Cookies

Article 11.7a of the Dutch Telecommunications Act says we may not store or read information on your device unless that is needed for the service you ask for, or unless you have consented. We use the first option. There is no cookie banner, because there is nothing to choose: we do not place an analytics cookie or an advertising cookie.

Cookies that exist only after login

• xl_session. For XLadmin. HttpOnly, SameSite lax, seven days. It holds a signed proof that you are an administrator, not your password.
• xl_shop. For a logged-in webshop at /shop. Same properties, different purpose. This cookie does not open XLadmin.

Visitors who only compare do not get these cookies.

Local storage, not a cookie

The browser keeps three keys. Under the statute they count like a cookie, because they are storage on your device. They are needed for a function you switch on yourself.

• webshopxl.pc4. The four digits of your postcode, so same-day and distance are not asked again on every page.
• webshopxl.compare. At most four shop ids you want side by side.
• webshopxl.promises. The last 20 click promises on this device, so you can look up what you saw. A copy of the promise also goes to the server, without your name. See the privacy notice.

Clearing it yourself

In your browser settings, clear cookies and site data for webshopxl.com. The postcode is then empty, the comparison list is empty and you are logged out. The server copy of a click promise stays until the retention period ends or until you object, as the privacy notice describes.

The statute: Telecommunications Act at wetten.overheid.nl. If a statistics cookie ever appears, we ask first and we update this page the same day.