Initial commit: Craft2Prints with Stages 1-3

2026-07-15 18:09:59 +01:00
commit 41937ffc15
158 changed files with 16054 additions and 0 deletions
@@ -0,0 +1,92 @@
+import Link from 'next/link';
+import LegalPage from '@/components/LegalPage';
+
+export const metadata = { title: 'Cookie Policy — Craft2Prints' };
+
+export default function CookiesPage() {
+  return (
+    <LegalPage tag="Legal" title="Cookie Policy" lastUpdated="13 July 2026">
+      <h2>The short version</h2>
+      <p>
+        We use two cookies, both strictly necessary to make logging in work. We use no advertising,
+        analytics, or tracking cookies of any kind — which is why you don&apos;t see a cookie
+        consent banner on this site: UK law only requires consent for cookies that aren&apos;t
+        essential, and ours all are.
+      </p>
+
+      <h2>The cookies we set</h2>
+      <div className="overflow-x-auto">
+        <table className="w-full border-collapse text-left text-sm">
+          <thead>
+            <tr className="border-b border-line">
+              <th className="py-2 pr-4 font-medium">Cookie</th>
+              <th className="py-2 pr-4 font-medium">Purpose</th>
+              <th className="py-2 font-medium">Lasts</th>
+            </tr>
+          </thead>
+          <tbody className="text-muted">
+            <tr className="border-b border-line">
+              <td className="py-2 pr-4 font-mono text-xs">customer_session</td>
+              <td className="py-2 pr-4">Keeps you signed in to your customer account</td>
+              <td className="py-2">30 days</td>
+            </tr>
+            <tr className="border-b border-line">
+              <td className="py-2 pr-4 font-mono text-xs">admin_session</td>
+              <td className="py-2 pr-4">Keeps shop staff signed in to the admin area (only set if you log in as staff)</td>
+              <td className="py-2">Until logout</td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+      <p>
+        Both are &quot;HTTP-only&quot; (scripts on the page can&apos;t read them) and contain only a
+        signed session token — no personal details.
+      </p>
+
+      <h2>Other storage on your device</h2>
+      <p>
+        Like most modern shops, we also keep a few things in your browser&apos;s own storage rather
+        than in cookies. None of this is sent to us until you act (e.g. check out):
+      </p>
+      <ul>
+        <li>
+          <strong>Your bag</strong> — the items and designs in your bag are stored on your device
+          so they survive a page refresh.
+        </li>
+        <li>
+          <strong>Preferences</strong> — your light/dark mode choice and display currency.
+        </li>
+      </ul>
+
+      <h2>Third-party cookies</h2>
+      <ul>
+        <li>
+          <strong>Stripe</strong> — when you proceed to payment you&apos;re taken to Stripe&apos;s
+          secure checkout page, which sets its own cookies for fraud prevention. See{' '}
+          <a href="https://stripe.com/gb/legal/cookies-policy" target="_blank" rel="noopener noreferrer">
+            Stripe&apos;s cookie policy
+          </a>
+          .
+        </li>
+        <li>
+          <strong>Cloudflare Turnstile</strong> — the bot-protection check on our forms may use
+          similar technologies to tell humans from bots. It doesn&apos;t track you across other
+          sites.
+        </li>
+      </ul>
+
+      <h2>Managing cookies</h2>
+      <p>
+        You can delete or block cookies in your browser settings at any time — the only effect on
+        this site is that you&apos;ll be signed out and will need to log in again. If we ever add
+        non-essential cookies (such as analytics), we&apos;ll update this page and ask for your
+        consent first.
+      </p>
+
+      <p>
+        Questions? See our <Link href="/privacy">Privacy Policy</Link> or{' '}
+        <Link href="/contact">get in touch</Link>.
+      </p>
+    </LegalPage>
+  );
+}