Legal
Cookie Policy
Last updated: 6 October 2026
This policy explains which cookies and similar technologies pewpew.pt uses, what for, for how long and whose they are, and how you can accept, reject or withdraw your consent. It complements the Privacy Policy. The list below is the one currently in force on the site.
1. What cookies are
Cookies are small text files a website stores in your browser. Other technologies work the same way and are covered by this policy: the browser's local and session storage, and the pixels or tags of third-party services, which read or store information on your device. Some are ours (first-party); others are set by the services we use, on their own domains (third-party).
2. How we ask for your consent
What is strictly necessary for the site to work doesn't need consent (article 5 of Portuguese Law 41/2004, as amended by Law 46/2012, which transposes the ePrivacy Directive). Everything else only runs after you accept it in the cookie notice, by category: analytics. Rejecting is as easy as accepting and the site works the same either way. Until you choose, no analytics or advertising tag is loaded and your browser doesn't contact those services.
Your choice is stored in your browser (ppConsent2) with its date and the version of this list. We ask again after 6 months, or sooner if the list of purposes or providers changes.
For Google's tags we use Google Consent Mode v2: everything is denied by default, and your choice is passed on as granted or denied for analytics storage, ad storage, sending data for advertising, and ad personalisation.
3. Strictly necessary (always on)
Without these the cart, your customer account, access to your orders and payment don't work. You can delete them in your browser settings: you lose the cart, the session and direct access to your orders in this browser, with no other consequence.
- pp_sess
Keeps you signed in to your customer account (signed, HttpOnly token). Only exists after you sign in.
- Provider
- PEW PEW
- Duration
- 7 days
- Type
- Cookie
- NEXT_LOCALE
Remembers the language you chose.
- Provider
- PEW PEW
- Duration
- Session
- Type
- Cookie
- ppo_<ref>
Access to an order in this browser without an account and without the code in the address (HttpOnly).
- Provider
- PEW PEW
- Duration
- 90 days
- Type
- Cookie
- ppCart1
Your cart contents.
- Provider
- PEW PEW
- Duration
- Until the order is placed or you clear your browser
- Type
- Local storage
- ppOrders1
Your last 20 order references (no access codes).
- Provider
- PEW PEW
- Duration
- Until you clear your browser
- Type
- Local storage
- ppCheckoutDraft:v1
Your checkout details, so they aren't lost if you come back from Stripe or PayPal.
- Provider
- PEW PEW
- Duration
- Until you close the tab
- Type
- Session storage
- ppIntro
Marks that the opening animation was already shown.
- Provider
- PEW PEW
- Duration
- Until you close the tab
- Type
- Session storage
- ppConsent2
Your cookie choice, with its date and the version of this list.
- Provider
- PEW PEW
- Duration
- 6 months
- Type
- Local storage
- __stripe_mid, __stripe_sid
Payment fraud prevention. Only where Stripe loads: the Apple Pay / Google Pay buttons on product pages.
- Provider
- Stripe
- Duration
- 1 year / 30 minutes
- Type
- Cookie
- __cf_bm
May be set by the network that serves the site, to tell people from bots.
- Provider
- Cloudflare
- Duration
- 30 minutes
- Type
- Cookie
4. Analytics (with consent)
We use Google Analytics 4 to understand how many people visit the site, where they come from and what they do: the pages viewed and the steps through the shop and rental (products viewed, added to or removed from the cart, checkout steps and paid purchases, with the order reference, value and items). Your browser also sends technical data about the device and browser; Google Analytics 4 doesn't log the full IP address. We never send your name, email, phone or address.
- _ga
Random identifier that tells visitors apart.
- Provider
- Google (GA4)
- Duration
- 2 years
- Type
- Cookie
- _ga_<id>
Keeps the state of the visit (session).
- Provider
- Google (GA4)
- Duration
- 2 years
- Type
- Cookie
- ppAttr1
The campaign that brought you (the link's utm_* parameters) on your first and latest visit, so we know which campaigns lead to orders. With marketing accepted, also the ad click identifier.
- Provider
- PEW PEW
- Duration
- 90 days
- Type
- Local storage
- ppTracked1
References of orders already measured, so a purchase isn't counted twice.
- Provider
- PEW PEW
- Duration
- Until you clear your browser (last 30)
- Type
- Local storage
5. Providers and transfers outside the EEA
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), for Google Analytics and Google Ads. Data may be processed by Google LLC in the United States, which is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023); otherwise standard contractual clauses apply. Google privacy policy.
6. How to change your mind
You can accept, reject or withdraw consent at any time, using the "Cookies" link in the footer of every page or the button below. Withdrawing takes effect immediately: the tags stop, their cookies on pewpew.pt are deleted and the page reloads. It doesn't affect what was done before on the basis of your consent.
Cookies these services set on their own domains can only be deleted by you, in your browser or account settings. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on.
7. More information
The controller is Sequência Janota - Unipessoal, Lda. (PEW PEW), Rua do Urjal 48, 3830-173 Ílhavo, Portugal. How we handle personal data, your rights and how to complain to the CNPD are in the Privacy Policy. For any question: contact@pewpew.pt. If this list changes, we update the date at the top and ask for your choice again.
