Marketplace document
Cookie policy
Information about necessary cookies, granular consent and conversion measurement on MDStore.
Section 1
Updated: 2 October 2026. Cookies and localStorage/sessionStorage keep information on your device. Change your choice through Cookie settings in the footer. Refusing optional categories does not restrict access.
Section 2
Necessary first-party storage: mdstore_session authenticates local sessions (7 days, HttpOnly, Secure in production); mdstore-language remembers language (cookie: 1 year); mdstore-cart keeps selected products until cleared; mdstore-ai-support-chat keeps the last 10 messages in sessionStorage until the tab session ends or data is cleared. mdstore-pwa-installed and mdstore-pwa-install-dismissed-v2 remember installation/dismissal choices. PWA cache stores static resources until a version change, excluding private pages.
Section 3
cookie-consent stores categories, version and choice time in localStorage. A new choice is required after at most 180 days or a version change. When storage is unavailable, the choice lasts only in the open document.
Section 4
Optional Preferences: mdstore-recent-searches stores up to 5 searches only with consent and is removed on withdrawal. Requested language and the shopping cart do not depend on this option.
Section 5
Optional Analytics: MDStore internal events, Vercel Analytics and GTM-WKMB49K9 with GA4 G-4HY9TNREVF run only with Analytics consent. Google may set _ga and _ga_*; actual lifetimes depend on Google property configuration and require operator verification.
Section 6
Marketing is off by default and has a separate choice. No Meta/TikTok or Google Ads tags were found in the inspected public container. Marketing-only consent does not start GA4. New tags require trigger review and a consent-version update.
Section 7
Clerk may set cookies for requested authentication. Exact names and lifetimes require verification in the configured login flow. WhatsApp, Telegram, Viber, Facebook and Instagram open at your choice and manage their own cookies.
Section 8
Withdrawal reloads the page to stop already executed code and removes known optional cookies accessible to this site, including _ga_* variants. The site cannot delete HttpOnly or other-domain cookies; use browser/provider settings for those.