2. Storage inventory
Entries are used only when the relevant feature is available or requested. Closing a tab may not remove its session storage if your browser restores that tab. Browser controls can clear local storage and cookies. Device or browser restrictions can prevent preferences from being remembered.
| Name | Type | Purpose | Lifetime / clearing condition |
|---|---|---|---|
kama-cart | Local storage | Product variants and quantities in your bag. | Until items are removed or this site’s storage is cleared; no automatic expiry. |
kama-currency | Local storage | Your chosen euro or sterling display. | Until changed or this site’s storage is cleared. |
kama-display-preferences | Local storage · when selected | Your explicitly chosen theme, text size, reduced motion, contrast and link-underline settings. | Until changed, reset through Display settings or this site’s storage is cleared. |
kama-cookie-consent | Local storage | Your map preference, notice version, choice time and expiry. | Valid for up to 180 days. Expired or outdated choices are discarded when checked. |
kama-checkout | Session storage | Order identifier and checkout verification secret for a PayPal return, when checkout is active. | This browser tab’s session or until cleared. Checkout is currently paused. |
kama-admin-token | Session storage · staff only | A staff authentication token, verified against authorised admin access. | Until staff sign-out, a rejected session or the tab’s session ends. |
kama-customer-session | HttpOnly cookie | Customer sign-in access and refresh session. Restricted to account API requests. | Up to 7 days from issue or renewal; cleared on sign-out or an invalid session. |
kama-customer-verifier | HttpOnly cookie | Protects email confirmation and password recovery using a browser-specific verifier. | Up to 1 hour, or cleared when completed or rejected. |
kama-customer-recovery | HttpOnly cookie | Marks a requested or verified password-reset journey. | Up to 1 hour while pending, then up to 15 minutes after verification; cleared on completion or sign-out. |
sb-…-auth-token and related Supabase auth keys | Local storage / authentication storage | The Supabase browser SDK can persist a social-sign-in session, including tokens and user metadata, for Google or Apple sign-in. A hosted editor preview can also broker that session to its trusted editor. | Managed by the authentication SDK until sign-out, invalidation or browser clearing; no separate fixed retention period is configured by this storefront. |
kama-apple-signout-pending | Local storage | Prevents an old social-sign-in browser session automatically restoring sign-in if provider sign-out fails. | Until successful provider sign-out, an explicitly requested Google or Apple sign-in or browser clearing. |
kama-voter | HttpOnly cookie · when rating | Pseudonymous browser identifier to manage repeat club votes when you submit a rating. | Up to 1 year; remove this site’s cookies to clear it. |
Browser social sign-in is an exception to server-only account storage: the Supabase SDK may keep authentication tokens locally during a Google or Apple sign-in session. Email/password sign-in through the store uses the protected session cookie. Provider-controlled storage may also be used when you deliberately visit Google, Apple, PayPal or another external service. See the Google Privacy Policy and Apple Privacy Policy.
3. Optional external maps
Our club guide can display OpenStreetMap content. Without permission, the embedded map is not loaded; the page keeps location text and a separate map link. Allowing external maps connects your browser to OpenStreetMap, sharing information needed for that connection, including your IP address and browser details. The provider controls its own infrastructure and any storage used there.
The consent control offers one optional purpose: external maps. There are no inactive analytics or advertising switches. A separate map link is your own navigation to that provider and can be used even when embedded maps remain blocked.
4. Change or withdraw permission
Choose Accept optional, Reject optional or Manage preferences on the banner. Optional maps are blocked by default, and scrolling or continuing to browse does not grant permission. Your selection is stored with the current notice version and timestamp for up to 180 days. We ask again when it expires or when the version changes.
Use at any time to withdraw or change permission. Rejecting removes loaded optional embeds and blocks future ones. It cannot undo information already sent to an external provider or remove that provider’s own cookies from its separate domain.
If local storage is unavailable, an explicit choice can apply during the current page visit but may not be remembered. Clearing this site’s browser data removes your saved choice and bag. Disabling essential authentication storage can prevent sign-in from working.