Cookie Policy
Which cookies and similar technologies the ViagoShop online store uses, on what legal basis, and how you can give, change or withdraw consent at any time.
2026-08-01
Introduction and controller
This Cookie Policy explains which cookies and similar technologies the ViagoShop online store uses, for what purpose, on what legal basis, how long they are stored and whether data is transferred to third countries in the process. Read it together with the Privacy Policy, which governs the processing of personal data in more detail.
The controller is Viagostar d.o.o. (ViagoShop brand), with its registered office at Gerbičeva ulica 110, 1000 Ljubljana, Slovenija. Contact details: podpora@viagoshop.com, +386 30 741 481. Company registration number: 8742472000. VAT identification number: SI25657755. Entry in the register: Okrožno sodišče v Ljubljani.
The legal basis for the use of cookies is Article 225 of the Slovenian Electronic Communications Act (ZEKom-2) and Directive 2002/58/EC (ePrivacy), while the processing of personal data arising from it is governed by the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2). In drafting this policy we follow the Guidelines on the use of cookies issued by the Information Commissioner of the Republic of Slovenia (2023).
What cookies and similar technologies are
Cookies are small text files that a website stores in your browser or on your device. They allow the site to remember your choices (language, cart contents, login), to function correctly and securely and — with your consent — to let us understand how the store is used and measure the effectiveness of advertising. A cookie contains no executable code and cannot access files on your device.
Besides classic cookies, "similar technologies" also covers browser local storage (localStorage), tracking pixels and comparable mechanisms that access data on your device. The same legal regime applies to all of them as to cookies.
The categories of cookies we use
We group cookies into three categories. Strictly necessary cookies operate without consent because they are indispensable for the store to work and for the basic user experience you expressly use. Analytics and marketing or advertising cookies are loaded solely after your explicit consent for the individual category.
Strictly necessary (technical) cookies
These cookies are needed for the online store to function, for placing an order, for login, for security and to record your consent decision. They also include our own (first-party) cookies that remember your choices in the store (for example the products in the comparison tool, recently viewed products, the state of the side navigation or a promo code from a link); they are set solely to enable store features you actually use, do not serve tracking purposes and are not shared with third parties. Without them the store cannot provide the service you expressly request, so under Article 225 of ZEKom-2 no consent is required for them.
Analytics cookies (only with consent: analytics)
Analytics cookies are loaded only after your consent for the "analytics" category. They help us understand how visitors use the store (which pages they visit, where the purchase process gets stuck) so that we can improve the content and the user experience. We use:
- PostHog, hosted in the European Union (Frankfurt,
eu.i.posthog.com). Because the data is processed within the EU, there is no transfer to a third country with PostHog. - Google Analytics 4 (GA4), which processes data in the USA. The basis for the transfer is the EU-US Data Privacy Framework (DPF) and, where necessary, standard contractual clauses (SCC).
Marketing or advertising cookies (only with consent: marketing)
Marketing and advertising cookies and pixels are loaded only after your explicit consent for the "marketing" category. They make it possible to measure conversions and to display more relevant advertising (including remarketing). We use:
- Google Ads (including remarketing and conversion measurement).
- Meta Pixel (advertising on Meta platforms).
Both services process data in the USA; the basis for the transfer is the DPF and, where necessary, SCC.
Important for an adult store. Google Ads and Meta Pixel do not fire at all without your explicit marketing consent. They are switched off by default. They do not pass on to third parties which intimate products you have viewed: the scope of data is minimised (the content of an individual product is not transmitted), so it cannot be used to infer your intimate preferences or sex life. For monitoring the use of the store we give priority to analytics hosted in the EU.
Cookie table
Below are the actual cookies and similar technologies used by the store. Analytics and marketing cookies are loaded only after the relevant consent. Lifetimes are indicative and depend on browser settings and on the provider.
Strictly necessary
| Name | Provider / domain | Purpose | Category | Lifetime | Third-country transfer |
|---|---|---|---|---|---|
vg_age_ok |
ViagoShop (first-party) | Confirms the visitor has verified being of legal age; without it the store is not accessible. | Necessary | 30 days | No |
vendure-auth-token |
ViagoShop (first-party) | Stores the login session of a registered buyer and the cart contents. | Necessary | 7 days | No |
NEXT_LOCALE |
ViagoShop (first-party) | Stores the selected page language. | Necessary | 1 year | No |
__Host-csrf |
ViagoShop (first-party) | Protection against CSRF attacks on form submission (order, login). | Necessary | session | No |
vg_consent |
ViagoShop (first-party) | A record of your cookie consent decision (for proof and to honour your choice). | Necessary | 1 year | No |
vg_compare |
ViagoShop (first-party) | Stores the products added to the comparison tool. | Necessary | up to 1 year | No |
vg_rail |
ViagoShop (first-party) | Remembers the state of the side navigation or menu. | Necessary | up to 1 year | No |
vg_recent |
ViagoShop (first-party) | Stores recently viewed products. | Necessary | up to 1 year | No |
vg_promo |
ViagoShop (first-party) | Remembers a promo code from a link so it is correctly applied in the cart. | Necessary | up to 30 days | No |
vg_popup_seen |
ViagoShop (first-party) | Prevents the same pop-up from being shown repeatedly. | Necessary | up to 1 year | No |
vg_install_dismissed_at |
ViagoShop (first-party) | Remembers that the web app install prompt was dismissed. | Necessary | up to 1 year | No |
vg_chat_v |
ViagoShop (first-party) | Technical state of the chat widget. | Necessary | up to 1 year | No |
vg_visit_count |
ViagoShop (first-party) | Counts visits in order to adapt what is shown (for example prompts). | Necessary | up to 1 year | No |
Analytics (only with consent: analytics)
| Name | Provider / domain | Purpose | Category | Lifetime | Third-country transfer |
|---|---|---|---|---|---|
posthog, _ph*, vg_ev_ |
PostHog (EU, eu.i.posthog.com) |
Measuring store usage and improving the user experience. | Analytics | up to 12 months | No (EU) |
_ga |
Google (.viagoshop.com) |
Distinguishing users for visit statistics (GA4). | Analytics | 2 years | Yes (USA, DPF/SCC) |
_ga_* |
Google (.viagoshop.com) |
Maintaining session state for GA4. | Analytics | 2 years | Yes (USA, DPF/SCC) |
_gid |
Google (.viagoshop.com) |
Distinguishing users (short-lived). | Analytics | 24 hours | Yes (USA, DPF/SCC) |
Marketing or advertising (only with consent: marketing)
| Name | Provider / domain | Purpose | Category | Lifetime | Third-country transfer |
|---|---|---|---|---|---|
_gcl_au and conversion or remarketing cookies |
Google Ads (.viagoshop.com, Google) |
Conversion measurement and remarketing. | Marketing | up to 90 days | Yes (USA, DPF/SCC) |
_fbp |
Meta Pixel (.viagoshop.com, Meta) |
Measurement and advertising on Meta platforms. | Marketing | up to 90 days | Yes (USA, DPF/SCC) |
_fbc |
Meta Pixel (.viagoshop.com, Meta) |
Attribution of a visit from an ad (click identifier). | Marketing | up to 90 days | Yes (USA, DPF/SCC) |
Session replay
With analytics consent, PostHog does more than set cookies: it also records how your session unfolds in the store — pointer movement, clicks and the sequence of pages. The purpose is a single one: to find out where a purchase gets stuck.
- Input fields are masked: whatever you type into a form (name, address, email address, password) is not present in the recording.
- The recorder cannot see card details. The card field runs inside a separate frame belonging to the payment provider Mollie and is not part of our page.
- A recording reproduces what was on screen, and therefore also which products you viewed. It is accessible only to us and stays with the processor in the EU (Frankfurt).
- Recordings are kept for at most 30 days and are then deleted automatically.
Without analytics consent no recording starts. You may withdraw consent at any time; from that moment new sessions are not recorded.
How consent works
On your first visit a cookie banner is shown before any non-essential cookie is loaded. Strictly necessary cookies are loaded regardless of your choice because they are needed for the store to function.
The banner offers you:
- "Accept all" and "Reject all", which are equivalent and equally accessible (rejecting is no harder than consenting).
- granular choice by category (analytics, marketing) through the "Settings" button, where you switch an individual category on or off.
The following applies:
- No non-essential category is pre-ticked.
- Merely continuing to browse, scrolling or closing the banner does not constitute consent.
- We record your decision (date, scope and version of the consent) in the
vg_consentcookie so that we can demonstrate compliance and honour your choice.
Withdrawing and changing consent
You can change or withdraw your consent at any time through the "Cookie settings" link in the footer of every page. Withdrawing is just as easy as giving consent and takes effect for the future; processing carried out before the withdrawal remains lawful. Once the relevant category is withdrawn, the cookies in that category stop operating.
Managing cookies in your browser
You can further restrict or delete cookies in your browser settings. Below are pointers for the most common browsers:
- Chrome: Settings, Privacy and security, Cookies and other site data.
- Firefox: Settings, Privacy & Security, Cookies and Site Data.
- Safari (macOS): Settings, Privacy.
- Safari (iOS): Settings, Safari, Block All Cookies.
- Edge: Settings, Cookies and site permissions.
Important: if you block the
vg_age_okcookie, you will not be able to enter the online store. If you blockvendure-auth-token, your cart contents will not persist between visits.
You can delete all stored cookies in the privacy section of your browser. After deletion, the store will ask you again to confirm your age and for your cookie consent.
Processors and transfers to third countries
Some cookies and technologies are operated by our contractual processors, with whom we have concluded processing agreements under Article 28 of the GDPR:
- PostHog (analytics, hosted in the EU): no transfer to a third country.
- Google Ireland Ltd. or Google LLC (Google Analytics 4, Google Search Console, Google Ads): processing in the USA, on the basis of the DPF or SCC.
- Meta Platforms Ireland Ltd. or Meta Platforms, Inc. (Meta Pixel): processing in the USA, on the basis of the DPF or SCC.
We do not sell personal data and do not share it for third-party marketing. Details of all processors, transfers to third countries and your rights are set out in the Privacy Policy.
Your rights and supervisory authorities
In relation to the processing of personal data through cookies you have rights under the GDPR (access, rectification, erasure, restriction, objection, portability and withdrawal of consent). You can exercise these rights free of charge at podpora@viagoshop.com.
Regarding the use of cookies and the protection of personal data you may contact the supervisory authority:
- Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, tel. +386 1 230 97 30, gp.ip@ip-rs.si, www.ip-rs.si.
The Agency for Communication Networks and Services of the Republic of Slovenia (AKOS) is also competent for the supervision of electronic communications. If you have your habitual residence in another EU Member State, you may also lodge a complaint with the supervisory authority of that state.
Changes to this policy
We may update this Cookie Policy from time to time, in particular when introducing new features or services. The version in force at any time, with the date of the last update, is published on this page, and we retain earlier versions in order to demonstrate compliance. We will inform you of significant changes by a prominent notice in the online store and, where necessary, ask for your consent again.
Contact
For any questions about cookies and the processing of personal data, write to us at podpora@viagoshop.com or call +386 30 741 481.
