K. Cookie and Similar Technologies Notice
Plain-English summary: The essential session and security storage used by the Platform and how any future optional technology must be controlled.
1. What these technologies are
Cookies are small text records a website stores through a browser. Similar technologies include local storage, session storage and short-lived signed tokens. They can keep a customer signed in, protect a request, remember a preference or measure use. The organisation setting or reading the technology and its purpose determine whether consent is required.
2. Current Platform inventory
The current application uses strictly necessary server-set cookies or signed state for Shopify customer authentication, OAuth request/callback integrity, authenticated staff sessions, authorised staging-owner preview and security controls. These technologies are required to provide the requested account or administration service and are not used for advertising. Exact cookie names, hosts, durations and security attributes must be generated from the deployed configuration and recorded in the inventory before production.
The Cabinet Designer may use browser local or session storage for interface state or safe recovery of a customer’s current browser session. Saved customer designs and credit entitlements are held server-side and are not defined by browser storage. Shopify sets technologies on the existing storefront and customer-account service; its current notice and consent controls apply to those Shopify-controlled technologies.
No Platform-specific analytics or marketing technology has been verified in the current code audit. This notice therefore does not claim to set one. Any future analytics, marketing or non-essential functional technology must be added to the inventory and, where required, remain off until the customer makes a valid choice.
3. Choices and duration
Strictly necessary technology cannot be disabled through a consent control because the requested login, security or checkout function would not work, but you can block it in your browser and accept that consequence. Optional technologies must offer a clear accept/reject choice of equal prominence and a way to change or withdraw consent as easily as it was given. Withdrawing consent does not affect earlier lawful use.
Duration must be no longer than necessary for the stated purpose. Session records expire at session end or configured timeout; persistent preference records must show their actual duration in the production inventory. Third-party duration and access must be verified rather than guessed.
Contact hello@benchdogs.co.uk with privacy or cookie questions.