Effective date: 15 May 2026
Privacy & data
Mikofu is a store by Flamant Tekst & Design (Copenhagen, Denmark). This page explains what data we collect, why we collect it, and what your rights are under the GDPR.
What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
mik_sid — anonymous session ID | Keeps your cart, saved items, and personalisation across visits | Legitimate interest (Art. 6(1)(f)) | 12 months from last visit |
| Browsing events — product views, searches, scroll depth, dwell time | Personalise product ordering and descriptions for your taste | Consent (Art. 6(1)(a)) — requires cookie consent | 90 days |
| Category and price signals — inferred from browsing | Surface products that match your aesthetic and price range | Consent (Art. 6(1)(a)) | 180 days of inactivity, then automatically cleared |
| Cart events — add to cart, abandonment | Understand purchase intent; never used for retargeting | Legitimate interest (Art. 6(1)(f)) | 90 days after session ends |
| Email address — newsletter subscribers only | Send occasional updates on new objects and availability | Consent (Art. 6(1)(a)) | Until unsubscribed |
| Order data — name, address, payment (via Shopify Payments) | Process and deliver orders; statutory accounting obligations | Contract (Art. 6(1)(b)) + Legal obligation (Art. 6(1)(c)) | 5 years (Danish Bookkeeping Act) |
Cookies
We use four first-party cookies. No third-party tracking cookies — ever.
| Name | Purpose | Duration | HttpOnly |
|---|---|---|---|
mik_sid | Anonymous session identifier | 12 months | Yes |
mik_consent | Stores your cookie consent choice | 12 months | No |
mik_dir | Short-lived personalisation directives (edge cache) | 5 minutes | Yes |
mik_cart | Links your Shopify cart to the session | 12 months | No |
We use Vercel Web Analytics for aggregated, anonymous visit statistics. It sets no cookies, stores no identifiers on your device, and does no cross-site tracking.
Who sees your data
Your data is processed by Flamant Tekst & Design. We use Supabase (EU region, Frankfurt) for profile storage, Shopify for orders and payments, and Vercel for hosting. No data is sold. No data is used for advertising or retargeting. Shopify Payments processes card data under their own PCI compliance. Aggregate, non-personal session summaries (for example, category interest counts) are sent to our internal Slack workspace for operational monitoring — no name, email, or address is included.
Your rights
Under the GDPR you have the right to:
- Access — see what we hold about your session at /profile
- Erasure — delete all session data immediately from /profile
- Withdraw consent — revoke cookie consent at any time from the consent banner or /profile
- Object — to processing based on legitimate interest (contact us)
- Portability — request a copy of your data in a machine-readable format (contact us)
- Lodge a complaint — with the Danish Data Protection Agency (Datatilsynet), dt.dk
Contact
Data controller: Flamant Tekst & Design, Copenhagen, Denmark.
support@mikofu.com