Cookie Notice
This notice reflects the local clone audit on August 20, 2026. Production must be re-scanned after final providers and integrations are enabled.
Current categories
| Technology | Category | Purpose/status |
|---|---|---|
WooCommerce cart and session cookies, including woocommerce_cart_hash, woocommerce_items_in_cart, and wp_woocommerce_session_* |
ESSENTIAL | Remember cart contents and connect a customer to a server-side cart/session. |
| WordPress login/account cookies when a user signs in | ESSENTIAL | Authentication, account access, and security. |
WooCommerce order-attribution cookies, including sbjs_* |
FUNCTIONAL / ATTRIBUTION | Record referring source, campaign information when present, device/browser context, and session page views for an order. Legal/consent classification requires jurisdiction review. |
| TranslatePress language preference/detection | FUNCTIONAL / CONDITIONAL | May remember language when automatic language detection or preference behavior is enabled; verify production configuration. |
| WooCommerce Cart Abandonment Recovery records | FUNCTIONAL / DIRECT MARKETING RISK | May store email and cart details after entry. Dedicated GDPR/consent setting is currently off; production activation is not approved. |
| WPForms contact form | NOT A COOKIE BY DEFAULT / FORM PROCESSING | Processes submitted contact fields; any anti-spam provider must be re-audited if enabled. |
| WESSII Connect web chat local storage: opaque session value and optional proactive-dismissal state | ESSENTIAL / FUNCTIONAL WHEN CHAT IS REQUESTED | The anonymous chat-session value expires after 24 hours; proactive-dismissal state expires after 7 days. The current widget sets no cookie and uses no sessionStorage, IndexedDB, audience analytics, or advertising identifier. Message text is transmitted only when the visitor selects Send. |
| General audience analytics | NOT DETECTED | No active Google Analytics or equivalent audience analytics script detected in the clone. |
| Advertising/marketing pixels | NOT DETECTED | No active advertising pixel detected in the clone. |
Conditional future technologies
Stripe, PayPal, carriers, fraud tools, CAPTCHA, analytics, or marketing systems may set or read additional cookies or similar identifiers only if activated. Their exact names, provider purposes, retention, transfer behavior, and consent controls must be added before activation. WESSII Connect is active only in the local QA clone; production deployment and any changed storage behavior must be re-audited.
Consent and controls
COOKIE_MODEL = PARTIAL. Essential cookies are needed for requested cart, account, language, and security functions. Whether a consent banner is required now for attribution/cart recovery—or later for other non-essential technologies—depends on actual production configuration and applicable jurisdictions. Legal review is required. Until reviewed, non-essential analytics, advertising, and cart-recovery marketing should remain off or be held behind an appropriate consent control.
Browser controls may delete or block cookies, but blocking essential cookies can prevent carts, login, or language preferences from working. Privacy questions: shop.support@wessii.com.