Cookie Policy

Version: 2026-10-18 · Effective: October 18, 2026

What this policy covers

CockpitSquare uses cookies, local storage and session storage for account security, requested preferences and optional activities. Local storage can remain until it is changed or cleared; session storage normally lasts for the relevant browser-tab session.

Our chosen design keeps optional analytics and external media off until the relevant affirmative choice. You can choose Reject all, Customize or Accept all, and reopen Cookie settings to change or withdraw choices. Rejecting optional use should not prevent ordinary browsing, login or following a merchant link.

Use Cookie settings to review or change optional choices. Necessary account storage is separate from optional analytics and external media.

Necessary and requested-function storage

The following cookies and similar storage support CockpitSquare accounts and requested features:

cockpitsquare_user_session: signed-in user session. Lifetime: 30 days, subject to server expiry/revocation.

cockpitsquare_admin_session: separate admin authentication. Lifetime: 8 hours, subject to server expiry/revocation.

cockpitsquare_cookie_consent: remembers category choices and consent version, including refusal. Lifetime: 180 days or until changed.

cockpitsquare_cookie_consent_state: local UI mirror of the consent preference. Lifetime: until changed/cleared. An expired choice does not authorize optional processing.

Permission expires after 180 days from the recorded choice, including when a local-storage copy remains. An expired, invalid or outdated choice does not authorize optional analytics or media; we ask for a new choice.

cockpitsquare-accessibility: requested accessibility display settings. Lifetime: 1 year or until changed.

cockpitsquare_google_flow and cockpitsquare_google_identity: temporary, encrypted, HttpOnly cookies used when you choose Google sign-in. Maximum lifetime: 10 minutes. They protect the sign-in flow and hold the temporary identity needed to complete it.

cockpitsquare-push-dismissed: local storage remembering dismissal of the push invitation, until changed or cleared.

cockpitsquare-push-binding: local device/account binding after enabling push; cleared on disconnect/logout. The cockpitsquare-push IndexedDB database also stores a service-worker account binding; that binding is cleared on logout/account switch. Browser notification permission is controlled separately in your browser/device settings.

cockpitsquare_country and cockpitsquare_country_source: automatically detected shopping country, with United States used when detection is unavailable. These are session cookies; the site provides no manual country selector. In production these cookies are shared across cockpitsquare.com subdomains. cockpitsquare:shopping-country is a local-storage signal used to synchronize detected country changes between tabs, until updated or cleared.

cockpitsquare_latest_giveaway_seen: header indicator state. Lifetime: until updated/expired or browser storage is cleared.

cockpitsquare_brand_tab_{companySlug}: remembers the selected company-workspace tab. Lifetime: until changed/cleared.

cockpitsquare_currency, cockpitsquare_weight_unit, cockpitsquare-theme: requested currency, unit and theme settings. Lifetime: until changed/cleared.

Preference and indicator storage supports the relevant user-interface function; it is not permission to run optional analytics.

Retired recommendation storage

Obsolete browser identifiers and tracking queues are cleared when you return to the site. CockpitSquare no longer builds learned interest profiles or collects browsing history for recommendations. A previous permission does not reactivate that collection or authorize Clarity session recordings.

Optional analytics

With Analytics enabled, CockpitSquare counts relevant product views, comparisons and shop-link interactions. New application analytics records do not include your account ID or a persistent browser/session identifier. We do not use these counts to reconstruct individual browsing journeys or personalize your feed.

The updated Analytics choice also covers Microsoft Clarity heatmaps and session recordings of public pages. Clarity remains off until you explicitly accept that choice; older aggregate-only consent does not authorize it. We stop collection on withdrawal and on account, administration and private-message routes. This does not delete information already received by Microsoft.

Clarity may set _clck to retain a site-specific browser identifier/preferences and _clsk to connect page views into a session recording. Microsoft describes its cookies and retention at https://learn.microsoft.com/clarity/setup-and-installation/clarity-cookies and its processing at https://privacy.microsoft.com/privacystatement. Our integration requests analytics storage only and keeps advertising storage denied. You can withdraw Analytics in Cookie settings and clear existing cookies through your browser.

cockpitsquare_viewed_{productId} helps avoid duplicate product-view events within a tab session and is cleared on withdrawal. This marker stays in your browser. Raw product engagement events expire after 90 days. Essential server security and rate-limit records are separate from optional analytics.

Optional external media

YouTube content starts behind a local placeholder under the chosen consent design. Loading it connects your browser to YouTube, which receives technical request information and may process information under its own policies. We do not load YouTube content before the relevant permission.

You can withdraw the relevant choice through Cookie settings. This stops subsequent optional activity that CockpitSquare controls; it does not give CockpitSquare direct control over all data already received by a third party.

Merchant links, security services and controls

Clicking Buy takes you to an external merchant, which sets its own terms and privacy practices. The link may include affiliate attribution. Optional CockpitSquare click analytics are distinct from the navigation itself and from the merchant's own processing.

Cloudflare Turnstile is used on protected forms for anti-abuse checks and can receive connection/device information. These security checks are distinct from optional analytics.

You may clear or block storage through your browser. Blocking necessary session storage can prevent login or requested features. Clearing preferences can make the site ask for your choice again. Contact [email protected] with questions.