Cookie policy
Last updated: 2026-09-14
Operator notice: a complete public business address has not been supplied. See the business details page for the information currently available.
This policy covers cookies and similar browser storage on ambur.shop and its seller subdomains.
What the site uses
- Sign-in cookies: Supabase uses project-specific names beginning with
sb-, including-auth-tokencookies (sometimes split into numbered chunks) and a-code-verifiercookie during sign-in. These enable authentication, session renewal, and secure sign-in callbacks. They are used for the account service you request. - Account notice record: when you choose Google sign-in after accepting the account privacy notice,
ambur_account_noticetemporarily carries the notice version and acceptance time to the sign-in callback. It is limited to the callback path and expires after 10 minutes. - Duration: the installed Supabase library defaults to a maximum cookie age of 400 days and refreshes or replaces sign-in cookies as sessions change. Actual session validity is also controlled by Supabase configuration. Signing out clears the current browser’s sign-in session. Clearing site data in your browser removes remaining cookies.
- Browser caching: your browser may cache images, fonts, and application files to load pages. This application does not install an advertising identifier through those files.
Optional analytics and your choice
Only after you accept, we record page categories and WhatsApp click counts. We do not use advertising pixels. The earlier ambur_session_id session-storage value is removed when the current application loads. No replacement session identifier is created.
Cookie choices
The cookie choice banner lets you accept or reject optional analytics. Neither scrolling nor continuing to browse counts as acceptance. We store your preference, notice version, and choice time in the server-readable, HttpOnly ambur_cookie_choice cookie for 180 days. Site scripts cannot read that cookie. It is set for this hostname only, so seller subdomains may ask separately. If cookie storage is blocked, the browser may remember a rejection in ambur_analytics_rejection local storage so the banner does not keep asking; local storage alone can never authorize analytics. When the choice expires or you clear site data, analytics is off until you choose again. Use the button below to change your choice; rejecting stops future analytics without affecting browsing or sign-in. Blocking browser cookies prevents a saved opt-in. You can browse without signing in. Clearing sign-in cookies may require another login.
Other providers
Google sign-in and WhatsApp or social links lead to services with their own cookies and policies. The site does not embed maps, videos, or social feeds. Public product and store images are served by Cloudflare R2. Service delivery and security requests may expose your IP address to providers; this is described in the privacy policy.
Questions about browser storage can be sent to admin@ambur.shop.