Cookie Policy

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser, remember your preferences, keep your session active and understand how the site is used. Similar technologies — such as local storage and pixel tags — work in comparable ways and are also covered by this policy.

We group cookies into four categories:

• Strictly Necessary — essential for the site to function. These include session management, shopping cart, checkout security (CSRF protection) and fraud prevention during payment. They are active by default and cannot be disabled. No consent is required.
• Functional — used to remember your preferences across visits, such as your language choice, Dream Guide progress and cookie consent settings. These are active by default but do not track you across other websites. No consent is required, though you may disable them through your browser.
• Analytics — used to understand how visitors interact with the site in a privacy-conscious manner. Data is pseudonymised and configured to minimise personal identification. Require your consent.
• Marketing — used to measure the effectiveness of advertising campaigns on external platforms such as TikTok. Require your consent.

When you first visit Door of Dreams, only strictly necessary and functional cookies are active. Analytics and marketing cookies remain disabled until you provide explicit consent through the cookie banner.

You can modify or withdraw your consent at any time by clicking the Cookie Settings link in the footer of this website. Withdrawing consent is as easy as giving it. Changing your preferences does not affect strictly necessary or functional cookies, which remain active to ensure the site operates correctly.

Your consent is stored for up to 12 months. Once it expires, we will ask you again.

This website uses Google Consent Mode v2. Before any Google service loads, consent signals are set to denied by default. When you grant consent, those signals are updated and Google services — including analytics and advertising — adapt accordingly. If you do not consent, Google services operate in a restricted mode that does not use your data for personalisation or measurement. This applies to all Google tags deployed through Google Tag Manager.

The following third-party services may set cookies or collect data when you use our site. This list represents the technologies currently in use and may be updated as our stack evolves.

Google Tag Manager

Google Tag Manager (GTM) is used to deploy and manage analytics and marketing tags without modifying the site code directly. GTM itself does not collect personal data and does not set any tracking cookies. All tags deployed through GTM are configured to respect user consent choices via Google Consent Mode v2.
Provider: Google LLC (USA). Transfer mechanism: Standard Contractual Clauses.

Google Analytics 4

GA4 is used to understand how visitors interact with the site in a privacy-conscious manner. Data collected — such as pages visited, session duration and interaction events — is pseudonymised and configured to minimise personal identification. GA4 is deployed via Google Tag Manager and does not load until analytics consent is granted.
Provider: Google LLC (USA). Transfer mechanism: Standard Contractual Clauses.
Category: Analytics — requires consent.
Opt out: Google Analytics Opt-out Browser Add-on.

Microsoft Clarity

Microsoft Clarity is used for session recordings and heatmaps, helping us understand usability issues in a privacy-conscious manner. Data is pseudonymised. Clarity does not load until analytics consent is granted.
Provider: Microsoft Corporation (USA). Transfer mechanism: Standard Contractual Clauses.
Category: Analytics — requires consent.

Stripe

Stripe is our payment processing provider. During checkout, Stripe may set strictly necessary security cookies — including fraud detection and session continuity cookies — to ensure secure and reliable payment processing. These cookies are essential and cannot be disabled while completing a purchase, as they are required to protect both you and Door of Dreams from fraudulent transactions.
Provider: Stripe, Inc. (USA). Transfer mechanism: Standard Contractual Clauses.
Category: Strictly Necessary — no consent required.
See also: Stripe Privacy Policy.

TikTok Pixel

TikTok Pixel is used to measure the effectiveness of advertising campaigns on TikTok. It is disabled by default and is activated only after you provide explicit marketing consent. If you do not consent to marketing cookies, TikTok Pixel does not load and no data is sent to TikTok.
Provider: TikTok Inc. (USA). Transfer mechanism: Standard Contractual Clauses.
Category: Marketing — requires consent.

Cloudflare

Cloudflare provides content delivery, DDoS protection and security services for this website. Cloudflare may set strictly necessary cookies such as __cf_bm (bot management) and _cfuvid (rate limiting) to protect the site and its users. These cookies do not track you for advertising purposes and are not used for profiling.
Category: Strictly Necessary — no consent required.

Vercel

Vercel is our hosting and infrastructure provider. Vercel may set technical cookies necessary for routing, edge functions and performance optimisation. These cookies do not collect personal data for marketing or analytics purposes.
Category: Strictly Necessary — no consent required.

The table below lists the main cookies and technologies currently in use. Cookie names and durations may vary depending on the provider's configuration and may be updated over time. Where a technology deploys multiple cookies, representative examples are shown.

You have several ways to manage cookies:

• Cookie Settings panel — click the Cookie Settings link in the footer at any time to review or change your preferences. You can withdraw consent as easily as you gave it.
• Browser settings— most browsers allow you to block or delete cookies. Refer to your browser's help documentation for instructions. Note that blocking strictly necessary cookies may impair core website functionality, including the ability to add items to the cart or complete a purchase.
• Google Analytics opt-out — install the Google Analytics Opt-out Browser Add-on to prevent GA4 from collecting data about your visits.
• Contact us — for any privacy-related request, contact us at [email protected].

Withdrawing or modifying your consent does not affect the lawfulness of any processing that occurred before withdrawal, and does not affect strictly necessary or functional cookies.

We may update this Cookie Policy when we add or change the technologies we use, when providers update their practices, or when legal requirements evolve. When we make material changes, we will update the Effective Date and Last Updated date shown at the top of this page. We encourage you to review this policy periodically. Continued use of the site after a material change constitutes acceptance of the updated policy.

For questions about this Cookie Policy or our use of cookies and similar technologies, contact us at [email protected].