Cookie policy

Sign-in and security

The hosting service manages cookies needed for private sign-in and security. Those cookies are controlled by the host; exact production cookie names and expiry periods have not been independently verified. App browser-data controls do not sign you out of your hosting account.

Application storage inventory

• commerce-os:v1:<workspace>:owner:<user> — browser local storage for the owner’s editable demo catalog, creator planning records, and activity history. Retained until cleared.
• commerce-os:checkout-demo:v1:owner:<user> and related live-cart/attempt keys — browser local storage for requested cart, simulation, and test checkout recovery. Retained until cleared or the checkout flow removes its attempt record.
• commerce-os:brand-draft:<user> and commerce-os:launch-draft:<user>:<brand> — session storage for unfinished drafts in this tab. Removed when saved or explicitly cleared; browser session restoration may retain session data.
• The unused sidebar_state preference cookie is no longer written. No analytics, marketing, or fingerprinting cookie is created by application code.

Optional external email images

Email Studio initially blocks all remote images and fonts. “Load external images for this preview” is an optional, affirmative choice for the selected template. Klaviyo’s CloudFront host then receives network request information. The choice is held only in the open page’s memory and resets when you change templates or reload. “Block external images” stops future requests from that preview. External provider processing already performed cannot be withdrawn retrospectively.

When consent needs review

Consent depends on the actual technology, purpose, and applicable law. Authentication and requested cart/workspace storage may qualify for essential-use exceptions. Adding advertising, tracking, replay, or other third-party embeds requires a fresh review and any necessary consent before loading. UK exceptions for certain statistics and appearance functions have specific conditions; this site does not rely on them to enable analytics.

Your controls

Use Privacy & launch to clear local Commerce OS data, or use your browser’s site-data settings. This can remove unfinished work and carts; export first. Blocking all storage may prevent saving or sign-in. Declining external images does not prevent using the workspace.