, checkout is not safe to operate.	The browser session
`ch_to`	A two-letter country code, e.g. `FR`.	So a product page can keep showing delivery times and shipping cost for the country you picked, instead of asking again on every item.	One year
`ch_fx`	Your chosen coin and display currency, e.g. `XMR:EUR`.	So the shop shows the prices you asked for on the next page, instead of resetting to Bitcoin every time.	One year

All four are first-party, set with SameSite=Lax, and the two security ones with HttpOnly so no script can read them. None is sent to anyone else, and none has any meaning outside this domain.

2And three things kept in your browser

These are not cookies — they never travel with a request. They sit in your own browser and we cannot read them unless the page sends them deliberately.

ch.cart: Your basket. Sent to us only when you price it or place the order — never as a profile, and never if you just browse.
ch.coin / ch.fiat: The same preference as the cookie above, so the page can paint prices before the server answers.

Clearing your site data empties your basket and resets the display currency. Nothing else happens, and nothing of yours is left behind on our side.

3Why there is no banner

EU law requires consent for storage that is not strictly necessary for a service you asked for. Analytics, advertising and cross-site measurement all fall on that side of the line. Keeping you signed in, protecting a form, and remembering which currency you picked do not.

We run no analytics of any kind. Not a self-hosted one either. We do not know how many people visited this page, and we have decided we can live without knowing — which is a strange trade for a shop to make, and exactly the trade this shop is.

So there is nothing to consent to, nothing to reject, and no dark pattern waiting behind a “manage preferences” link.

4Third parties

Cloudflare shields this site and may set its own cookie when it has to challenge a connection it believes is automated. That challenge runs on account registration only — never on sign-in, never on checkout, never on browsing. Its cookie exists to remember that a challenge was passed, and for nothing else.

There are no other third parties. No fonts loaded from elsewhere, no embedded videos, no social buttons, no chat widget, no payment iframe. Every asset on every page comes from this domain — the site's content security policy forbids anything else, so this is enforced rather than promised.

5Turning them off

Every browser can block or delete cookies, per site or entirely. Blocking ours costs you the ability to sign in and to complete checkout, because the security token would not survive the round trip. Browsing and prices carry on working.

See also the privacy policy, which lists everything stored on our side rather than in your browser.