Cookie Policy.

What cookies we use

Strictly necessary (no consent required under UK PECR)

• Authentication/session cookie (keeps you logged in), set by Supabase Auth
• Cookie consent choice (remembers whether you accepted or declined the functional cookies below), a session cookie, so you'll be asked again on a future visit

Functional (requires consent)

• Onboarding intent cookie: remembers your answer to "what are you here to do?" between signup and your first login, so we can route you to the right page. Expires after 30 days, or once applied to your account, whichever is sooner.
• Partner referral cookie: if you arrived via a partner's tracked link, this remembers that for a limited window. Whisky purchases don't currently carry a referral reward, so in practice this cookie has no financial effect on a whisky purchase, but the mechanism is shared platform-wide, so the cookie can still be set on this domain. Signed and unreadable by anyone but our servers. Expires after 30 days.
• Native referral cookie: the same mechanism as above, for a link shared by another user rather than a partner. Expires after 30 days.
• Awin publisher-referral attribution cookie: if you arrive at our site via a link tracked by another Awin publisher, this remembers that for a limited window so we can correctly attribute your visit to that publisher. It is set by us, first-party, only with your consent, and only when you arrive this way. Signed and unreadable by anyone but our servers. Expires after up to 30 days.
• Awin MasterTag: Awin's own tracking script and cookie(s), loaded from Awin's domain (dwin1.com), used to support their affiliate-tracking network generally, not only the two cookies above. Third-party. It does not load at all until you accept cookies (checked in a real browser, 30 September 2026), and never on a page where you're entering payment details.