JUBILEE / COOKIES

Cookies and Browser Storage Policy

Necessary session storage, a remembered preference and no optional trackers.

The two storage purposes

This shop uses a necessary session cookie to connect the browser to a server-side cart, unfinished checkout and security controls. It uses a separate browser localStorage entry to remember the cookie-panel choice. Neither mechanism is a payment system. We do not use optional analytics, advertising or behavioral-tracking cookies, and do not create a cross-device account from the cart.

The necessary session cookie name begins with jubileeroasting_ and ends with _session; its middle identifier separates this store and preview version. The preference key is sf-cookie-consent:v1:jubileeroasting.com. The session stores a reference rather than putting your entire checkout inside the cookie. Your submitted request becomes a separate business record, not a browser cart archive. We do not describe the cart as a localStorage record.

Session duration and security

The session cookie has a maximum lifetime of 43,200 seconds, or 12 hours. Server-side unfinished data expires 12 hours after the session starts, not after the last activity; expired sessions are rejected on access. Residual server files are cleaned during later shop requests, with no hourly background cleanup. A cookie lifetime and server deletion are different controls, so losing a cookie does not itself prove the server record has already been removed.

On HTTPS the cookie uses Secure and HttpOnly with SameSite=Lax and a site-scoped path. A browser may restore its own tabs or storage, but an expired session does not become valid again merely because a tab was restored. If the session is unavailable, cart or unfinished form data may be lost. Do not rely on a shared browser to keep contact or delivery details private.

Remembering the panel choice

The localStorage preference is actively used for up to 180 days from the time it is saved. On the next visit after expiry, the record is removed and the panel is shown again. localStorage has no automatic expiry timer, so a residual value may remain on a closed device until that visit or manual clearing; it does not authorize continued optional processing.

The panel explains that only necessary storage is used. Acknowledge it or choose necessary only; neither choice turns on an advertising or analytics category. Cookie settings in the footer reopens the panel. Changing that preference must not empty the cart or erase a checkout draft, because those are separate session data. The panel is a control, not a certification of legal compliance.

Managing or removing browser storage

You can clear this site’s cookies and local storage in the browser’s site-data controls. Deleting the session cookie can lose the cart and unfinished checkout; deleting only the preference makes the panel appear again. Blocking cookies may prevent the cart, security check or request form from working. If you cannot submit, contact us through the published merchant details.

Clearing browser data does not delete an already submitted request, a payment record or a message held by the shop. Use the Privacy Policy contact process for those records. Private-browsing modes and device cleanup tools may discard site data sooner than the periods described here; we do not promise recovery of a draft after that happens.

External services and future changes

A link to a banking, carrier or government website does not mean this store has placed that service’s tracking cookie. Once you follow an external link, that site sets its own storage and privacy controls. We do not embed an onsite payment provider or optional third-party analytics service in this model.

If optional tracking is introduced later, its purpose, provider, duration and controls must be disclosed before activation, and any consent required by applicable law must be obtained. An old necessary-only acknowledgment is not permission for a new advertising purpose. Contact us below with a storage question, including the browser and the symptom but no passwords, cookie contents or security tokens.