Useful preferences. Optional measurement.
Essential storage supports your basket, language, privacy choice and secure owner access. Optional analytics stays off until you choose it. Rejecting is as available as accepting; you can change your choice on this page or through the shop footer. Browser Do Not Track and Global Privacy Control signals override an analytics opt-in.
Local storage and session storage are browser storage mechanisms, not necessarily cookies. The same purpose and choice information matters regardless of the mechanism. Your analytics preference applies to this browser; clearing storage or using another browser may require a fresh choice.
What this application stores
- hushwick-basket-v1 · localStorage
- Necessary basket contents: product, edition and quantity. No email or delivery address. Remains until you clear or replace the basket/browser data; no automatic expiry.
- hushwick-post:<purpose>:<version> · localStorage
- Remembers closing an invitation, with its version and timestamp, so it does not keep interrupting you. The configured cooldown is 1–90 days (14 by default). This contains no email or tracking ID. The old timestamp may remain until site data is cleared; it stops hiding the invitation after the cooldown.
- hushwick-locale · localStorage
- Requested EN/CS language preference. Remains until changed or browser data is cleared.
- hushwick_privacy_v1 · localStorage
- Necessary record of your analytics choice, policy version and expiry. Valid for 180 days; renewing consent requires a new choice.
- hushwick_analytics_session_v1 · sessionStorage
- Optional, after analytics consent only: session expiry marker, refreshed after activity for 30 minutes. There is no persistent visitor identifier and no session identifier sent to the server. Removed when consent is withdrawn; closing the tab normally clears session storage.
- __Host-hushwick-mfa · HttpOnly cookie
- Essential owner verification after MFA enrolment. An opaque random value, Secure, SameSite=Strict, Path=/, no Domain; expires after 8 hours. Only a hash is stored server-side. It is not an analytics identifier. The hosting provider also manages its own sign-in session; its cookie names and lifetimes are controlled by the provider.
Security services and other websites
Cloudflare Turnstile loads only for a protected form, rather than for advertising. It processes the browser/connection signals necessary for abuse checks. This widget does not enable Cloudflare pre-clearance. Owner sign-in may involve OpenAI’s own authentication services. Their notices explain their storage and processing.
There are no embedded social feeds or advertising pixels in this shop. A link to an external shop or privacy notice takes you to that website; it may set its own storage under its own rules.
Change or clear your choices
Use Cookie choices to withdraw optional analytics. That stops future optional events and removes the local analytics session marker. Daily aggregates already received contain no personal visit identifier and cannot be linked back for an individual deletion. You can also clear site data in your browser; doing so removes your basket and language preference too.