COOKIE & LOCAL STORAGE POLICY

Technical storage audit for authentication, cart persistence, payment processing, and consent-aware measurement.

CONSENT-AWARE TRACKING ARCHITECTURE

Essential technical storage is active for checkout and login. Optional measurement cookies (GA4) default to DENIED and activate strictly after explicit consent.

1. STRICTLY NECESSARY STORAGE AUDIT

sb-*-auth-token (Supabase Auth JWT)

Secure cookie / session storage for user login session.

ESSENTIAL

ost_cart (localStorage)

Preserves selected t-shirt sizes, quantities, and custom artwork IDs during browsing.

ESSENTIAL

__stripe_mid / __stripe_sid (Stripe Payments)

Set by Stripe Checkout for fraud prevention during payment processing.

ESSENTIAL

2. OPTIONAL MEASUREMENT & ANALYTICS COOKIES

_ga / _ga_* (Google Analytics 4)

Currently INACTIVE (Unconfigured measurement ID).

INACTIVE

3. THIRD-PARTY ADVERTISING PIXELS AUDIT

We do NOT run Meta Pixel, TikTok Pixel, Pinterest tags, or third-party behavioral advertising trackers. Zero ad tracking pixels are present on our storefront.