Cookies

Cookies and Local Storage

La Paz Supermercado does not use tracking cookies for core marketplace use. Browser storage may be used for lightweight preferences such as favorite shops. API keys should be entered only into secure forms and are not persisted in browser storage.

Required Seller Session Cookie

A successful seller sync sets an HttpOnly cookie containing a one-way hash of the API key. This lets the sell page reload the last verified tienda and lets My Tienda and My Pricelist changes work without asking for the key on every page. The raw key is not exposed to client-side scripts, and the server stores encrypted key material only for hourly seller-data refreshes. Clearing cookies removes browser convenience; Revoke API Data removes the server-side connection.

This cookie is required for seller tools. Players who do not want this functional cookie can still browse public marketplace pages, but should not use My Tienda or My Pricelist.

Players can remove this seller session from Revoke API Data. That action also removes the saved key hash, encrypted key material, and public tienda activity connected to that API authorization.

Server Logs

Standard server logs may include request paths, timestamps, IP metadata, and browser user-agent data for operations and abuse prevention. API keys should not be placed in marketplace URLs. Server-side Cartel Empire API calls include only the required authentication and `desc` value for the requested endpoint.