Cookie Policy
Which cookies and similar technologies Arfa7 Fit uses, what they are for and how you can change your choice at any time.
Last updated: 22 October 2026
Contents
1. What cookies are
Cookies are small text files a website stores in your browser. We also use similar technologies such as the browser’s local storage (localStorage); below we call them all “cookies”. We use them in line with Art. 4a of the Bulgarian Electronic Commerce Act and the GDPR.
2. Categories
- Strictly necessary — required for the site to work: sign-in, cart, security, language and remembering your cookie choice. No consent is needed and they cannot be switched off.
- Functional — remember extra preferences for convenience (e.g. your recent searches on the site). Stored only if you allow them.
- Analytics — help us understand how the site is used through aggregate statistics. Not used at the moment.
- Marketing — used to measure and show interest-based ads on other websites and social networks. Not used at the moment.
Categories 2–4 are only ever loaded after your explicit consent. Before we start using a new cookie we add it to the table below.
3. Cookies and storage we use
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
sp_session | first-party HttpOnly cookie | keeps you signed in | until the browser is closed, or 30 days with “Remember me” | strictly necessary |
sp_dev | signed HttpOnly cookie | security: remembers that you have signed in from this browser before, so your sign-in is not slowed down while someone else tries to guess your password | 12 months | strictly necessary |
sp_orders | HttpOnly signed cookie | lets this browser see the confirmation of the orders it placed | 30 days | strictly necessary |
sp_consent | cookie | stores your cookie choice (version, categories, date) | 12 months | strictly necessary |
sp_lang | cookie | remembers your language (Bulgarian or English) | 12 months | strictly necessary |
sp_chat | cookie | created only if you use the chat; links your browser to the conversation | 90 days | strictly necessary |
sp-cart-v2 | local storage | cart contents and chosen free gifts | until you clear it | strictly necessary |
sp-wishlist-v1 | local storage | your favourites | until you clear it | strictly necessary |
sp_admin | HttpOnly cookie | staff sign-in to the admin panel; never set for visitors | until the browser is closed, or 30 days with “Remember me” | strictly necessary |
sp_admin_dev | signed HttpOnly cookie | the same as sp_dev for staff in the admin panel; never set for visitors | 12 months | strictly necessary |
sp_session- Type
- first-party HttpOnly cookie
- Purpose
- keeps you signed in
- Duration
- until the browser is closed, or 30 days with “Remember me”
- Category
- strictly necessary
sp_dev- Type
- signed HttpOnly cookie
- Purpose
- security: remembers that you have signed in from this browser before, so your sign-in is not slowed down while someone else tries to guess your password
- Duration
- 12 months
- Category
- strictly necessary
sp_orders- Type
- HttpOnly signed cookie
- Purpose
- lets this browser see the confirmation of the orders it placed
- Duration
- 30 days
- Category
- strictly necessary
sp_consent- Type
- cookie
- Purpose
- stores your cookie choice (version, categories, date)
- Duration
- 12 months
- Category
- strictly necessary
sp_lang- Type
- cookie
- Purpose
- remembers your language (Bulgarian or English)
- Duration
- 12 months
- Category
- strictly necessary
sp_chat- Type
- cookie
- Purpose
- created only if you use the chat; links your browser to the conversation
- Duration
- 90 days
- Category
- strictly necessary
sp-cart-v2- Type
- local storage
- Purpose
- cart contents and chosen free gifts
- Duration
- until you clear it
- Category
- strictly necessary
sp-wishlist-v1- Type
- local storage
- Purpose
- your favourites
- Duration
- until you clear it
- Category
- strictly necessary
sp_admin- Type
- HttpOnly cookie
- Purpose
- staff sign-in to the admin panel; never set for visitors
- Duration
- until the browser is closed, or 30 days with “Remember me”
- Category
- strictly necessary
sp_admin_dev- Type
- signed HttpOnly cookie
- Purpose
- the same as sp_dev for staff in the admin panel; never set for visitors
- Duration
- 12 months
- Category
- strictly necessary
We do not use third-party cookies. Any future third-party content (e.g. videos or maps) will load only after you consent to the relevant category.
4. Managing cookies
You can change or withdraw your consent at any time with the button below or the “Cookie settings” link at the bottom of every page — withdrawing is as easy as giving consent. We keep your choice for 12 months and then ask again.
You can also clear cookies and local storage in your browser settings; this empties your cart and signs you out.
More about personal data in our Privacy Policy.