{
  "reviewed_at": "2026-03-12",
  "notes": [
    "Public-facing cookie and storage inventory.",
    "Items marked needs_verification require additional runtime verification."
  ],
  "items": [
    {
      "name": "cart_token",
      "kind": "cookie",
      "status": "confirmed",
      "provider": "first-party",
      "purpose": "Keeps a guest cart available across requests and rotates the cart identifier on logout.",
      "category": "necessary",
      "likely_duration": "persistent",
      "duration_detail": "30 days",
      "appears_set_before_consent": true,
      "http_only": true,
      "same_site": "Lax",
      "secure": false
    },
    {
      "name": "pw_access_token",
      "kind": "cookie",
      "status": "confirmed",
      "provider": "first-party",
      "purpose": "Stores the signed-in session token used to keep authenticated requests working.",
      "category": "necessary",
      "likely_duration": "session",
      "duration_detail": "Session duration.",
      "appears_set_before_consent": true,
      "http_only": false,
      "same_site": "Lax",
      "secure": "conditional_on_https"
    },
    {
      "name": "pw_auth",
      "kind": "localStorage",
      "status": "confirmed",
      "provider": "first-party",
      "purpose": "Stores sign-in state needed to keep the user logged in during browsing.",
      "category": "necessary",
      "likely_duration": "persistent",
      "duration_detail": "Stored until cleared.",
      "appears_set_before_consent": true
    },
    {
      "name": "pw_lang",
      "kind": "localStorage",
      "status": "confirmed",
      "provider": "first-party",
      "purpose": "Stores the user's language preference.",
      "category": "preferences",
      "likely_duration": "persistent",
      "duration_detail": "Stored until cleared.",
      "appears_set_before_consent": "user_action"
    },
    {
      "name": "pw_cookie_notice_dismissed_v1",
      "kind": "localStorage",
      "status": "confirmed",
      "provider": "first-party",
      "purpose": "Remembers dismissal of the informational necessary-cookies notice so it is not shown on every visit.",
      "category": "necessary",
      "likely_duration": "persistent",
      "duration_detail": "Stored until cleared.",
      "appears_set_before_consent": true
    },
    {
      "name": "lang",
      "kind": "cookie",
      "status": "needs_verification",
      "provider": "first-party",
      "purpose": "Used to remember the preferred site language.",
      "category": "preferences",
      "likely_duration": "needs_verification",
      "duration_detail": "Write behavior requires additional runtime verification.",
      "appears_set_before_consent": "needs_verification"
    },
    {
      "name": "Google Identity Services",
      "kind": "third_party_script",
      "status": "needs_verification",
      "provider": "third-party",
      "purpose": "Provides Google sign-in when the user opens the auth modal.",
      "category": "necessary",
      "likely_duration": "needs_verification",
      "duration_detail": "Third-party cookie or storage details require runtime verification.",
      "appears_set_before_consent": true,
      "load_condition": "Loaded only when the auth modal is opened."
    },
    {
      "name": "Stripe.js / Stripe Elements",
      "kind": "third_party_script",
      "status": "needs_verification",
      "provider": "third-party",
      "purpose": "Provides payment UI and payment confirmation during checkout.",
      "category": "necessary",
      "likely_duration": "needs_verification",
      "duration_detail": "Third-party cookie or storage details require runtime verification.",
      "appears_set_before_consent": true,
      "load_condition": "Loaded only on the checkout payment page."
    }
  ],
  "not_found": [
    "analytics tools",
    "tag managers",
    "marketing pixels",
    "chat widgets",
    "A/B testing tools",
    "consent management platform",
    "sessionStorage-based tracking"
  ]
}