Cookie Policy
Last updated: 1 September 2026
This Cookie Policy explains how Spletna trgovina, Aleksandr Lepeshkin s.p., trading as Nebrito, uses cookies on:
- nebrito.si
- nebrito.com
It should be read together with our Privacy Policy.
1. Who we are
The websites are operated by:
Spletna trgovina, Aleksandr Lepeshkin s.p.
Trading name: Nebrito
Čevljarska ulica 8
6000 Koper
Slovenia
Email: [email protected]
2. What are cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They can be used to keep the website working, remember choices, maintain a shopping or login session, measure website use, or support advertising and conversion measurement.
Cookies may be:
- first-party cookies, set for the Nebrito domain you are visiting; or
- third-party cookies, set or accessed by an external service used on the website.
Some cookies last only for the current browser session. Others remain on your device for a defined period or until you delete them.
This Policy focuses on cookies used by the Nebrito websites. Our current website implementation does not use browser local storage as a substitute for Nebrito's cookie consent record.
3. When we ask for consent
Nebrito uses three cookie categories:
- Necessary
- Analytics
- Marketing / Advertising
Necessary cookies are used without optional consent only where they are required to provide a service you request, maintain the security and operation of the website, process a payment, protect a form from abuse, or remember your cookie choices.
Analytics and Marketing / Advertising cookies are not stored or accessed for those purposes unless you have given the corresponding consent through our cookie consent interface.
You can accept all optional cookies, reject them, or choose individual categories. Refusing Analytics or Marketing / Advertising cookies does not prevent you from browsing the store, creating an account, placing an order, or using essential checkout functions. Some optional content, such as embedded YouTube videos, will not load unless the relevant consent has been given.
4. Changing or withdrawing your consent
You can change or withdraw your consent at any time by using the permanent Cookie settings link in the website footer. This opens the cookie preferences interface and allows you to change your selections.
Withdrawing consent does not affect processing that lawfully took place before the withdrawal. After withdrawal, the relevant optional cookies will no longer be used by Nebrito for the withdrawn category. Existing cookies may remain on your device until they expire or are removed, depending on the cookie and browser. You can also delete cookies directly through your browser settings.
5. Cookie categories and cookies we use
The exact cookies present on your device depend on the pages and features you use, your consent choices, your browser, whether you are signed in to a third-party service, and the payment or media services you choose to use.
Necessary cookies
These cookies support functions such as session management, account and shopping-cart operation, remembering choices explicitly made by the user, consent management, website security, payment processing, fraud prevention, and protection against automated abuse. They are used without optional consent where they are necessary to provide the website or a feature requested by the user.
| Cookie | Provider / domain | Purpose | Duration |
|---|---|---|---|
cc_cookie |
Nebrito / CookieConsent | Stores your cookie consent choices so that the website can apply and remember them. | 182 days |
PHPSESSID |
Nebrito / PHP / 1C-Bitrix | Maintains the technical website session required for website, account, cart and checkout functions. | Browser session |
CATALOG_SORT_MODE |
Nebrito / 1C-Bitrix | Remembers the catalogue sorting order selected by the user so that the selected order can be retained between visits. It is set only when the user changes the default sorting option. | 1 year |
nebrito_geo_switcher |
Nebrito / 1C-Bitrix | Remembers that the user dismissed a suggestion to switch to the Nebrito language version corresponding to their country, so that the same suggestion is not repeatedly displayed. | 30 days |
BITRIX_SM_SOUND_LOGIN_PLAYED |
Nebrito / 1C-Bitrix | Supports login-related functionality for signed-in users and records that the login notification has been processed during the current session. | Browser session |
BITRIX_SM_LOGIN |
Nebrito / 1C-Bitrix | Supports sign-in functionality for registered users and may remember login-related information. | 1 year |
BITRIX_SM_SALE_UID |
Nebrito / 1C-Bitrix | Supports identification of the e-commerce user/session and operation of shopping-cart and order functions. | 1 year |
BITRIX_SM_UIDH |
Nebrito / 1C-Bitrix | Supports authentication and recognition of signed-in users as part of the 1C-Bitrix authentication mechanism. | 1 year |
BITRIX_SM_UIDL |
Nebrito / 1C-Bitrix | Supports authentication and recognition of signed-in users as part of the 1C-Bitrix authentication mechanism. | 1 year |
cf_clearance |
Cloudflare / Nebrito domain | Stores proof that a Cloudflare security challenge or browser verification has been passed, helping protect the website against automated or malicious traffic and avoiding repeated challenges while the clearance remains valid. | Usually 30 minutes; may vary according to the website's Cloudflare security settings |
_GRECAPTCHA |
Google reCAPTCHA | Performs risk analysis to protect the registration form against automated or abusive submissions. | Up to 6 months |
__Secure-ENID |
Google / .google.com |
A Google functionality cookie observed in connection with the reCAPTCHA integration. It may be sent to or accessed by Google depending on the visitor's browser and Google service state. | Up to 13 months |
__stripe_mid |
Stripe / Nebrito payment page | Supports Stripe fraud prevention and risk assessment when processing payments. | 1 year |
__stripe_sid |
Stripe / Nebrito payment page | Supports Stripe fraud prevention and risk assessment for an attempted payment transaction. | 30 minutes |
pay_sid |
Stripe Link / payment-related domain | Supports Stripe Link authentication and remembering the user when Link is used, including faster checkout on supported payment flows. | 1 year |
m |
Stripe | Supports fraud detection and risk assessment when Stripe processes a payment. It may be set depending on the Stripe payment flow. | 2 years |
Stripe cookies are loaded only in connection with payment functionality. The exact set may vary depending on the payment method, Stripe Link usage, authentication requirements and fraud-prevention checks. Stripe may use additional strictly necessary cookies when a particular Stripe payment feature or payment method is selected. Current information is available at Stripe Cookie Settings.
Google states that reCAPTCHA uses cookies for risk analysis. The cookie set visible in a browser can vary depending on the Google endpoint, browser state and Google account state. _GRECAPTCHA is documented by Google specifically as a necessary reCAPTCHA cookie. Google may also set or access other Google functionality cookies, including ENID-family cookies, depending on the visitor's browser and Google service state. Nebrito uses reCAPTCHA only to protect the registration form against automated or abusive submissions.
Analytics cookies
Analytics cookies help us understand how visitors use the websites, measure website performance, and improve the store. We use Google Analytics 4 (GA4) for this purpose.
These cookies are used only if you consent to the Analytics category.
| Cookie | Provider / domain | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics / Nebrito domain | Distinguishes visitors for website analytics. | 2 years |
_ga_* |
Google Analytics / Nebrito domain | Maintains GA4 property-specific session state. The suffix depends on the Google Analytics measurement identifier. | 2 years |
Google Tag Manager is used to manage website tags. Google Tag Manager itself is not treated as a separate analytics cookie provider in this table; cookies are listed according to the service that uses them.
Marketing / Advertising cookies
Marketing / Advertising cookies may be used for conversion measurement, advertising attribution, audience creation, remarketing, and measuring the effectiveness of advertising campaigns.
These cookies are used only if you consent to the Marketing / Advertising category.
Nebrito uses or plans to use Google Ads and Meta advertising services, including advertising on Facebook and Instagram. Because the exact cookie set depends on the enabled advertising features, browser, user state and campaign source, not every cookie below will necessarily be present for every visitor.
Google Ads
| Cookie | Provider / domain | Purpose | Duration |
|---|---|---|---|
_gcl_* |
Google Ads / Nebrito domain | Stores advertising click and conversion information used for conversion measurement and campaign attribution. Names may include variants such as _gcl_aw. |
90 days |
IDE |
Google / DoubleClick | Used for advertising delivery and measurement on non-Google websites and may support remarketing and ad personalisation where permitted. | 13 months in the EEA, Switzerland and the UK |
DSID |
Google / DoubleClick | Helps recognise a signed-in Google user on non-Google websites so that advertising settings can be respected. May be used depending on the visitor's Google session and browser. | 2 weeks |
Google may change or add advertising cookies as its services evolve. Current information about Google's advertising cookies is available at How Google uses cookies.
Meta Ads / Meta Pixel
| Cookie | Provider / domain | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta / Nebrito domain | Browser identifier used by the Meta Pixel for advertising measurement, attribution, conversion tracking and remarketing. | 90 days |
_fbc |
Meta / Nebrito domain | Stores a Meta advertising click identifier when available, for example when a visitor arrives after clicking a Facebook or Instagram advertisement. | 90 days |
fr |
Meta / Facebook domain | May be used by Meta for advertising delivery, measurement and relevance. Availability depends on Meta's implementation, browser restrictions and the visitor's Meta session. | 90 days |
Meta Pixel supports advertising and conversion measurement across Meta services, including Facebook and Instagram. The exact Meta cookie set may vary. More information is available in the Meta Privacy Policy and Meta's information about cookies and Business Tools.
Embedded YouTube videos
Pages on the Nebrito websites may contain embedded YouTube videos. We use YouTube's privacy-enhanced embedding mode where appropriate and do not load the YouTube player until you consent to the Marketing / Advertising category.
Until consent is given, the video is replaced by a placeholder and no YouTube iframe is loaded by Nebrito.
When you choose to allow the embedded YouTube player, Google/YouTube may set or access cookies such as the following. The exact set may vary depending on the browser, Google account state and YouTube's current implementation.
| Cookie | Provider / domain | Purpose | Duration |
|---|---|---|---|
__Secure-YNID / VISITOR_INFO1_LIVE |
YouTube / Google | Supports YouTube functionality and may also be used for analytics or advertising-related purposes depending on Google settings. Google is replacing VISITOR_INFO1_LIVE with __Secure-YNID. |
6 months |
__Secure-YENID / __Secure-YEC |
YouTube / Google | Supports service integrity and detection of spam, fraud and abuse. Google is replacing __Secure-YEC with __Secure-YENID. |
13 months |
PREF |
YouTube / Google | Stores YouTube player and playback preferences. | 8 months |
YSC |
YouTube / Google | Helps maintain and protect the YouTube browser session and verify requests made during that session. | Browser session |
__Secure-ROLLOUT_TOKEN |
YouTube / Google | Used by YouTube for feature rollout and related measurement. | 6 months |
YouTube privacy-enhanced mode uses the youtube-nocookie.com domain. Google explains this mode at YouTube Help.
6. Google Consent Mode
Nebrito may use Google Consent Mode together with Google Analytics and Google Ads.
When Analytics or Marketing / Advertising storage consent is denied, Google tags are configured not to read or write the corresponding analytics or advertising cookies. In advanced Consent Mode configurations, Google may still receive limited cookieless technical or consent signals. These signals do not involve storing or reading Analytics or Advertising cookies on your device for the denied category.
Google provides further information about this behaviour in its Consent Mode documentation.
7. Services that do not currently set tracking cookies on Nebrito
Nebrito also uses services that are described in our Privacy Policy but do not currently deploy onsite tracking cookies in our website configuration:
- Algolia is used for website search and does not set cookies in our current integration.
- HubSpot is used as a CRM without HubSpot website tracking scripts or onsite widgets.
- Klaviyo is used for email marketing without Klaviyo onsite tracking scripts or widgets.
If we later enable onsite tracking functionality from one of these services, we will update this Cookie Policy and, where required, request the appropriate consent before activating it.
8. Third-party services and international data processing
Some cookies are provided by third-party services such as Google, Meta and Stripe. These providers may process information outside Slovenia and, in some cases, outside the European Economic Area. Information about relevant providers, international transfers and safeguards is available in our Privacy Policy.
For more information about the providers' own privacy practices, see:
- Google Privacy Policy
- Google cookie information
- Meta Privacy Policy
- Stripe Privacy Policy
- Stripe Cookie Settings
9. Browser settings
Most browsers allow you to view, delete or block cookies through their settings. Blocking all cookies may prevent parts of the website, including login, cart, checkout or payment functions, from working correctly.
Browser controls are separate from the Nebrito cookie consent interface. For the easiest way to manage optional cookies specifically on Nebrito, use the Cookie settings link in the website footer.
10. Changes to this Cookie Policy
We may update this Cookie Policy when our website functionality, cookie configuration, service providers or legal requirements change.
The current version will be published on the Nebrito websites with the date of the latest update. Where a change requires new consent, we will ask you to make a new choice through the cookie consent interface.
11. Contact
If you have questions about this Cookie Policy or our use of cookies, contact us at [email protected].