The site uses local storage, which remains on this browser and device between visits. Like cookies, local storage is covered by UK rules about storing or accessing information on a device.

Basket data contains product choices, formats and quantities and is written when your basket changes. Saved-product data contains product identifiers and is written when you choose to save a product. A private receipt shortcut is saved when you complete an order; it contains the order reference, access token, total and creation date. Up to 100 such records are kept to reopen your receipts.

When you choose I agree & enter (18+), the site saves ukp-research-consent-v1 with the value accepted in this tab’s session storage. This essential session record remembers your acceptance of the age-restricted, research-only notice so it does not reappear on each page visit in the same tab.

The record contains no name, date of birth, account identifier or tracking data and is not used for analytics or advertising. It is kept for the current tab session and cleared when that session ends, normally when you close the tab. The exit option removes the record before leaving the website.

Browser settings can clear this session record. If session storage is unavailable, you can still agree and enter, but the site cannot remember that choice after a page reload. The footer’s browser-data controls manage basket items, saved products and receipt shortcuts; they do not remove this notice decision.

Basket storage supports the checkout service you request. Saved products and receipt shortcuts provide additional remembering features, with separate removal controls. They are not used for advertising profiles, cross-site tracking or page analytics.

UK rules include an exception for storage strictly necessary to provide a service requested by the user; local storage is not automatically exempt merely because it is local. Optional tracking would need assessment and, where required, a genuine consent choice before it starts.

Remove basket items individually in your basket, or use the browser-data controls in the footer. Select the basket, saved products or private receipt links you want to remove, then choose Clear selected data. Your browser settings can also clear all data for this site.

Local storage has no automatic expiry configured. Receipt history is limited to the most recent 100 saved records. Clearing local receipt links removes that device’s shortcut and token; it does not delete server orders or prevent authorised account access. Sign out and clear private receipt links before leaving a shared device.

Successful customer sign-in or signup sets __Host-ukp_customer_session for seven days. Successful administrator sign-in sets __Host-ukp_admin_session for eight hours. Both are host-only cookies with Path=/, Secure, HttpOnly and SameSite=Strict. They recognise your signed-in session; their HttpOnly flag prevents browser JavaScript from reading their values.

Signing out revokes the relevant server session and clears its cookie. Server-side token digests and expiry times support session validation. Changing a customer password invalidates older customer sessions, and rotating the owner’s configured credentials invalidates existing administrator sessions. These cookies are separate from the local basket, saved products and guest receipt links.

Cloudflare Tunnel makes the operator’s server reachable through this hostname. Cloudflare may add challenge or bot-management behavior, including cookies such as __cf_bm or cf_clearance, depending on the active configuration. Their actual use, purpose and lifetime on this hostname have not been verified; this notice does not claim that no provider cookies exist or that every provider cookie is exempt.

The browser-data controls remove the storefront’s local records and do not sign you out or remove provider-controlled cookies. Use Sign out in your account or administration to end the relevant session; browser settings can clear this site’s cookies, although a provider may set them again on a later visit.

The storefront has no embedded maps, videos, social widgets or remotely loaded fonts. Following an external research or tracking link takes you to a separate website with its own storage and privacy practices.

The notice and controls must be reviewed if analytics, advertising, embeds or another storage purpose is added. UK storage rules include several narrowly defined exceptions; using an exception still requires meeting its conditions. This site does not claim that every future analytics tool would be exempt.