Cookies
Effective version — in force from 8 September 2026 (v1.2).
The short version
orralislab.com sets one cookie, and only if you ask it to. It remembers the currency you picked on the pricing page. There are no advertising cookies, no tracking pixels and no session recording — which is why you have never been shown a cookie banner here.
The one cookie we set
| Name | What it stores | Why | How long |
|---|---|---|---|
og_currency | A three-letter currency code, such as GBP. Nothing else. | So the site shows prices in the currency you chose instead of forgetting it on the next page view. | 12 months, or until you clear it |
It is a first-party cookie — set by this site, readable only by this site. It contains no identifier, so it cannot be used to recognise you anywhere else, and we do not use it to build a profile.
It is written only when you use the currency selector. Land on the page, read it and leave, and nothing is stored on your device at all.
We also keep the same three-letter code in your browser’s session storage, so a second page view does not have to wait for the price lookup. Session storage is cleared the moment you close the tab, and it never leaves your browser.
Why there is no cookie banner
Under the UK and EU ePrivacy rules, consent is needed for cookies that are not strictly necessary for a service you asked for. A cookie that does nothing but remember a preference you set yourself is the textbook example of one that is. We set no other cookie, so there is nothing else to ask you about.
If we ever add a cookie that does need consent, we will ask you before it is set — not after.
Country detection is not a cookie
Before you have chosen a currency, our server works out which country you are in so the pricing page opens somewhere sensible. It first looks for a country code our hosting or CDN already supplies; if there is none, it sends your IP address to ipapi.co, which returns a two-letter country code and nothing more.
This happens on our server, not in your browser, and stores nothing on your device. Your IP is used for the lookup and is neither logged nor stored by us — we keep only the answer, for up to 6 hours, against a one-way hash of your IP. Choose a currency once and the lookup stops happening at all.
What else this site uses
- Standard server logs. Our hosting provider records the usual request information — IP address, browser type, the pages requested and the time — for security and troubleshooting. That is a server-side log, not a cookie, and it is described in our Privacy Notice.
- Fonts and images are served from this domain. We self-host our typefaces rather than loading them from a font CDN, so no third party learns that you visited.
- Payments happen on Stripe’s own page. When you buy a package you are sent to a Stripe-hosted checkout. Stripe sets its own cookies there, on its own domain, under its own privacy policy — we do not set or read them.
Analytics
We measure how many people visit this site using Umami, an open-source analytics tool we host ourselves on our own server in Germany (Contabo GmbH), inside the EU. Umami is cookieless: it sets nothing on your device, it never learns your name or your email, and it does not follow you to other websites or build an advertising profile of you.
For each page view it records the page you looked at and any tracking parameters in the link you arrived on, the page you came from, your browser, operating system and device type, your screen size and browser language, and the country — and where the lookup resolves them, the region and city — that your connection appears to be in. It also records a handful of events we defined ourselves: which package section was read, which buttons were used. Your IP address does reach our analytics server, because every request on the internet carries one; Umami uses it there to work out that location and to generate a one-way session number. The session number is stored; the IP address itself is not — Umami has no field for one in its database.
None of that identifies you by name, but taken together it is still information about you, so we treat it as personal data and keep it to a minimum. We rely on our legitimate interest in knowing whether the website works. Because nothing is stored on your device there is nothing for you to consent to and no banner to click. You can read exactly what Umami collects at docs.umami.is/docs/metric-definitions.
Our other website
Our UAE edition, orralis.ae, prices everything in dirhams for everyone, so it has nothing to detect and nothing to remember: it sets no cookies at all. Nothing on this page applies to it.
Managing cookies yourself
Every browser lets you see, block and delete cookies from its settings or privacy panel. Blocking ours will only mean the site forgets your currency between visits and shows the one it guesses from your country — nothing else breaks. It may, however, break the Stripe checkout page, which needs its own cookies to process a payment securely.
Questions
Anything on this page you want explained, or a claim you want to check: email Hello@orralislab.com. We reply within 1 business day.