Cookie Policy
Last updated: 16 August 2026 · Version 1.5
Short version: the cookies that log you in and keep checkout secure are always on, because the store cannot work without them. Advertising and analytics cookies are off unless you accept them in the banner, and you can change your mind at the bottom of this page.
Cookies we set
These are set by our own sites (yiorashost.com and
panel.yiorashost.com) and are strictly necessary — the store and panel cannot work
without them, so consent is not required for them (Art. 4(5) of Greek Law 3471/2006, implementing
the ePrivacy Directive).
| Cookie | Purpose | Lifetime |
|---|---|---|
*_session | Keeps you logged in to the store / panel | Session (a few hours) |
XSRF-TOKEN | Protects forms against cross-site request forgery | Session |
remember_* | Only if you tick "remember me" at login | Up to ~1 year |
Payment pages
During checkout our payment provider Stripe sets its own cookies (such as
__stripe_mid, ~1 year, and __stripe_sid, ~30 minutes) for fraud
prevention and to make the payment work — a necessary part of paying online. See
Stripe's cookie policy.
If you choose the Greece-only IRIS option, you are redirected to a Viva.com-hosted payment page. Viva.com applies its own cookies and similar technologies there; see Viva.com's privacy information.
Advertising and analytics cookies — only if you accept
We advertise on Google and on Reddit, and we want to know which adverts actually produce a sale rather than just a click. Measuring that means letting Google and Reddit set cookies on our store pages. It is entirely optional: refusing costs you nothing and the site behaves identically.
Until you accept in the banner, Google's tag runs with every advertising and analytics permission switched off, and Reddit's pixel is not requested from Reddit at all — no cookie below is written and nothing is read from your device. Accepting turns on:
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_gcl_au | yiorashost.com | Links an advert click to a later purchase (Google Ads conversion measurement) | ~90 days |
_ga, _ga_* | yiorashost.com | Tells returning visits apart from new ones (Google Analytics 4) | ~2 years |
NID, IDE and similar | google.com / doubleclick.net | Google's own advertising cookies, governed by Google's cookie policy | Up to ~13 months |
_rdt_uuid | yiorashost.com | Links a Reddit advert click to a later purchase (Reddit Ads conversion measurement), governed by Reddit's cookie notice | ~90 days |
When an invoice is paid we also send Google and Reddit the invoice number, the amount excluding VAT and the currency, so a sale can be matched to the advert that produced it. Your name, email address, postal address, server details and payment details are never sent — in Reddit's case that means the pixel is set up without any of the optional identifiers it can accept, such as your email address or a mobile advertising ID.
Local storage (not cookies)
The site writes two local-storage preferences: theme_mode — whether you chose
light or dark mode — and yioras_consent_v1, which records your answer to the cookie
banner so it stops asking. Neither leaves your browser. Once you have accepted, a
yioras_conv_invoice_* and a yioras_rdt_conv_invoice_* marker are
written per paid invoice so the same purchase is not reported to Google or Reddit twice. A browser that encountered our brief Cloudflare analytics trial on
22 July 2026 may still contain an obsolete yioras_analytics_consent choice; the site
no longer reads or transmits that value, and clearing local storage removes it.
Server logs
Independently of anything you choose here, our web server creates ordinary access logs when it delivers a page. We use those logs locally to produce short-lived, aggregate counts such as page groups, coarse referrer categories and HTTP status classes. This does not read or write anything on your device. See the Privacy Policy for the data-minimisation and retention details.
Controlling cookies
Use the button below to clear your answer to the banner. Advertising and analytics go back to off immediately, and the banner will ask again next time you open the store, so this is also how you turn them back on.
Cleared. Advertising and analytics cookies are off again.
You can also delete or block cookies in your browser settings at any time. Blocking the strictly necessary cookies above will break logging in — there is unfortunately no way around that; they are how a login works.

