Cookie policy
Last updated: 7 September 2026.
This policy explains every cookie Pekkish sets, what it is for, and how long it lasts. It sits alongside our privacy policy, which covers personal data more broadly. Pekkish is operated by One Tandem Limited, a company registered in England and Wales (company number 17229064).
1. The short version
We set no third-party cookies and no advertising cookies. Nothing on a Pekkish storefront reports your browsing to Google, Meta, or any analytics company. Every cookie below is set by Pekkish itself, on the site you are looking at.
2. Cookies we set
2.1 Strictly necessary
These make the site work. They cannot be switched off, and under the Privacy and Electronic Communications Regulations they do not require your consent.
| Name | Purpose | Lasts |
|---|---|---|
_lunch_mk2_session |
The page-to-page session for the site you are on. It holds your basket while you build an order, a referral code you arrived with, and the one-time codes used to sign in securely. Set on your first page view, because a basket has to live somewhere before you sign in. Signed and encrypted. | Until you close your browser |
session_id |
Keeps you signed in. Signed, so it cannot be tampered with; shared across Pekkish and every shop's subdomain so one account works at every shop you use. | Until you sign out, or 90 days after your last visit on that device (each visit extends it). Signing out, resetting your password, or "Sign out everywhere else" on your account page removes it. |
pk_consent |
Remembers whether you accepted or declined the measurement cookie below, so we stop asking. Set only once you answer. | 1 year |
2.2 Measurement — only with your consent
We ask before setting these, on shop storefronts and on pekkish.co.uk alike, and the site works normally if you decline. One answer covers every Pekkish site.
| Name | Purpose | Lasts |
|---|---|---|
pk_visitor |
A random identifier with no name, email or address attached. It lets us count how many people arrived from a particular link or campaign, so a shop can tell whether its poster or its social post actually brought anyone in. First-party only — never shared, sold, or readable by anyone else. | 1 year, refreshed on each visit |
pk_attribution |
Records which link first brought you here — the campaign or referral, never the pages you then look at. It is what lets a shop see that a nomination or a poster led to a real order. | 90 days |
2.3 Convenience
Small preferences, set as a result of something you did.
| Name | Purpose | Lasts |
|---|---|---|
passkey_device |
Remembers that this device has a passkey, so we offer Face ID or a fingerprint instead of asking for your password. It holds no credential — the passkey itself never leaves your device. | 20 years |
passkey_prompt_dismissed |
Remembers that you said no to setting up a passkey, so we stop offering. | 20 years |
beta_bar_dismissed |
Remembers that you closed the beta notice, so it stays closed. | 90 days |
Shop staff using the admin area also get one piece of session storage (not a cookie), shop-sidebar-scroll, which remembers where the sidebar was scrolled to between pages. It lasts until the tab is closed.
3. Changing your mind
Clear cookies for this site in your browser settings and the banner will ask again. Declining leaves the strictly necessary cookies in place — the site cannot function without them, and they are not used to track you.
4. What we do not do
- No advertising or retargeting cookies, and no advertising pixels.
- No third-party analytics — no Google Analytics, no Meta Pixel, no session recording.
- No selling or sharing of anything a cookie records.
- No cross-site tracking. A cookie set on one shop's storefront is not readable by another company.
5. Asking us about it
Questions about this policy, or about the data behind it, go to our contact form. One Tandem Limited is registered with the Information Commissioner's Office under registration number ZC156390.