This notice explains the limited information the TT Cigars website processes when you visit: the age confirmation, the approximate connection-country lookup resolved from your IP address, map tiles loaded on your request, and enquiries you send. It is a notice about actual website behaviour, not a consent form — reading it does not consent to tracking or marketing.

When you confirm that you meet the applicable legal-age requirement, the site stores a signed session confirmation in your browser. The confirmation records the time, the policy revision you confirmed, the connection country detected for your IP address (when a lookup succeeds) and a signature bound to your connection IP address. It is a session cookie: it disappears when you close the browser and, in any case, is not accepted after twelve hours. If your connection IP changes, you may be asked to confirm again.

To present age information suited to your connection, the site looks up an approximate country for your IP address. Lookups go to proxycheck.io (which may also indicate whether the connection is a VPN or proxy) with ipwho.is as a country-only fallback; a trusted network edge header is used when lookups are unavailable. Results are cached per IP for up to twelve hours. The lookup providers receive your connection IP under their own terms. A VPN/proxy indication is shown only as an advisory and never blocks your confirmation.

The detected connection country is resolved entirely on the server from your connection address — you are never asked to select or declare a country for age confirmation, and no form field, preference or cookie can override the detected result. The estimate is shown to you read-only (or “Connection country unavailable” when no lookup succeeds); it is recorded inside the signed confirmation and is not a verification of your physical location or proof of which law applies.

Shop detail pages can show an interactive map. The map is consent-gated: no tile request leaves your browser until you press “Load map”. When you do, map tiles are fetched from the configured provider — by default the OpenStreetMap tile service (openstreetmap.org), which receives your connection address and browser headers under its own terms — and the saved shop coordinates render locally. The site never requests your device’s location.

The age screen does not ask for a date of birth, an identity document, an account, an email address or precise geolocation, and it never requests browser geolocation automatically. No advertising or analytics identifier is set by the gate.

The twelve-hour confirmation and lookup cache govern the browser cookie and the site cache only. Web-server, edge-network, security, lookup-provider and map-provider logs keep their own retention schedules, which this notice does not control and does not claim to shorten. Where a verified provider retention statement exists it is linked from the published record.

If you contact us we use your message and contact details only to respond and to operate the site, under applicable data-protection law. You may ask what information we hold about you or request its correction or deletion through the contact page. Your statutory privacy rights are not affected by this notice or by any website term.