Cookie and Storage Notice

Applicability

Published by Dravara, LLC. This notice describes the scope and practices stated below. Publication does not activate an unavailable service or, by itself, establish a user's agreement to a contractual provision.

A contractual provision requiring your agreement applies only where there is a legally effective agreement and only to the extent permitted by applicable law. Nothing published here makes privacy rights, other nonwaivable rights or Dravara's legal obligations depend on your accepting a contractual provision.

Third-party names and marks remain their owners' property, and their appearance does not imply affiliation, sponsorship, endorsement or participation. A partnership, acquisition, licensing or other commercial relationship requires a separate written agreement.

How PUPMKT uses browser storage

• PUPMKT uses browser storage for the functions listed below. Optional PUPMKT analytics, advertising, affiliate attribution and session replay are not enabled in this release. Cloudflare Web Analytics separately measures page views and site performance without cookies, local storage, session storage or IndexedDB; it is not used for advertising or cross-site profiling. There are no optional tracking settings to change on the Privacy Choices page in this release. Before introducing optional processing that requires a choice, we will provide the applicable notice and choice.
• Clearing site data in your browser can remove saved choices, theme preferences and other local state, and may sign you out. Changing an analytics choice does not itself delete account information, server security records or data already lawfully retained by a provider.

The records this release stores in your browser

• This list covers the storage PUPMKT itself sets on this site. If you choose to sign in with Google, you are redirected through Google and WorkOS, and any storage those services set on their own domains is governed by their notices: the Google Privacy Policy and the WorkOS Privacy Policy.
• PUPMKTPrivacyChoices.v2 — local storage, first party — your privacy choices and the configuration version they were made against — stays until you clear it, or it is invalidated or replaced.
• PUPMKTAnalyticsConsent.v1 — local storage, first party — a legacy consent record superseded by the key above; it is read only so an earlier choice is not silently lost, and it is removed when choices are saved again.
• PUPMKTTheme.v1 — local storage, first party — your light or dark theme preference — stays until you clear or reset it.
• Service worker and cache storage — cache storage, first party — PUPMKT registers a service worker so pages still open when your connection is poor, and it keeps copies of pages, styles and images in your browser cache — stays until you clear this site data. It is not analytics, it does not identify you, and its contents are not sent anywhere.
• PUPMKTSessionPresentation.v2 and the superseded PUPMKTSessionPresentation.v1 — local storage, first party — what the header should show about your signed-in state before the server answers, so the page does not flicker — cleared when you sign out or clear site data. Each is a presentation hint, not a credential.
• PUPMKTCart.v1 and PUPMKTCartPresentation.v1 — local storage, first party — items and counts you have gathered locally — stay until you clear them. Purchases are not open, so these do not constitute an order.
• PUPMKTSavedListings.v1 — local storage, first party — listings you saved for later — stays until you clear it.
• PUPMKTListingDraft.v3 and PUPMKTListingAutosave.v1 — local storage, first party — a listing you are preparing, kept so a reload does not lose your work — stay until you clear them or the draft is discarded.
• PUPMKTMutationIntent.v1 — local storage, first party — a record that an action was started, so it is not repeated twice by accident — short-lived and cleared when the action resolves.
• Sign-in session cookie — cookie, first party, set by the server — keeps you signed in — cleared on sign-out and at expiry. It is marked secure and HTTP-only, so page scripts cannot read it.
• No advertising, affiliate-attribution or session-replay storage is written by this release, and no analytics identifier is set while analytics is disabled.