Review-safe public draft
Cookie Notice
This review-safe Cookie Notice reflects the current committed storefront: no analytics or marketing cookies, one sessionStorage intro preference, and pending confirmation for framework or backend session cookies in deployed environments.
Last updated: July 24, 2026
Scope
This Cookie Notice explains the cookies and browser storage reflected in the current VEHICOTEK storefront source. It should be updated before production if analytics, marketing pixels, map providers, support tooling, commerce sessions, or consent-management tooling are added.
Current Storefront Audit
The current committed public storefront audit identifies the following categories:
- Strictly Necessary Cookies: The storefront does not directly set cookies in committed source. Framework or backend session cookies may be used in configured environments and must be confirmed before production publication.
- Authentication and Security: Account and installer experiences call backend authentication/session endpoints where available. Production cookie names, durations, and security attributes require backend-environment confirmation.
- Preferences: The committed public homepage intro stores the session-only key vehicotek_intro_played in sessionStorage so the intro does not replay during the same browser session.
- Analytics: No analytics abstraction, tracking script, or analytics cookie is committed in the storefront.
- Marketing: No marketing pixel, advertising tag, or marketing-cookie workflow is committed in the storefront.
- Location and Maps: Installer finder behavior reads backend-published profiles and can display Google Maps markers when public Maps configuration and Admin-verified coordinates exist. Browser geolocation is not required, and server geocoding remains backend-only.
Strictly Necessary Cookies
The storefront source does not directly set cookies. Framework or backend session cookies may be used in configured environments for routing, authentication, account, cart, security, or infrastructure behavior. Cookie names, lifetimes, same-site settings, secure flags, and hosting-provider behavior must be confirmed before production publication.
Authentication and Security
Owner and installer account routes may call backend authentication or session endpoints in configured environments. Those backend systems may use cookies or comparable browser/session identifiers. The current F2F-B pages do not define or implement backend session policy.
Preferences
The homepage intro uses sessionStorage key vehicotek_intro_played so the intro does not replay during the same browser session. This is not an analytics or marketing identifier and is cleared by the browser according to sessionStorage behavior.
Analytics
No analytics abstraction, tracking script, analytics cookie, or analytics consent category is committed in the storefront. If analytics are added later, this notice and any consent workflow must be updated before launch.
Marketing
No marketing pixel, advertising tag, behavioral advertising cookie, or retargeting workflow is committed in the storefront. If marketing technology is added later, this notice and any required preference controls must be updated before launch.
Location and Maps
The public installer finder is currently a storefront experience and does not commit a browser-location permission, map provider, geocoding provider, or map cookie workflow. If location or map services are added later, the provider and consent behavior must be documented.
Managing Preferences
Because no analytics, marketing, or cookie-preference system is currently implemented, this page does not present a Manage Cookie Preferences control. Users can control browser storage through browser settings, and the site should add a real preference tool before using optional cookies that require consent.
Related Privacy Information
See the Privacy Policy for broader information about data categories, use, sharing, retention, security, choices, and contact routing.
Changes
This Cookie Notice should be updated whenever new cookies, session identifiers, analytics, marketing tags, map tooling, customer-support tooling, or consent controls are added.