1.What cookies are
A cookie is a small file a website asks your browser to store and send back on later requests. Cookies let a site keep you signed in. They are not used here for advertising, and BuyLow does not run a cookie consent banner because nothing on this site is set for a purpose that would need one.
2.Cookies BuyLow sets
There are two, and both exist only to keep you signed in.
| Name | What it does | Lifetime | Type |
|---|---|---|---|
| buylow_session | Holds your sign-in so you stay logged in across pages. Cannot be read by scripts. | 30 days, or until you sign out | Strictly necessary |
| buylow_admin_session | The same, for BuyLow staff accounts. Scoped to /admin so it can never be used on the shopping site. | 30 days, or until you sign out | Strictly necessary |
Both are httpOnly, so JavaScript on the page cannot read them, and both are marked Secure in production so they are only sent over HTTPS. Both use the SameSite=Lax setting, which stops another site from sending them along with a request to BuyLow.
Signing out deletes the session cookie immediately. Changing your password deletes it on every device.
3.What BuyLow keeps in local storage
While you are signed out, the wishlist is stored in your browser. The key is buylow:wish: followed by the product id, and the value only records that the item is saved. Clearing your site data removes it.
The next time you sign in, those products are sent to BuyLow once, added to the wishlist on your account, and the keys are removed from your browser. From then on your wishlist is stored with your account, not in local storage, so it follows you to other devices.
4.Cookies set by other companies
BuyLow embeds nothing that tracks you. It loads web fonts from Google Fonts and runs privacy-friendly analytics through Cloudflare, and it can use either of those to set its own cookies — for example for security checks. Those cookies are set by Google and Cloudflare, not by us, and we do not control them or have access to what they collect.
No advertising network, social widget, analytics tag, pixel or retargeting script runs on this site, and no third-party cookie is set for measurement. Payment pages are hosted by Stripe or PayPal and are subject to those providers' own cookie policies.
5.Managing cookies
You can clear or block cookies in your browser settings, and most browsers can refuse cookies for a single site. Nothing on BuyLow needs a cookie for you to browse the catalog, join a store page or read a product.
Two consequences worth knowing: blocking buylow_session means you have to sign in again on every visit, and clearing site data removes a wishlist you saved while signed out. Neither affects orders or the wishlist on your account, which are stored on our side.
6.Changes
If BuyLow ever sets a cookie that is not strictly necessary, or adds a third-party script that can set one, this page is updated first, with a new date at the top.