Cookies and browser storage

Optional analytics and advertising are denied by default for every visitor before Google tags run. Accept all enables all four Google consent signals. Analytics only enables analytics storage and leaves advertising storage, advertising data use and personalisation denied. Reject all denies all four. Manage preferences allows separate choices. Ad clicks and impressions can still be counted by the ad platform without website consent; this site does not load its Google container before an optional category is accepted.

Cookie settings in the footer lets you change or withdraw consent at any time. Opening settings does not change your choice. Withdrawal stops further consent-gated shop analytics and updates Google's consent signals, including in other open tabs. Previously blocked events are not replayed. Deleting browser storage removes the saved choice.

Airbag X stores airbagx.cookie-consent.v2 in local storage: a random consent visitor reference, the choices, date/time, notice and policy version, and previous decisions including acceptance followed by withdrawal. A choice expires after 180 days or when the notice version changes. The saved record remains until replaced or browser storage is removed; its expiry does not automatically delete historical evidence. Legacy analytics-only choices are not treated as advertising permission.

srs.basket.v1 and srs.recent.v1 (local storage) hold basket contents and recently viewed products until cleared or replaced; they have no automatic expiry. Account session browser storage maintains sign-in until sign-out, session expiry or browser removal. Session and checkout-continuation storage normally lasts for the browser session. Essential storage is not used as permission for advertising.

sidebar_state, where the account sidebar is used, is an Airbag X preference cookie with a 7-day maximum age. abx-install-dismissed (local storage) suppresses the installation prompt for 14 days; the record may remain until cleared. The service worker stores hashed static assets and the offline page, not live prices, stock, basket, account or payment responses.

airbagx.analytics.visitor and airbagx.analytics.seen are random first-party visit markers in local storage with no automatic expiry; withdrawal clears them. airbagx.analytics.session, .landing, .source and .once.* are session-storage entries for session/source attribution and event deduplication and clear on analytics withdrawal or session end. airbagx.ga4.purchase.* records previously reported paid-order references in local storage to avoid duplicate purchases; no automatic expiry is configured.

Google Tag Manager container GTM-WHWX585V manages Google tags; the website does not also install a standalone Google Analytics script. Google Analytics may receive consented page paths, searches, product interactions, enquiry/contact events and paid-order totals, plus browser/network information. Airbag X does not send form names, emails, phone numbers or messages to Google as event parameters.

In the unpublished-site browser check on 28 October 2026, the container loaded GA4 G-QB49TZHY4C and set _ga and _ga_QB49TZHY4C for Google visit/session measurement, both with a browser-reported 400-day remaining lifetime after acceptance. Cookie expiry may renew on activity and can vary by browser or Google settings. This observation is not a production-site audit. Google Analytics property-level data retention is separate and has not been verified.

Advertising storage permits Google Ads cookies for ad measurement; advertising data use and personalised advertising have separate switches. Measurement and ad optimisation are the enabled purposes when those tags and corresponding choices are configured. No customer email/phone matching uploads are implemented by Airbag X. Hashing would not remove the need for explicit permission.

Google Ads Conversion Linker, if configured, may use _gcl_aw and _gcl_dc first-party click-attribution cookies with a default 90-day lifetime. Google tags can use additional cookies depending on their configuration. These are conditional provider defaults, not a verified list of cookies currently set by this container. Google Ads conversion IDs, triggers, additional cookies and configured retention remain to be checked in Tag Assistant and Google before publication. Rejecting advertising does not grant permission for cookieless advertising events.

PayPal, and Worldpay only when enabled, may use essential security, fraud-prevention and payment-session cookies when you choose that payment service. Their actual names and lifetimes depend on the payment flow and provider configuration; they have not been established by a completed payment cookie audit. Essential payment processing is separate from optional marketing consent. Google-hosted fonts can receive network information without creating an analytics permission. No storefront Meta pixel was identified in website code.

This inventory distinguishes storage found in Airbag X code from conditional Google/provider cookies. It is not a claim that unverified third-party cookies are installed or that a complete provider audit has passed. See Privacy policy for other processing and contact info@airbagservice.uk for privacy requests.