Cookies & local storage
Effective September 7, 2026
Sea Provisions uses the storage below for sign-in, security and features you use. The current production web apps do not use advertising cookies, behavioral analytics, or third-party translation scripts. We do not ask you to accept advertising or analytics cookies because those features are not enabled.
| Purpose | What is stored and for how long |
|---|---|
| Sign-in | Authentication and account/role information in local storage. It can persist across browser sessions until sign-out, invalidation or removal of site data. The server separately checks token validity. |
| Secure links | Temporary set-password or helper access information in session storage so the link can be removed from the address bar. It is cleared on completion/sign-out as applicable or when that browser session ends; server-side expiry also applies. |
| Kroger connection |
A Secure, HttpOnly cookie named
sea_provisions_kroger_oauth, limited to the API
callback path, binds the authorization attempt to your browser. It
expires after ten minutes and is cleared at the callback.
|
| Offline work | App files in the service-worker cache, and pending profile, inventory, receiving or consumption edits in IndexedDB. Successful synchronization removes queued edits; sign-out/account changes clear private queued state. Installed app files can remain until you remove site/app data. |
| Preferences | Local preferences such as language and installation choices. These can remain until changed or site data is removed. Translation is not enabled in the current production web build. |
| Optional notifications | When permitted, Firebase and browser storage support the notification installation and delivery token. Sign-out unregisters the current device token; you can revoke permission in your browser or device settings. |
If you choose a paid subscription when available, payment checkout and Manage billing open on Stripe-hosted pages. Stripe may use cookies, storage and device information there for payment functionality, authentication and fraud prevention. See Stripe’s Privacy Policy. The public sign-up form does not collect card details or load Stripe’s payment form.
Your controls
Use Sign out when you finish on a shared device. You can remove Sea Provisions site data or revoke notification permission in browser/device settings. Clearing all site data signs you out and can discard unsynchronized edits, so synchronize any work you want to keep first. Disabling necessary storage may prevent sign-in, retailer connection or offline features from working.
We do not change advertising behavior in response to Do Not Track because no advertising tracking is enabled. A Global Privacy Control signal does not enable any additional use or sharing. If optional tracking is introduced later, the notice and controls must be updated before it is enabled.
Questions: asherduben@pantryprovision.com.