Cookies and browser storage
Cookie Policy
Last updated: 3 August 2026
Pending verification — not final copy
This document is complete in structure but the business's legal identity details have not yet been confirmed, so it is not indexed and must not be relied on as final. Outstanding details:
- Business structure (sole trader / partnership / limited company / other)
This page lists every cookie and browser storage item this site uses, who sets it, what it does and how long it lasts — including storage set by our payment and security providers.
1.What we use, in short
- Strictly necessary storage keeps you signed in, remembers your basket and lets you pay. It cannot be switched off without breaking the shop, so we do not ask for consent for it — we disclose it here instead.
- Security storage protects our forms from automated abuse. It is also treated as strictly necessary.
- Optional preference storage remembers conveniences like recently viewed products. It is off until you turn it on.
- We use no analytics cookies and no advertising or cross-site tracking technologies.
Where the law requires consent, we ask for it before the storage is created — not after. Continuing to browse is not treated as consent.
2.Your choices and how to change them
You can accept or reject optional storage at any time. Rejecting is exactly as easy as accepting, and the shop works fully either way — there is no reduced service and no cookie wall.
If you reject or withdraw preference storage, we remove the preference data already stored on your device. We re-ask for your choices at least every 12 months, and whenever this notice changes materially.
You can also block or delete cookies in your browser settings. Blocking strictly necessary storage will stop sign-in, the basket and checkout from working.
3.Strictly necessary (always on)
Required to operate the shop: keeping you signed in, remembering your basket, and completing payment. These cannot be switched off without breaking core functionality.
| Name | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
| sb-<project>-auth-token | Supabase (authentication, first-party storage)First party | Local storage | Stores your sign-in session so you stay logged in and can view your account and orders. | Until you sign out or the session expires |
| dac-cart | DROP AI CLOTHINGFirst party | Local storage | Remembers the items in your basket, including size, colour and any coupon applied. | Until cleared by you or after checkout |
| dac.cookie-consent.v1 | DROP AI CLOTHINGFirst party | Local storage | Records your cookie choices and the version of the notice you saw, so we do not ask again and can evidence your choice. | 12 months |
| dac-theme | DROP AI CLOTHINGFirst party | Local storage | Remembers your light/dark display choice so the site does not flash on load. | Until cleared |
| Service worker cache (app shell, offline page) | DROP AI CLOTHINGFirst party | Cache storage | Stores site files so pages load quickly and an offline page is available. Account, checkout and payment pages are deliberately excluded from caching. | Until the app updates or you clear site data |
| __stripe_mid, __stripe_sid and related | Stripe (third party)Third party | Cookie | Set by Stripe's embedded payment form to process your payment and detect fraudulent transactions. | Session up to 1 year (set by Stripe) |
| WooCommerce order/session cookies | WooCommerce (order management back end)Third party | Cookie | May be set when your order is created in our order-management system so the order can be identified and processed. | Session to 2 days (set by WooCommerce) |
4.Security and fraud prevention (always on)
Used to protect forms and checkout from bots and abuse. These are required to keep the site safe and are treated as strictly necessary.
| Name | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
| cf_chl_* / Turnstile challenge storage | Cloudflare Turnstile (third party)Third party | Cookie | Verifies you are a human when submitting public forms (contact, newsletter, custom-design uploads) and blocks automated abuse. | Up to 30 minutes (set by Cloudflare) |
5.Preferences and personalisation (optional)
Optional conveniences such as remembering products you recently viewed and your recent searches. Turning these off does not affect shopping or checkout.
| Name | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
| dac.recently-viewed.v1 | DROP AI CLOTHINGFirst party | Local storage | Remembers products you looked at so we can show them again. | Until cleared |
| dac.search.recent.v1 / dac.search.popular.v1 | DROP AI CLOTHINGFirst party | Local storage | Remembers your recent searches in quick search. | Until cleared |
| dac.customer-profile.v1 | DROP AI CLOTHINGFirst party | Local storage | Stores your style-quiz answers so recommendations persist between visits. | Until cleared |
| dac:sound | DROP AI CLOTHINGFirst party | Local storage | Remembers whether interface sound is muted. | Until cleared |
| dac.notifications.v1 | DROP AI CLOTHINGFirst party | Local storage | Stores on-site notifications you have been shown (e.g. drop reminders). | Until cleared |
| collection scroll position | DROP AI CLOTHINGFirst party | Session storage | Restores your place in a collection when you go back from a product page. | Until the browser tab is closed |
6.Analytics (not used)
Measurement of how the site is used. We do not currently use any analytics cookies or similar technologies.
None. We do not currently use any technologies in this category.
7.Advertising and marketing (not used)
Ad targeting and cross-site tracking. We do not currently use any advertising or tracking technologies.
None. We do not currently use any technologies in this category.
8.Third-party storage
Stripe, WooCommerce and Cloudflare may set their own cookies when you reach payment, place an order, or complete a protected form. These are necessary to take payment securely, process your order and block abuse. They are listed in the tables above, and those providers publish their own cookie notices.
9.Questions
For anything about this notice, or to ask how a specific item is used, email support@dropaiclothing.com. How we handle personal data more generally is covered in our Privacy Policy.