This inventory is the browser-side source of truth for the covered repository. It lists the cookies and local-storage keys currently declared in code, together with the consent category they belong to and the purpose they serve.
The same governance layer also tracks browser-exposed vendor scripts or widgets. At the moment, this repository does not declare any optional third-party browser scripts on the covered surfaces. Future additions should be declared in the integration registry and gated through the consent layer before activation.
CookieEssential
cookie_consent
Stores the current consent level so the banner and preference center can honor the user choice.
Retention
Up to 180 days unless refreshed, cleared, or replaced by a newer preference.
Data footprint
Consent state only.
Security notes
Client-readable preference cookie; no raw IP is stored inside the value.
CookieEssential
cookie_consent_preferences
Stores the category-level preference bits for essential, preferences, analytics, and marketing handling.
Retention
Up to 180 days unless refreshed, cleared, or replaced by a newer preference.
Data footprint
Consent category choices only.
Security notes
Client-readable compact preference string used by the consent layer.
CookieEssential
cookie_consent_id
Provides a stable identifier for the consent record so server-side evidence can be updated without using raw network identifiers.
Retention
Up to 180 days unless refreshed, cleared, or replaced by a newer preference.
Data footprint
Random UUID-style identifier.
Security notes
Client-readable identifier used to link browser choice with server-side consent evidence.
CookieEssential
cookie_consent_ts
Records when the current consent choice was last updated.
Retention
Up to 180 days unless refreshed, cleared, or replaced by a newer preference.
Data footprint
Timestamp only.
Security notes
Client-readable evidence timestamp for preference refresh and audit support.
CookieEssential
cookie_consent_version
Tracks the notice version associated with the stored cookie preference so refresh logic can be evaluated later.
Retention
Up to 180 days unless refreshed, cleared, or replaced by a newer preference.
Data footprint
Version string only.
Security notes
Supports change control when the notice or consent schema changes.
CookieEssential
cookie_consent_signal
Records that a browser-level opt-out signal, such as Global Privacy Control, was honored as a restrictive baseline until an explicit site choice is made.
Retention
Up to 180 days unless replaced by an explicit preference choice or cleared by the user.
Data footprint
Signal state only, such as gpc.
Security notes
Used to avoid repeatedly re-recording the same browser opt-out signal while keeping optional categories off by default.
CookieEssential
cookie_consent_signal_ts
Records when a browser-level opt-out signal was last honored by the consent layer.
Retention
Up to 180 days unless replaced by a newer signal record or explicit preference choice.
Data footprint
Timestamp only.
Security notes
Provides narrow evidence timing for browser-signal handling without storing raw network identifiers.
CookieEssential
customer_session
Maintains authenticated customer access after a successful OTP login.
Retention
Server-defined token lifetime only; current implementation uses up to 30 days, or a shorter preference-aware path where configured.
Data footprint
Signed session token containing customer account identifiers.
Security notes
HttpOnly, same-site, path-scoped, and secure in production.
CookieEssential
admin_session
Maintains privileged admin access after successful primary authentication and MFA where required.
Retention
Server-defined admin session lifetime only.
Data footprint
Signed admin session token with role and permission context.
Security notes
HttpOnly, same-site, path-scoped, and secure in production.
Local storagePreferences
imagine-lang
Remembers the selected interface language across sessions.
Retention
Persistent until the user changes the setting or clears local browser storage.
Data footprint
Language code only.
Security notes
First-party local storage used for user-requested interface preference memory.
Local storageEssential
imagine-cart
Preserves cart contents and line-item notes for quote and order continuity.
Retention
Persistent until checkout completion, cart clearing, or user-driven browser cleanup.
Data footprint
Product identifiers, quantities, and any customer note entered in-cart.
Security notes
First-party local storage used to preserve requested cart continuity; should not hold unnecessary sensitive data.
Local storagePreferences
imagine-brand-liked
Remembers which public brand cards were liked in the portfolio browsing experience.
Retention
Persistent until the user removes the like state or clears local browser storage.
Data footprint
Brand like-state map only.
Security notes
First-party local storage for optional UX memory only.