Cookie policy

Cookies are small text files a site saves on your computer, phone or tablet. On your next visit the browser hands them back, so the site knows, for example, that you are already signed in or that you chose English.

Besides cookies we use browser storage — local storage and session storage. These are not cookies: they are not sent to the server on their own, they simply stay in the browser until you clear them or close the tab. We call them by their real names in the table below instead of lumping them together as «cookies».

There are no pixels, advertising tags, embedded third-party widgets or external scripts on this site — a page loads our own files only.

• Necessary — signing in, language, cart, checkout, tournament registration, membership and storing your own cookie choice. The shop does not work without them, so they cannot be switched off in the settings and the law does not require consent for them.
• Functional — the light or dark theme, the opening animation and the memory of recently viewed products. They live in your browser only.
• Analytics — our own statistics on our own server. Switched on only after your consent.
• Marketing — not used. There are no advertising pixels, no remarketing and no conversion tracking on this site.

These are the sign-in cookie (better-auth.session_token, up to 30 days; on the live site it carries the __Secure- prefix and the HttpOnly flag, so scripts cannot read it), the cookie holding your cookie choice (rebote_consent, 6 months), the language cookie (NEXT_LOCALE, until the browser closes) and the cart in local storage (rebote.cart.v1 plus a random key rebote.cart.token the server uses to hold stock for your browser).

A separate admin-panel language cookie (pp.admin.locale, one year) is set only for shop staff who signed into the admin panel.

Tournament registration, Gold membership and payment create no cookies of their own: the order, the entry and the membership live in our database and are tied to your account, not to your browser.

If you block necessary cookies in the browser, signing in, the cart and checkout stop working.

The theme (pp.theme) is written only when you switch it yourself — that is your own decision and needs no separate consent. The mark that you have seen the opening animation (pp.intro) lives until you close the tab.

The memory of recently viewed products (pp.viewed, up to twelve items) is the one functional technology you never asked for, so it is switched on only with your consent under «Preferences». The list never leaves your browser: only product addresses are sent to the server, to render their cards. Withdraw consent and the list is erased at once.

We have no third-party analytics: no Google Analytics, no Google Tag Manager, no Meta Pixel, no Hotjar, no Microsoft Clarity — nothing of the kind is installed on this site.

Instead we run our own counter: with your consent the browser sends our server the events «page view», «product view», «add to cart», «begin checkout», «payment started» and «purchase». Each event carries a random browser number (rebote.vid) and a visit number (rebote.sid), the page path without parameters, the language, the device type (phone, tablet or computer), the domain you came from and the utm_source tag if you arrived through a tagged link.

What we do not record: IP address, name, email, order number or any link to your account. The numbers are random and say nothing about you.

Events are kept for no longer than 14 months. If you withdraw consent, the browser asks the server to delete everything already collected under that number and forgets the numbers themselves.

There are no marketing or advertising technologies on this site. We show no ads, measure no conversions for ad networks, build no audiences and pass no data to advertising platforms.

In the settings dialog this category is marked as unused and has no switch: consent is given for a specific purpose, and asking for it in advance «just in case» would not be honest. If such technologies appear, we will ask you again.

Payments are handled by Montonio, an Estonian payment provider offering bank links and cards.

What happens on our side: when you press «Pay», the shop creates an order with Montonio and sends your browser to their page. We set no payment cookies and never see your card details — they are entered on the provider's side or in your online bank.

What happens on Montonio's side: on their page the provider uses its own cookies for payment security, fraud prevention and keeping the payment session. Those cookies are set on the montonio.com domain, we cannot read them, and Montonio's own policy applies to them.

After payment Montonio returns you to our site with a link that carries the signed payment result, and separately confirms the payment directly to our server. None of that exchange stays in your browser.

Apart from the payment provider, no third-party service stores anything in your browser on this site. Fonts and all scripts are served from our own domain; there are no embedded maps, videos or social media widgets on the pages.

Technical error logs are kept on the server side and write nothing to your browser.

On your first visit a choice appears at the bottom of the screen with three equally prominent buttons: «Reject all» — only the necessary technologies remain; «Accept all» — functional and analytics are switched on; «Choose» — opens the settings, where categories are switched on one by one.

Until you choose, nothing optional runs: silence is not consent, and the counter sends no events before your decision.

You can change or withdraw consent at any time — the «Cookie settings» link sits at the bottom of every page. Withdrawing is as easy as giving, and the new choice takes effect immediately. Withdrawal does not undo processing that was lawful before it.

Your choice is stored for 6 months, after which we ask again. We also keep a record of the consent itself — a random number, your choice, the version and the language, with no IP address and no link to your account: the law requires us to be able to prove consent was given.

The table lists everything the site stores in your browser, and what it is for.

Every modern browser lets you view stored cookies, delete them, block them entirely or per site, and clear them when the browser closes. Local storage and session storage are cleared in the same place, together with site data.

The settings live under: Chrome — «Privacy and security → Cookies», Firefox — «Privacy & Security», Safari — «Privacy», Edge — «Cookies and site permissions».

Remember: blocking the necessary cookies stops signing in, the cart and checkout from working.

We update this policy when the site changes: new features or services appear, providers change or the law does. The date of the last update is shown at the top of the page.

If a change affects something you consented to, we ask you again — the technical consent version is raised and the choice dialog reappears.

VTS Engineering OÜ, registry code 14953637, VAT number EE102288445. Address: Karikakra tee 52, 74117 Maardu, Harju maakond, Estonia.

Questions about cookies and personal data: vts.juhendaja@gmail.com, phone +372 5800 7144.

How we handle personal data in general is described in the Privacy policy.