Cookies
Version 2026-08-12
The rules
The Norwegian Electronic Communications Act (13 December 2024 no. 76) entered into force on 1 January 2025. Under section 3-15 first paragraph it is not permitted to store or gain access to information in the end user’s equipment without the user being informed and having given consent. Consent via browser settings is no longer enough — an active choice is required.
The second paragraph exempts technical transmission and storage that is strictly necessary to provide a service explicitly requested by the end user. The Norwegian Data Protection Authority and Nkom supervise this jointly.
What we actually use
| Name | Purpose | Duration | Category |
|---|---|---|---|
dw_consent | Remembers your choice so we do not have to ask on every page | 12 months | Necessary |
dw_cid | Random id linking the consent log to your choice (burden of proof) | 12 months | Necessary |
| The payment partner session | Completing the payment. Only set when you open checkout. | Session | Necessary |
That is the whole list. No Google Analytics, no Meta Pixel, no ad networks, no sharing with third parties.
Analytics without tracking
We would like to know which wallpapers people look at. We do that without cookies: every event is tagged with a key derived from the date, IP and browser through a one-way hash function. The key rotates every 24 hours and cannot be reversed to an IP address. It therefore cannot be used to follow you from one day to the next.
We ask for consent anyway. Strictly speaking we neither store nor read anything in your equipment, so the exemption could probably be relied on — but the line has not been tested, and we would rather stay on the right side of it.
The categories
Necessary — always on
Required for the store to work: cart, payment session and storing your own consent choice. These are exempt from the consent requirement.
Includes: dw_consent, dw_cid, the payment provider session
Analytics
Lets us see which wallpapers people actually look at, without following you. We store no identifier lasting longer than 24 hours, and share nothing with third parties.
Includes: First-party event log with a daily rotating hash
Marketing
Cross-site tracking for advertising. We do not use this today. The category is here so your choice is on record before anything like it is ever switched on.
Includes: None active today
Change or withdraw consent
Saying no should be as easy as saying yes, and withdrawing consent as easy as giving it. Click here to open the choice again: .
You can also delete the cookies in your browser. We will then ask again next time you visit.
Why the banner looks the way it does
«Reject all» and «Accept all» have the same size, colour and placement, both sit at the first level, and no boxes are pre-ticked. That is not a design preference — it follows from the joint guidance of the Norwegian Data Protection Authority and Nkom, which in June 2025 issued a fine partly because a site had a visually prominent «accept» against a muted «reject».
We use no cookie wall either. The store works just as well if you say no to everything.
Questions? personvern@mija.no