Cookie & Storage Policy

Current position

Exclusive Drops HQ currently uses cookies and browser storage for functions requested by the visitor: authentication, security, account verification and recovery, cart continuity, and interface preferences.

We do not currently activate advertising, behavioral-tracking, or third-party audience-measurement cookies. Because no optional tracker is active, the site does not display a consent banner that implies otherwise.

Essential cookies

• Supabase authentication cookies: maintain and refresh a signed-in session. Duration follows the active authentication session and provider configuration.
• exclusive_drops_user: provides a limited server-rendered account display state. It is HttpOnly, lasts up to seven days, and is cleared on sign-out or invalid session cleanup.
• ed_pending_email_verification: correlates an email-verification flow for up to 24 hours and is HttpOnly.
• ed_password_recovery: authorizes the recovery form for up to 15 minutes and is HttpOnly.

Production authentication and recovery cookies use Secure transport, SameSite protection, and HttpOnly where the browser must not read them.

Preferences and local storage

• exclusive_drops_theme and theme-storage: remember light or dark appearance. The preference cookie can last up to one year.
• store_sidebar_collapsed and ui-storage: remember catalog layout. The preference cookie can last up to one year.
• cartId: preserves the identifier of the source cart in local storage so the requested cart can be restored.
• Search and saved-search storage: remembers searches saved on the current device.
• Checkout session access: session storage holds short-lived checkout access for the current browser tab.
• Authentication synchronization: a local storage event coordinates sign-in or sign-out across tabs without storing a reusable access token.

Local and session storage are browser features rather than cookies, but they are disclosed here because they store information on the device.

Legal basis and control

Authentication, security, form, and cart storage is used to provide a service the person explicitly requests. Appearance and layout preferences remember a direct choice and do not track activity across unrelated websites.

Visitors can clear cookies and site data through browser settings. Doing so may sign the visitor out, reset preferences, remove saved searches, or disconnect the browser from an existing cart.

Future analytics or marketing tools

Before any technology requiring consent is added, it must be blocked by default. The site must then provide clear purposes, equally accessible accept and reject actions, granular choices where purposes differ, and a persistent way to withdraw consent.

A future consent record will not be treated as permission for a new or materially changed purpose without obtaining the choice required by law.

Updates and contact

This inventory is reviewed when authentication, checkout, analytics, advertising, or browser-storage behavior changes.

Questions about cookies or browser storage can be sent to edhqprivacy@exclusivedrops.com.