Strictly necessary cookies or local storage keep a cart, locale, consent choice, secure session and abuse controls. Disabling them can prevent checkout, tracking or passwordless access from working.
Analytics or marketing storage must remain off until selected by the visitor where consent is required. The final inventory must list each cookie, provider, purpose and duration after production tools are confirmed.
Strictly necessary storage supports language, cart continuity, session security, consent choices, checkout integrity and passwordless access. Optional analytics or preference technologies must remain disabled until the required consent is obtained in jurisdictions where consent applies. The final cookie register must state each name, provider, purpose, type and duration; unresolved entries remain [COOKIE_PROVIDER_AND_DURATION_TO_VERIFY] rather than being guessed.
The preference center must allow optional categories to be accepted, rejected or withdrawn without blocking core shopping. Browser controls can also remove stored data, though doing so may empty a cart, reset language or invalidate a secure session. Withdrawal affects future optional use, not processing already required for a completed order, fraud record or legal retention. Consent evidence is itself retained only as necessary.