Cookie Policy

Last updated: 16 August 2026 · Version 1.5

Short version: the cookies that log you in and keep checkout secure are always on, because the store cannot work without them. Advertising and analytics cookies are off unless you accept them in the banner, and you can change your mind at the bottom of this page.

Cookies we set

These are set by our own sites (yiorashost.com and panel.yiorashost.com) and are strictly necessary — the store and panel cannot work without them, so consent is not required for them (Art. 4(5) of Greek Law 3471/2006, implementing the ePrivacy Directive).

CookiePurposeLifetime
*_sessionKeeps you logged in to the store / panelSession (a few hours)
XSRF-TOKENProtects forms against cross-site request forgerySession
remember_*Only if you tick "remember me" at loginUp to ~1 year

Payment pages

During checkout our payment provider Stripe sets its own cookies (such as __stripe_mid, ~1 year, and __stripe_sid, ~30 minutes) for fraud prevention and to make the payment work — a necessary part of paying online. See Stripe's cookie policy.

If you choose the Greece-only IRIS option, you are redirected to a Viva.com-hosted payment page. Viva.com applies its own cookies and similar technologies there; see Viva.com's privacy information.

Advertising and analytics cookies — only if you accept

We advertise on Google and on Reddit, and we want to know which adverts actually produce a sale rather than just a click. Measuring that means letting Google and Reddit set cookies on our store pages. It is entirely optional: refusing costs you nothing and the site behaves identically.

Until you accept in the banner, Google's tag runs with every advertising and analytics permission switched off, and Reddit's pixel is not requested from Reddit at all — no cookie below is written and nothing is read from your device. Accepting turns on:

CookieSet byPurposeLifetime
_gcl_auyiorashost.comLinks an advert click to a later purchase (Google Ads conversion measurement)~90 days
_ga, _ga_*yiorashost.comTells returning visits apart from new ones (Google Analytics 4)~2 years
NID, IDE and similargoogle.com / doubleclick.netGoogle's own advertising cookies, governed by Google's cookie policyUp to ~13 months
_rdt_uuidyiorashost.comLinks a Reddit advert click to a later purchase (Reddit Ads conversion measurement), governed by Reddit's cookie notice~90 days

When an invoice is paid we also send Google and Reddit the invoice number, the amount excluding VAT and the currency, so a sale can be matched to the advert that produced it. Your name, email address, postal address, server details and payment details are never sent — in Reddit's case that means the pixel is set up without any of the optional identifiers it can accept, such as your email address or a mobile advertising ID.

Local storage (not cookies)

The site writes two local-storage preferences: theme_mode — whether you chose light or dark mode — and yioras_consent_v1, which records your answer to the cookie banner so it stops asking. Neither leaves your browser. Once you have accepted, a yioras_conv_invoice_* and a yioras_rdt_conv_invoice_* marker are written per paid invoice so the same purchase is not reported to Google or Reddit twice. A browser that encountered our brief Cloudflare analytics trial on 22 July 2026 may still contain an obsolete yioras_analytics_consent choice; the site no longer reads or transmits that value, and clearing local storage removes it.

Server logs

Independently of anything you choose here, our web server creates ordinary access logs when it delivers a page. We use those logs locally to produce short-lived, aggregate counts such as page groups, coarse referrer categories and HTTP status classes. This does not read or write anything on your device. See the Privacy Policy for the data-minimisation and retention details.

Controlling cookies

Use the button below to clear your answer to the banner. Advertising and analytics go back to off immediately, and the banner will ask again next time you open the store, so this is also how you turn them back on.

You can also delete or block cookies in your browser settings at any time. Blocking the strictly necessary cookies above will break logging in — there is unfortunately no way around that; they are how a login works.

See also: Terms of Service · Privacy Policy · Refund & Withdrawal Policy
For consumers in Greece, the Greek version is authoritative: Ελληνικά.