STORAGE / YNL-POL-02

Effective:

Cookie and storage notice.

“Cookie” is shorthand here. YNL uses HTTP cookies, browser storage, in-memory state, and server-side records. This notice separates those mechanisms and names the modules that activate them.

No advertising cookie stack: the site does not install Meta Pixel or a third-party behavioral-advertising tag. Site analytics, masked experience diagnostics, and merchandising history are core storefront processing. The selector separately controls extended device compatibility details.

1. Storage definitions

HTTP cookie
A small name and value attached to requests for the YNL domain.
HTTP-only cookie
A signed cookie available to the server but not readable by site JavaScript.
Local storage
Browser key-value storage that normally persists after the browser closes.
Session storage
Browser key-value storage scoped to a browser tab or browsing session.
In-memory state
Temporary data held only while the page process is alive.
Server-side record
A record held in YNL’s Netlify Blobs stores or a named service provider.

Local storage and session storage are not technically cookies, but they can serve related state-management purposes. The privacy selector covers all of them.

2. First-visit state machine

  1. The browser generates an ephemeral UUID in memory and buffers a maximum of 100 registered interaction events with their original timestamps.
  2. Analytics, masked diagnostics, merchandising events, and device compatibility details are not transmitted while the first choice is unresolved.
  3. Either choice enables the core storefront modules. The server generates the anonymous UUID and issues signed consent and visitor cookies; buffered core events may then be sent with their recorded timestamps.
  4. Allow all also enables isolated device compatibility collection. Allow necessary keeps that collection off. Both choices are stored for up to 400 days and can be changed from Privacy choices.

3. Necessary storage and processing

Necessary mechanisms support the cart, checkout handoff, request security, privacy selection, accessibility, and basic session continuity. Blocking them may prevent the cart or preference controls from working.

Necessary mechanism classes
Technical classFunctionTypical boundary
shopifyCartId and Hydrogen cart stateFind the current Shopify cart and apply immediate local cart projections while a mutation completes.Browser storage and Shopify.
ynl_privacy_prompt_v3Hide the first-visit panel after the active choice has been handled.First-party UI cookie.
ynl_consent and ynl_vidCarry the signed purpose selection and server-generated anonymous visitor UUID.Signed, HTTP-only first-party cookies.
Security and rate-limit stateValidate same-origin requests, bound traffic, deduplicate provider callbacks, and reduce abuse.Server memory, request metadata, and server-side records.
Interface preferencesRemember dismissed promotions, popup suppression, and unlocked Vault display state.First-party browser storage.

Shopify, Netlify, or another infrastructure provider may set or read its own necessary security and commerce state while performing the requested service. Provider-controlled identifiers are governed by the provider’s notice as well.

4. Core processing and device details

posthog.capture(event, properties)

Loads the PostHog JavaScript library from the bundled application, enables registered product analytics and experiment exposure, and uses first-party PostHog cookie plus local-storage persistence. Broad autocapture, automatic pageviews, heatmaps, and full URL collection are disabled. The PostHog cookie copy is configured for 400 days. Its local-storage copy remains until consent reset, browser-data removal, or browser eviction. Registered analytics are a core storefront module under either chooser outcome.

ynl-behavior-v2

Stores permitted browsing and commerce interaction signals in YNL’s server-side Netlify Blobs store for product merchandising. This module reads the signed visitor identity from the request. It does not accept a profile identifier supplied by the browser. Merchandising remains on under either chooser outcome.

posthog.startSessionRecording()

Starts the masked experience-diagnostics replay module. All inputs, text, and attributes are masked; marked sensitive regions are blocked; and canvas, font, request-body, request-header, and cross-origin-frame capture are disabled. This masked diagnostic module remains on under either chooser outcome.

/api/privacy/telemetry → ynl-device-telemetry-v2

Stores normalized browser, capability, and network fields plus an encrypted isolated IP, font, and rendering payload described in the Privacy Policy. The versioned fingerprint HMAC is collection-only. Matching and personalization flags are disabled. This is the only module changed by Allow all versus Allow necessary.

5. Live technical inventory

This register is rendered from the same implementation-owned inventory used by the privacy selector. It lists actual identifiers and explicitly marks runtime patterns; it does not invent cookie names to inflate the count.

CURRENT IMPLEMENTATION

Technical inventory

281 entries

These are implemented identifiers, not invented cookie names. Runtime substitutions are explicitly marked as patterns.

Browser storage & pre-choice memory18

Exact first-party keys plus PostHog runtime patterns. Angle brackets and braces mark substitutions, not extra cookies.

  • ynl_consent

    HTTP-only cookie

    Signed purpose selection, including the device-compatibility choice; expires 400 days after the latest explicit choice.

  • ynl_vid

    HTTP-only cookie

    Signed random browser UUID; expires up to 400 days after the latest explicit choice or authorized identity rotation.

  • ynl_pid

    HTTP-only cookie

    Signed opaque profile ID after a permitted profile link; expires 400 days after that authorized link or reconnect.

  • ynl_privacy_prompt_v3

    Cookie

    Non-sensitive prompt-hidden hint; expires 400 days after the latest explicit chooser outcome.

  • shopifyCartId

    localStorage

    Shopify Hydrogen cart identifier; retained until the cart is cleared or browser storage is removed.

  • ynl-vault-unlocked

    localStorage

    Remembers that the free Vault form succeeded; no programmed expiry.

  • ynl-vault-drop

    localStorage

    Stores the current three-day Vault countdown target timestamp.

  • ynl-popup-suppress

    localStorage

    Popup suppression timestamp: 14 days after dismissal or 365 days after acceptance.

  • ynl-promo-dismissed

    localStorage

    Remembers a promotion-banner dismissal; no programmed expiry.

  • ynl_telemetry_sent_v1

    sessionStorage

    Prevents duplicate device snapshots in the same browser session.

  • ynl_pending_reconnect_v2

    sessionStorage

    Short-lived signed reconnect token removed after the reconnect request is processed.

  • ynl_rec_attribution_v1:{handle}Pattern

    sessionStorage pattern

    Per-product recommendation attribution created by the core analytics and merchandising modules; each record expires after 30 minutes.

  • ph_<project-token>_posthogPattern

    PostHog cookie/localStorage pattern

    PostHog identity, session, and feature-flag payload. The cookie copy expires after 400 days; localStorage is cleared on reset, withdrawal, or browser-data removal.

  • __ph_opt_in_out_<project-token>Pattern

    PostHog localStorage pattern

    PostHog SDK opt-in state, created only after an enabled PostHog category is applied.

  • ph_<project-token>_window_idPattern

    PostHog sessionStorage pattern

    PostHog SDK per-window identifier.

  • ph_<project-token>_primary_window_existsPattern

    PostHog sessionStorage pattern

    PostHog SDK tab/window coordination flag.

  • ephemeralId

    In-memory value

    Random UUID used only while the first choice is undecided; never persisted before permission.

  • bufferedEvents

    In-memory queue

    At most 100 pre-choice analytics events; flushed after analytics permission or destroyed otherwise.

posthog.capture event names39

The complete custom-event allow-list currently accepted by the analytics client and server.

  • session_started

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • page_viewed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • navigation_viewed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • acquisition_captured

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • scroll_depth_reached

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • section_dwell_recorded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • product_card_impression

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • product_card_clicked

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • product_viewed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • audio_preview_started

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • audio_preview_completed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • video_started

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • video_completed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • vault_downloaded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • email_link_clicked

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • email_link_opened

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • form_submitted

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • discount_delivered

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • cart_item_added

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • cart_item_removed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • cart_viewed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • upsell_clicked

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • checkout_started

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • purchase_completed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • payment_failed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • refund_recorded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • membership_status_changed

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • cart_recovery_opened

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • recommendation_requested

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • recommendation_impression

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • recommendation_clicked

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • recommendation_added

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • recommendation_purchased

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • web_vital_recorded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • client_error_recorded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • request_latency_recorded

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • broken_media_detected

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • experiment_exposure

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

  • device_telemetry_stored

    PostHog event

    Registered YNL event; sent only when analytics is enabled.

Registered custom analytics properties57

The complete custom-property allow-list. Raw email, IP, font arrays, and fingerprint material are rejected.

  • availability

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • browser

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • browser_version

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • campaign

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • cart_quantity

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • category

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • code_length

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • connection_type

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • country

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • cpu_bucket

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • currency

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • discount_threshold_cents

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • device_type

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • duration_ms

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • engine

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • error_code

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • event_timestamp

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • experiment_key

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • fingerprint_version

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • handle

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • item_count

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • latency_ms

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • medium

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • memory_bucket

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • media_type

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • metric

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • navigation_type

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • order_id

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • os

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • owned

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • path

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • personalization_active

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • position

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • price_cents

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • progress_percent

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • ranker_version

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • reason

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • recommendation_id

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • referrer_host

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • region

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • request_id

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • section

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • screen_bucket

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • snapshot_id

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • source

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • status

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • surface

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • title_length

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • timezone

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • utm_campaign

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • utm_content

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • utm_medium

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • utm_source

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • utm_term

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • value

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • variant

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

  • variant_id

    PostHog property

    Allow-listed custom property; rejected when its value contains PII or a secret.

Scheduled provider aggregate event names1

Server-only non-person reporting that is not accepted by the browser analytics client.

  • kit_email_stats_snapshot

    Scheduled aggregate PostHog event

    Daily non-person Kit account or broadcast snapshot; not accepted by browser analytics.

Scheduled provider aggregate properties22

Exact account and broadcast totals accepted by the isolated Kit-to-PostHog boundary.

  • source

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • scope

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • sync_date

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • stats_window

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • broadcast_id

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • messages_sent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • recipient_count

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • open_count

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • click_count

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • unsubscribe_count

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • open_rate_percent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • click_rate_percent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • unsubscribe_rate_percent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • bounce_rate_percent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • open_tracking_enabled

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • click_tracking_enabled

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • provider_status

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • progress_percent

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • shows_total_clicks

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • window_start

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • window_end

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

  • send_at

    Scheduled aggregate PostHog property

    Allow-listed Kit delivery or engagement aggregate; rejects message, subscriber, URL, and arbitrary fields.

Device snapshot fields & probes69

Collected only after the device-diagnostics selection; PostHog receives normalized fields rather than the isolated raw material.

  • snapshot.browser.name

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.version

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.engine

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.os

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.userAgent

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.platform

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.language

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.languages[]

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.browser.timezone

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.clientHints.brands[].brand

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.clientHints.brands[].version

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.clientHints.mobile

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.clientHints.platform

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.width

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.height

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.availableWidth

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.availableHeight

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.viewportWidth

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.viewportHeight

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.pixelRatio

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.screen.colorDepth

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.touchPoints

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.pointer

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.hardwareConcurrency

    Device snapshot field

    Collected once, converted to a coarse bucket before storage, and used only with device diagnostics enabled.

  • snapshot.capabilities.deviceMemory

    Device snapshot field

    Collected once, converted to a coarse bucket before storage, and used only with device diagnostics enabled.

  • snapshot.capabilities.connection.effectiveType

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.connection.downlink

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.connection.rtt

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.connection.saveData

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.cookies

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.doNotTrack

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.webAssembly

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.serviceWorker

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.webGL

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.capabilities.audioContext

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.fonts[]

    Device snapshot field

    Stored inside the encrypted isolated-device payload only when device diagnostics is enabled.

  • snapshot.fontMetrics

    Device snapshot field

    Stored inside the encrypted isolated-device payload only when device diagnostics is enabled.

  • snapshot.canvas

    Device snapshot field

    Stored inside the encrypted isolated-device payload only when device diagnostics is enabled.

  • snapshot.webgl

    Device snapshot field

    Stored inside the encrypted isolated-device payload only when device diagnostics is enabled.

  • snapshot.audio

    Device snapshot field

    Stored inside the encrypted isolated-device payload only when device diagnostics is enabled.

  • snapshot.codecs.mp3

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.codecs.aac

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.codecs.opus

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.codecs.h264

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.codecs.webm

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • snapshot.webApis[]

    Device snapshot field

    Collected and stored only when device diagnostics is enabled.

  • document.fonts.check("Arial")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Avenir Next")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Courier New")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Georgia")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Helvetica Neue")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Menlo")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Monaco")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Roboto")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("SF Pro Display")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Times New Roman")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • document.fonts.check("Verdana")

    Font availability probe

    Checks availability; the resulting font-name array is encrypted before storage.

  • WEBGL_debug_renderer_info.UNMASKED_VENDOR_WEBGL

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • WEBGL_debug_renderer_info.UNMASKED_RENDERER_WEBGL

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • WebGLRenderingContext.MAX_TEXTURE_SIZE

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • WebGLRenderingContext.MAX_RENDERBUFFER_SIZE

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • WebGLRenderingContext.MAX_VIEWPORT_DIMS

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.BroadcastChannel

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.FileSystemHandle

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.GPU

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.MediaCapabilities

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.PaymentRequest

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.SharedWorker

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

  • window.WebTransport

    Rendering/API probe

    Contributes a supported value or a SHA-256 signature to the isolated device snapshot.

IP, network, encryption & fingerprint fields43

Raw IP and detailed device material stay in isolated encrypted Netlify storage and never enter product ranking.

  • header.x-nf-client-connection-ip

    Request header

    Primary raw-IP source on Netlify.

  • header.x-forwarded-for

    Request header

    Fallback raw-IP source; only the first address is read.

  • header.x-country

    Request header

    Fallback coarse country source.

  • header.x-nf-country

    Request header

    Fallback coarse country source.

  • header.x-subdivision

    Request header

    Fallback coarse region source.

  • header.x-country-region

    Request header

    Fallback coarse region source.

  • header.x-city

    Request header

    Fallback coarse city source.

  • ipinfo.geo.country_code

    IPinfo response field

    Coarse country enrichment.

  • ipinfo.geo.region_code

    IPinfo response field

    Coarse region enrichment.

  • ipinfo.geo.region

    IPinfo response field

    Fallback coarse region enrichment.

  • ipinfo.geo.city

    IPinfo response field

    Coarse city enrichment.

  • ipinfo.geo.timezone

    IPinfo response field

    Timezone enrichment.

  • ipinfo.as.asn

    IPinfo response field

    Autonomous-system number enrichment.

  • ipinfo.as.domain

    IPinfo response field

    Network-domain enrichment.

  • ipinfo.as.name

    IPinfo response field

    Network-provider enrichment.

  • ipinfo.as.type

    IPinfo response field

    Network-type enrichment.

  • ipinfo.anonymous.is_vpn

    IPinfo response field

    Contributes the vpn proxy-classification label.

  • ipinfo.anonymous.is_proxy

    IPinfo response field

    Contributes the proxy classification label.

  • ipinfo.anonymous.is_res_proxy

    IPinfo response field

    Contributes the residential_proxy classification label.

  • ipinfo.anonymous.is_tor

    IPinfo response field

    Contributes the tor classification label.

  • ipinfo.anonymous.is_relay

    IPinfo response field

    Contributes the relay classification label.

  • ipinfo.is_hosting

    IPinfo response field

    Contributes the hosting classification label.

  • ipinfo.is_anonymous

    IPinfo response field

    Signals whether a no-proxy result can be recorded.

  • location.country

    Stored coarse-location field

    Stored in the device snapshot record.

  • location.region

    Stored coarse-location field

    Stored in the device snapshot record.

  • location.city

    Stored coarse-location field

    Stored in the device snapshot record.

  • location.timezone

    Stored coarse-location field

    Stored in the device snapshot record.

  • network.asn

    Stored network field

    Stored in the device snapshot record.

  • network.network

    Stored network field

    Stored in the device snapshot record.

  • network.provider

    Stored network field

    Stored in the device snapshot record.

  • network.networkType

    Stored network field

    Stored in the device snapshot record.

  • network.proxyClassification

    Stored network field

    Stored in the device snapshot record.

  • encryptedIp

    Encrypted raw-IP field

    AES-256-GCM encrypted and isolated from PostHog, Kit, Shopify, URLs, and logs.

  • encryptedIpPrefix

    Encrypted IP-prefix field

    AES-256-GCM encrypted /24 IPv4 or /48 IPv6 prefix.

  • isolatedRawDevice.fonts

    Encrypted isolated-device field

    Available font-name array.

  • isolatedRawDevice.fontMetrics

    Encrypted isolated-device field

    SHA-256 font-metric signature.

  • isolatedRawDevice.canvas

    Encrypted isolated-device field

    SHA-256 canvas signature.

  • isolatedRawDevice.webgl

    Encrypted isolated-device field

    WebGL signature plus vendor/renderer data.

  • isolatedRawDevice.audio

    Encrypted isolated-device field

    SHA-256 OfflineAudioContext signature.

  • fingerprint.version

    Stored fingerprint field

    Current value is ynl-fp-v1.

  • fingerprint.hmac

    Stored fingerprint field

    Versioned HMAC of the sanitized snapshot.

  • fingerprint.matchingEnabled

    Stored control field

    Hard-coded false in the current implementation.

  • fingerprint.personalizationEnabled

    Stored control field

    Hard-coded false in the current implementation.

Vendors, destinations, stores & retention32

Exact configured endpoints, server-store names, and retention controls used by the current implementation.

  • /api/privacy/telemetry

    YNL endpoint

    Same-origin device-snapshot endpoint; requires signed visitor and telemetry permission.

  • https://api.ipinfo.io/batch

    IPinfo destination

    Receives one raw IP in an HTTPS POST body for location/network enrichment when configured.

  • https://us.i.posthog.com

    PostHog US destination

    Visitor analytics, session replay, and fixed-ID aggregate Kit-stat ingestion host; receives ordinary HTTPS connection metadata while YNL event payloads set $ip to null.

  • https://us.posthog.com

    PostHog US destination

    PostHog project UI host configured by the client SDK.

  • @netlify/blobs

    Netlify destination

    Strong-consistency server storage used for YNL privacy, profile, behavior, and commerce records.

  • ynl-consent-state-v2

    Netlify Blobs store

    Authoritative purpose and device-compatibility selection; retained for 400 days from the latest explicit write.

  • ynl-behavior-v2

    Netlify Blobs store

    Permitted merchandising events; 365-day retention.

  • ynl-behavior-quota-v2

    Netlify Blobs store

    Short fixed-window rate-limit counters for browser-originated behavior events.

  • ynl-profiles-v2

    Netlify Blobs store

    Opaque profile IDs, email HMACs, and visitor links; no programmed expiry.

  • ynl-device-telemetry-v2

    Netlify Blobs store

    Normalized snapshot, encrypted isolated-device payload, and fingerprint HMAC; 365-day retention.

  • ynl-device-ip-v2

    Netlify Blobs store

    Encrypted raw IP and IP prefix; 90-day retention.

  • ynl-digital-ownership-v2

    Netlify Blobs store

    Permanent digital-product ownership record; no programmed expiry.

  • ynl-recommendation-shadow-v2

    Netlify Blobs store

    Shadow-ranking comparisons; 90-day retention.

  • ynl-shopify-webhooks-v2

    Netlify Blobs store

    Shopify webhook idempotency records.

  • ynl-shopify-orders-v2

    Netlify Blobs store

    Shopify order reconciliation records.

  • ynl-upsell-discount-v2

    Netlify Blobs store

    Signed cart-offer claims and rate-limit counters with explicit expiries.

  • ynl-funnel-v2

    Netlify Blobs store

    First-order discount and V2 journey state records; journey state has no programmed expiry.

  • https://api.kit.com/v4/subscribers

    Kit destination

    Receives submitted email/name data only after a form submission.

  • https://api.kit.com/v4/account/email_stats

    Read-only Kit destination

    Daily GET for last-90-day account delivery and aggregate engagement totals.

  • https://api.kit.com/v4/broadcasts/stats

    Read-only Kit destination

    Daily cursor-paginated GET for aggregate delivery and engagement by broadcast.

  • netlify/functions/kit-email-stats-sync.mts

    Netlify scheduled function

    Runs once daily in UTC; reads only Kit aggregate-stat endpoints and sends allow-listed non-person snapshots to PostHog US.

  • CONVERTKIT_API_KEY

    Server-only environment control

    Read at function runtime and sent only in the X-Kit-Api-Key header; its value is never logged or placed in analytics.

  • ynl-kit-email-aggregate-v1

    Fixed non-person PostHog distinct ID

    Shared by all daily Kit aggregate snapshots and never represents a subscriber, visitor, profile, or browser.

  • https://api.kit.com/v4/tags/{tag_id}/subscribersPattern

    Kit destination pattern

    Applies configured source/funnel tags after a form submission.

  • https://api.kit.com/v4/forms/{form_id}/subscribersPattern

    Kit destination pattern

    Adds a subscriber to the configured source form after submission.

  • https://<store>.myshopify.com/api/2026-04/graphql.jsonPattern

    Shopify Storefront destination pattern

    Catalog, cart, and checkout GraphQL endpoint.

  • https://<store>.myshopify.com/admin/api/2026-04/graphql.jsonPattern

    Shopify Admin destination pattern

    First-order eligibility and discount GraphQL endpoint.

  • https://<store>.myshopify.com/admin/api/2026-07/graphql.jsonPattern

    Shopify Admin destination pattern

    Cart-upsell discount GraphQL endpoint.

  • RAW_IP_RETENTION_DAYS = 90

    Retention control

    Encrypted raw IP and encrypted prefix rolling retention.

  • SNAPSHOT_RETENTION_DAYS = 365

    Retention control

    Device snapshot and composite fingerprint-HMAC rolling retention.

  • cookie_expiration = 400

    Retention control

    PostHog SDK cookie retention in days after a core storefront choice is applied.

  • ATTRIBUTION_TTL_MS = 1800000

    Retention control

    Per-product session recommendation-attribution lifetime.

6. Storage lifetimes

  • Signed purpose selection: up to 400 days from the latest explicit privacy choice; read-only return visits do not extend it.
  • PostHog cookie copy: configured for 400 days.
  • PostHog local-storage copy: until withdrawal, reset, browser-data removal, or eviction.
  • Encrypted raw IP and IP prefix: 90 rolling days.
  • Device snapshot and fingerprint HMAC: 12 rolling months.
  • Permitted behavior history: 12 rolling months.
  • Recommendation shadow comparisons: 90 rolling days.
  • Short-lived signed cart-offer token: approximately five minutes.
  • Temporary Shopify upsell discount records: through their short offer lifetime and cleanup window.

Browser privacy settings, private mode, storage eviction, manual deletion, and provider limits can shorten client-side storage. Server-side transaction, ownership, tax, security, and legal records may follow longer schedules.

7. How to control storage

Use Privacy choices on the site to change device compatibility collection. You can also delete YNL site data through your browser settings, block cookies, or use a private browsing window. Deleting the signed choice causes the panel to return. Blocking all browser storage may break the cart and preference state.

The browser’s Do Not Track signal may be present only in an enabled device compatibility snapshot; it is not a substitute for the explicit chooser selection. YNL does not use this site for sale or cross-context behavioral advertising.

Questions or deletion requests can be sent to youngernextlife@gmail.com.

Read the Privacy Policy and Terms and Conditions for the wider data and contract terms.