Cookies & browser storage

Storage notice, 2026-10-08.2. The catalog does not include advertising or third-party analytics scripts. Merely requesting an offer does not set a purchase cookie.

Storage needed for a requested purchase

• __Host-purchase-browser: a random identifier binding purchase access to this browser. It is set when you open a purchase arrival or perform a purchase action, and expires after 24 hours.
• __Host-purchase-mailbox: a random access session set only after redeeming a valid one-time mailbox link. It expires after 24 hours.

Both cookies use Secure, HttpOnly, SameSite=Lax and Path=/; they are host-only and cannot be read by page JavaScript. The browser may restrict them further. They are used for requested purchase access and security, not advertising.

On submitting a new purchase, session storage records purchase-request:<page path> to retry that request consistently. It is removed after payment is confirmed by the page, or when the browser’s tab session ends. No request key is stored merely by viewing a listing. This browser storage does not set the server’s retention period.

Choices and separate services

Blocking these identifiers can prevent purchase or mailbox access. These necessary functions do not use an optional analytics consent banner. The separate payment page and hosting security services also use technologies needed to process and protect the payment. No consent to marketing or optional tracking is collected by the immediate-supply checkbox.

See Privacy for data uses and contact details.