Cookie Policy
This page explains how Abu Bakr Superstore uses cookies and similar technologies on our website. It is written for visitors in the United Kingdom and Europe. A cookie banner alone does not guarantee legal compliance; this site aims to give you genuine choices for optional technologies where consent is required.
How to manage your choices
You can open Cookie Settings at any time from the website footer (or the button below) to change or withdraw optional consent. Closing the banner or continuing to browse is not treated as consent.
Related pages: Privacy Policy · Affiliate Disclosure · Terms.
Current consent policy version: 2026-10-18
Cookie categories
- Strictly Necessary (always on where genuinely necessary) — Required for security, admin sign-in sessions, CSRF protection on forms, and core site features. These cannot be turned off while you use the site.
- Analytics (optional) — Helps us understand how the site is used (for example first-party performance metrics). We do not currently load Google Analytics or similar third-party analytics scripts.
- Marketing and Advertising (optional) — Optional advertising or retargeting technologies. None are installed on this site today; this category stays ready if they are added later.
- Affiliate / enhanced attribution (optional) — Reserved for optional enhanced attribution if added later. Basic first-party click counts on retailer buttons (for our admin dashboard) are always recorded as a necessary storefront metric — see Strictly Necessary.
Technologies used on this website
The list below reflects integrations found in this codebase. We do not invent providers. If a technology is not listed, it is not currently installed on the public storefront.
| Name | Category | Notes |
|---|---|---|
| Auth.js session cookies | necessary | HttpOnly session cookies for admin/staff login only. |
| CSRF cookie (ab_csrf) | necessary | Protects public contact/newsletter form posts. |
| Consent preference cookie (ab_consent) | necessary | Stores your cookie choices (not authentication secrets). |
| Affiliate click logging (/go/[offerId]) | necessary | First-party server log of retailer-button clicks (hashed IP). Powers admin dashboard click counts; redirect always works. |
| Google Search Console (admin) | necessary | Admin-only OAuth; not used on the public storefront. |
First-party cookies we set
- ab_consent — stores your consent choices (categories, timestamp, policy version). First-party,
SameSite=Lax, up to about 365 days. Readable by our consent manager in the browser (not an authentication secret). - ab_csrf — CSRF protection for public forms (for example contact and newsletter). Essential security cookie.
- Auth.js session cookies — used only for admin/staff sign-in. HttpOnly, Secure where appropriate, separate from optional preference cookies. Session identifiers are not exposed to client-side marketing scripts.
Analytics and advertising
This website does not currently load Google Analytics, Google Tag Manager, Google Ads, Meta Pixel, or similar third-party advertising scripts on the public pages. Optional Analytics and Marketing categories exist so that if those tools are added later, they can be gated by your consent. Google Consent Mode is only relevant if Google tags are installed; none are present today.
Affiliate links and merchant cookies
When you click a retailer button (for example Amazon), you leave our site and the retailer may set its own cookies under its domain and policies. Those merchant cookies are controlled by the retailer, not by Abu Bakr Superstore.
On our side, the path /go/[offerId] redirects you to the retailer and records a first-party click on our servers (including a hashed IP) so the admin dashboard can measure which offers are used. That count is a necessary storefront metric; it does not set a third-party advertising cookie on our domain. The retailer may still set its own cookies after you leave our site.
Admin-only tools
Google Search Console OAuth is available only inside the admin dashboard for authorised staff. It is not a public visitor tracking tool.
Information for the site owner to complete
- Confirm the privacy contact email and any Data Protection Officer details in the Privacy Policy.
- If third-party analytics, ads, tag managers, or chat widgets are added later, register them in the consent script registry and update this policy with accurate names and retention periods.
- Confirm Amazon Associates and other affiliate programme cookie disclosures with each merchant's current terms.
- Obtain legal review for UK GDPR / EU GDPR / ePrivacy positioning before treating this page as final legal advice.
Last updated for consent policy version 2026-10-18. Questions: see our Privacy Policy or contact page.