Cookies Table
Last updated: October 1, 2026
This page lists every cookie core.shop sets, by category. Our Cookie Policy explains how we use them and how to change your choices.
Necessary cookies
The Service cannot work without these. They are always on, because turning them off would break sign-in, navigation or a choice you made on the page, and the law does not require consent for them.
| Name | What it does | Domain | Set by | Lasts |
|---|---|---|---|---|
| sb-<project-ref>-auth-token | Your sign-in session with Supabase. Keeps you signed in. | core.shop | Core | 1 hour, and the refresh token behind it rotates every 7 days |
| sb-<project-ref>-auth-token-code-verifier | Protects the sign-in handshake from being intercepted while it completes. | core.shop | Core | Until the sign-in completes |
| coreshop_cookie_consent | An entry in your browser's local storage that remembers your cookie choices by category, so the banner does not come back on every visit. | core.shop | Core | Until you clear it |
| coreshop_analytics_consent | Carries your analytics choice to our servers, so they follow the same decision when they record an analytics event. | core.shop | Core | 1 year |
| coreshop_landing_gender | Remembers which side of the landing page, women or men, you last chose, so the page opens that way instead of switching after it loads. Holds that one word, and only once you have used the switch. | core.shop | Core | 1 year |
| coreshop_under_18 | Set when a member under 18 creates an account, so our analytics never record their screen session. Holds the digit 1 and nothing else. | core.shop | Core | Until the member's 18th birthday |
<project-ref> stands for the identifier of our Supabase project.
Analytics cookies
These are not needed to run the Service. They help us understand how it is used and improve it, and they are set only after you agree in the cookie banner. Our only analytics provider is PostHog, on its servers in the European Union. The Cookie Policy says what it records.
| Name | What it does | Domain | Set by | Lasts |
|---|---|---|---|---|
| ph_<project-key>_posthog | A cookie, mirrored in local storage, that holds a random identifier for your device, a session identifier, the first page you landed on and where you came from, and, once you sign in, your Core account identifier. It lets us count visitors, group page views into sessions and link activity to your account. | core.shop | Core | 365 days for the cookie, and the local storage copy until you clear it |
| ph_<project-key>_window_id, ph_<project-key>_primary_window_exists, ph_<project-key>_posthog | Session storage that tells browser tabs and windows apart within one session. | core.shop | Core | Until the tab closes |
<project-key> stands for our PostHog project identifier. The exact name is visible in your browser's developer tools while you are signed in.
Marketing cookies
Marketing cookies would help us reach people who might like the Service, and partners could use them to show ads elsewhere. Core sets none. If that ever changes, the cookies will be listed here before they go live and the cookie banner will show the change.
Contact
Questions about cookies go to contact@core.shop.