Cookie information
Draft information. These policies must be reviewed before the store goes live.
What this preview stores
This staging preview uses first-party technical storage needed for sessions, authentication, security, cart intent and the informational cookie-notice acknowledgement. It does not currently load advertising or analytics trackers on ordinary storefront pages.
Technical storage needs clear information but does not require marketing consent. Selecting Got it only dismisses the information notice; it is not consent to marketing, advertising or reminders.
Technical cookies and local storage
The Rails session cookie, named _poke_session, keeps encrypted first-party session state for security, CSRF protection, temporary sign-in and account flows. It is a browser-session cookie in the reviewed configuration.
The signed session_id cookie identifies an authenticated server-side session. Without Remember me, server access expires after 12 hours; with Remember me, the cookie and server access can expire after up to 90 days. Logging out or revoking a session ends access earlier.
The poke-essential-cookie-notice local-storage value records that the notice was dismissed. It remains until you clear site data because the current implementation has no automatic expiry.
Cart and checkout data
Cart and checkout information are server-side records, not additional browser cookies. A guest-cart ownership token is held only inside the encrypted browser session; the database retains only its digest and enforces an upper server-side ownership expiry of 30 days. The browser session can end sooner, so this is not a promise of a 30-day cookie.
An encrypted checkout draft is cleared after its 30-minute threshold by scheduled cleanup. This does not describe retention in backups or the complete retention schedule for carts and checkout data, which the final privacy notice will state.
Third parties and choices
Address autocomplete is requested through PokeShop.it and then processed server-side by the address provider. It does not load a provider script or API key into the browser. If you leave the shop to a payment provider or activate a WhatsApp link, that third party applies its own notices and storage.
No optional analytics, advertising, fingerprinting or embedded third-party tracker is active in the reviewed storefront. If one is added, PokeShop.it will update this page and provide the required choice before it runs.
Communication preferences, including any future marketing or cart-reminder preferences, are separate account controls. They are not collected through this cookie notice.
Questions
For questions about this information or your personal data, contact [email protected].