Effective Date: October 12, 2026 • Strict Necessity Only
Cookies are small text files stored on your computer or mobile device when you access websites. Similar technologies include HTML5 local storage and session storage, which hold data locally within your browser.
At Go Karrot, we use these technologies strictly where required to keep your account authenticated, remember your shopping cart items, detect spam bots, and securely process payments.
The table below provides a full itemized breakdown of cookies and browser storage used across our website:
| Cookie / Storage Key | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| sb-*-auth-token | Supabase (First-Party) | Strictly Necessary | Maintains your authenticated customer session and secures access to client orders, contracts, and support tickets. | Session / Persistent until sign-out |
| go-karrot-cart | Local Storage (First-Party) | Strictly Necessary / Functional | Stores services added to your shopping cart and applied coupon codes so your selections are preserved as you browse. | Persistent in browser storage |
| gokarrot_cookie_consent | Local Storage (First-Party) | Strictly Necessary | Records your cookie preferences and acknowledgment of our privacy practices so we do not repeatedly prompt you. | 12 months |
| cf_clearance / Turnstile Token | Cloudflare | Strictly Necessary / Security | Protects public quote and order forms against automated bots, credential stuffing, and malicious scraping. | Up to 30 minutes |
| __stripe_mid / __stripe_sid | Stripe, Inc. | Strictly Necessary / Fraud Prevention | Used exclusively during checkout on Stripe-hosted endpoints to detect fraudulent payments and satisfy PCI-DSS anti-fraud mandates. | 1 year / Session |
Go Karrot has intentionally disabled and excluded all invasive tracking pixels and third-party advertising cookies:
Because all cookies and storage currently employed by Go Karrot are Strictly Necessary for the delivery, security, and operation of the services you request, separate opt-in consent is not legally mandated under US state privacy laws (such as the Virginia VCDPA or California CCPA) or ePrivacy guidelines.
Global Privacy Control (GPC): We recognize and respect browser-based GPC privacy signals. Because our website never engages in the sale of personal information or targeted behavioral advertising, sending a GPC signal requires no opt-out adjustment on our site.
You have full control over cookies through your web browser settings. Most modern browsers allow you to:
If you have any questions regarding our use of cookies or tracking technologies, please contact our privacy compliance team at privacy@gokarrot.com or write to Go Karrot, 8401 Mayland Dr #6575, Richmond, VA 23294, United States.
