Cookie Policy

Cookies and similar technologies

Cookies are small files used by a website to remember information. Similar technologies include local browser storage. Esen Trappen B.V. uses website features for the basket, checkout, account access, payments, embedded content and chat.

Necessary website features

WordPress and WooCommerce use functional storage to support account access, maintain the basket and complete checkout. Strictly necessary cookies do not require prior consent, but their purposes must be explained. Payment services may also use security and fraud-prevention technologies as part of the payment process.

External content and chat

The website includes Google Maps, Instagram content and Tawk.to chat. These providers may receive technical information and use cookies or similar technologies when their content loads. Google Maps embeds and Tawk.to chat remain blocked until you accept optional services. Instagram photographs served from this website can remain visible; following a link to Instagram opens that provider’s service and its own privacy controls apply. The delivery-distance calculation is separate: your delivery address is used to calculate the delivery fee requested during checkout.

Statistics: Google Analytics 4

With your statistics consent, we use Google Analytics 4 to understand visits and page views and measure successful quote requests and completed paid orders. Analytics is not loaded when you deny statistics consent. Quote-form names, email addresses, phone numbers and message contents are not included in our conversion events. Purchase events include an order reference, currency, item quantity, item value, tax and shipping amounts.

Google Analytics uses _ga to distinguish visitors and _ga_* to maintain session state. Google documents a default cookie lifetime of two years; browser settings and consent withdrawal can affect storage. See Google’s cookie documentation.

Conversion storage

After a purchase event is sent with statistics consent, this website stores esen_ga4_purchase_<order reference> in local browser storage to avoid counting the same purchase again. It has no automatic expiry in the current implementation and can be removed by clearing this website’s browser data. This is separate from cookies required for the basket and checkout.

Details of verified storage

The entries below describe storage identified in our current checks. Durations are provider defaults unless stated otherwise; browser settings and changes to service configuration can affect them.

  • WooCommerce — wp_woocommerce_session_*: links a customer session to cart data on our server. Default duration: 2 days for guests and 7 days for logged-in customers. Functional storage for the basket and checkout.
  • Stripe — __stripe_mid: helps prevent payment fraud. Default duration: 1 year. Used by the payment service.
  • Stripe — __stripe_sid: supports payment fraud checks. Provider default duration: 30 minutes; the latest external scan reported 1 hour for this integration.
  • Stripe — m (m.stripe.network): a fraud-detection identifier observed in the payment integration. Stripe documents a 2-year default for its m identifier; the latest external scan reported approximately 13 months (1 year, 1 month and 4 days) for the network-domain variant.
  • WooCommerce — woocommerce_cart_hash and woocommerce_items_in_cart: detect changes to basket contents. Duration: browser session.
  • WooCommerce — wc_cart_hash_*: a basket cache identifier in local storage. Local storage has no browser-enforced expiry and can be removed by clearing website data.
  • WordPress — wpEmojiSettingsSupports: a session-storage capability record for emoji rendering. It lasts for the browser tab session; the external scan reports a session lifetime.
  • Complianz — cmplz_*: remembers the banner status, policy version and consent choices. The checked visitor cookies expire after approximately one year.
  • Tawk.to — twk_uuid_*: recognizes returning visitors and maintains chat continuity. Default duration: 6 months. The chat service remains blocked until optional services are accepted.
  • WordPress — wp-settings-time-*: records when a logged-in user last saved interface preferences. Default duration: 1 year. This relates to logged-in user settings.

Sources: WooCommerce session defaults, Stripe cookie information, Tawk.to cookie information and WordPress user settings.

Order attribution

WooCommerce order-source tracking is disabled. The sbjs_* cookies previously used for this feature are no longer created in our fresh visitor checks. Existing browser records can be removed by clearing website data.

Payment-provider content

Checkout uses Stripe payment components for payment security and fraud checks. Apple Pay, Google Pay, Link and Amazon Pay are loaded in the final Payment methods step, rather than on the basket page. Availability depends on your device, browser and payment provider. Standard card, Klarna, iDEAL and bank-transfer options remain available. Loading payment options does not place an order or make a payment. Payment providers may receive technical information and use cookies or similar technologies when their components load. Provider storage and browser restrictions can vary.

For payment technology details see Stripe cookie information and WooCommerce cookie information.

Verified administration storage

The installed plugin code identifies the following local-storage entries as administration interface state. They are distinct from visitor tracking cookies. Local storage has no browser-enforced expiry; it remains until the application removes it or website data is cleared.

  • SureForms — srfmSettingState: remembers selected tabs, panels and settings in the form block editor.
  • Starter Templates — st-import-start and st-import-end: records the start and finish times of a site import to calculate elapsed import time. The implementation removes these records in retry/error flows.
  • Starter Templates — starter-templates-onboarding: stores setup progress and configuration. The AI setup flow removes it on completion.
  • Starter Templates — st-scroll-position: restores the scroll position of the template selection interface.
  • Starter Templates — gt-current-screen-esentrappen.nl: remembers the current screen of the Gutenberg template library.
  • Easy Appointments — ea-appointments-period: remembers the selected date range in the administration appointment list.

These purposes and storage types were checked against the installed plugins’ source files. They do not establish that these entries are created for ordinary site visitors.

Appointment form storage

Easy Appointments uses ea-form-options in local storage in its Bootstrap appointment form. The installed code saves form values after the final appointment request responds and restores them on a later form visit. Depending on the fields completed, this can include contact or other appointment form details. It has no browser-enforced automatic expiry and can be removed by clearing this website’s browser data. This is form convenience storage, separate from Analytics. Identifying this capability in the plugin code does not establish that every website visitor creates the record.

Chat session storage

Tawk.to — tawk_has_register_visitor is a session-storage flag. In the inspected Tawk.to source, it is set to true after a successful chat session registration when visitor information has been supplied through the Tawk API. The flag is checked to avoid preparing the same visitor login details again within that tab session. The flag itself stores a boolean marker, not the visitor contact details. It lasts for the browser tab session and can also be removed by clearing website data. It belongs to the optional chat service, which remains blocked until optional services are accepted. Its presence in the code does not mean every visitor creates it.

Customizer and legacy editor storage

The two remaining scan names have been matched to the providers’ official source code. These are administration interface records, separate from visitor Analytics. This source match identifies their purpose but does not prove that the currently installed version creates them for ordinary visitors.

  • Astra — customizerVisitCount: local storage used by the Customizer Style Guide. It counts initial Customizer openings, up to five, to show a reminder indicator; the indicator is hidden once the counter reaches five. It does not count public website visits. The inspected implementation supplies no automatic expiry.
  • Spectra Legacy — uagSvgConfirmation: local storage used in the block editor to remember confirmation of the SVG-upload warning. The editor reads the marker before opening the SVG media uploader and writes it after successful confirmation. Editor initialization can refresh it from the saved confirmation setting. It is not a visitor tracking identifier. The inspected implementation supplies no automatic expiry.

These local records can remain until application code changes them or the browser’s website data is cleared. Sources: Astra’s official WordPress theme package, Spectra Legacy SVG confirmation source and Spectra Legacy storage helper. The fresh visitor checks did not reproduce these two records.

Your choice

Our consent window offers Accept, Deny and View preferences. Deny keeps optional maps, chat and Analytics blocked. Use Manage consent to reopen the window and change or withdraw your choice. Complianz stores your consent preferences so the website can remember and apply them. Withdrawing consent stops future optional loading; cookies already stored can also be removed through your browser.

You can also remove stored cookies or restrict cookies in your browser settings. Blocking necessary cookies may prevent the basket, login or checkout from working correctly.

Contact

Questions about website cookies or personal data: info@esentrappen.nl. Esen Trappen B.V., Nieuw Zeelandweg 15B, 1045 AL Amsterdam, Netherlands.