Cookie Policy

Necessary sessions & security

Cookies are small values stored by your browser. Local storage persists on a device, while session storage is scoped to a browser tab. Aalya uses technically necessary storage to keep your cart, secure guest checkout, prevent duplicate submission and recover access to an order. Rejecting optional categories does not disable these functions.

Supabase authentication cookies (typically with an sb- prefix, sometimes split into chunks) maintain the anonymous authenticated checkout session. Their lifetime follows the authentication/session configuration and refresh cycle. HTTP-only aalya-receipt-* cookies protect checkout and receipt access and are set for up to 30 days from checkout preparation. They are not advertising identifiers.

Cart & checkout storage

aalya-cart-v1 in local storage keeps product and variant identifiers and quantities, without stored prices or card details. It has no automatic expiry and is updated or cleared through cart actions or your browser settings. aalya-checkout-active-v1 keeps a checkout attempt reference and recovery flags, and is removed on confirmed completion for that attempt.

aalya-checkout-pending-v1 in session storage holds a temporary submission/recovery draft, including delivery/contact details, while an order is sent or recovered. It is removed on confirmed completion or release of the attempt; browsers may restore session storage when reopening tabs. Clearing essential storage can remove cart selections or interrupt checkout and receipt recovery.

Language & your privacy choices

aalya-language remembers your selected English or Arabic interface in a first-party cookie for up to one year. aalya-cookie-preferences-v1 in local storage remembers the consent version, your analytics/marketing choices and the time you saved them for up to 180 days, after which the site asks again. No contact or order details are stored in that preference record. If browser storage is unavailable, choices apply in memory for this page session and may need to be set again.

Analytics & marketing: currently inactive

No analytics or marketing trackers are currently approved or loaded by this storefront. Both optional categories are off by default. Accept optional saves your choice for both; Reject optional keeps both off. Managing preferences lets you choose each category separately. Saving an opt-in does not activate a service today. Any future integration requires approval, an updated policy naming the tools and storage used, and valid category consent before loading; materially new purposes require a fresh choice.

Changing your choices

Open Cookie preferences in any public footer or below to review or withdraw optional consent as easily as you gave it. You may also manage storage in your browser. Necessary functionality remains available when optional storage is rejected. Clearing browser data can reset language and consent choices. For questions about personal information, see the Privacy Policy and Contact page.