Essential storage
Session security, CSRF protection, cart state, authentication and saved preferences are required for core operation.
Analytics
Nonessential analytics should be disabled until the appropriate preference or lawful basis is recorded. Fingerprinting must not be used to create sales leads.
Control
A production preference centre must let users change optional choices without affecting essential commerce functions.
Policy review required before launch
This page is a product-policy shell, not legal advice or a final statutory notice. Final content depends on the merchant model, operating geography and appointed officers.