COOKIES & STORAGE · UPDATED 27 OCTOBER 2026
Small files.
Clear choices.
Essential storage supports checkout, live demos and staff sign-in. Optional first-party visitor measurement starts only after you accept. We do not use advertising pixels, social trackers or third-party video embeds.
The checkout cookie
| Name / provider | Purpose | Lifetime and scope |
|---|---|---|
pg_checkout
OrderWorth, first party |
Associate your browser with an order, return from Stripe and recover a receipt. Contains a random token; the server stores its hash. It is not used for analytics. | Up to 24 hours from issue or refresh; server recovery is limited to 24 hours from order creation. Host-only, /api path; Secure, HttpOnly and SameSite=Lax. |
orderworth_currency
OrderWorth local storage, first party |
Earlier optional display preference. Current pricing ignores this saved value and does not create a new currency preference. It contains no identity or purchase key. | Until you clear this preference or your browser’s site data. |
Created only when an available checkout is opened and refreshed when a purchase starts. General browsing, Free downloads, help pages and the sample demo do not create this application cookie. A disabled checkout does not create it.
This cookie supports the checkout service you request. EU guidance distinguishes strictly necessary cookies from optional tracking that requires prior consent. Blocking all cookies may prevent checkout; Free and the guides remain available.
Live demo storage
Requesting a live demo sets the essential __Host-orderworth_demo cookie. It is secure and HTTP-only, lasts up to 24 hours and lets the service associate your browser with your temporary demo. Each demo also uses its own scoped WordPress authentication and settings cookies; WooCommerce may set a functional session cookie while you use store features. These cookies support the demo you request and do not subscribe you to marketing.
The demo store lasts 30 minutes, independently of the browser cookie. End or reset it from the demo toolbar; expiry cleanup also removes the temporary store. Deleting the cookie in your browser can remove your ability to reopen or end an existing session, but its expiry still applies. Read about demo data and server retention.
Hosting, sign-in and Stripe
Hosting access controls and owner sign-in can use additional security or authentication storage managed by the platform. Stripe uses its own cookies after you navigate to Stripe to pay; we do not embed its checkout SDK or contact Stripe from your browser before that navigation.
Platform cookies and storage: The purchase service uses a browser-recovery cookie for up to 24 hours. Staff sign-in uses essential cookies for requested access to the private workspace. Cloudflare may set necessary security cookies, including __cf_bm and cf_clearance; their lifetime depends on the active challenge and provider settings. Stripe uses its own payment and security storage on hosted checkout. Optional first-party measurement requires consent and can be rejected or withdrawn through Privacy choices. A newsletter invitation preference remembers an explicit dismissal or accepted confirmation request in this browser for up to 365 days. This does not subscribe you or enable analytics. No advertising trackers are used by the application.
See Stripe’s privacy information. If optional tools are introduced, they must be blocked until the required consent is given, offer a clear rejection option and provide an equally easy withdrawal control. The optional measurement feature below follows these controls and does not load third-party analytics scripts.
Optional first-party analytics and your choice
Choose whether OrderWorth may count your public page views, visits and approximate country. Rejecting does not restrict use of the site. The Accept and Reject choices are equally available. Change your choice here at any time; withdrawal stops this first-party collection. Global Privacy Control and Do Not Track disable our first-party analytics. These choices do not control the separate Cloudflare performance measurement described below. First-party analytics is unavailable until the operator has configured and reviewed the privacy disclosures.
First-party analytics starts only after acceptance when the feature is enabled.
| Name and provider | Purpose | Duration |
|---|---|---|
orderworth_analytics_choice · OrderWorth localStorage |
Remember acceptance or rejection and notice version. This preference record does not identify a visit. | 180 days from your choice. Expired choices are ignored. |
orderworth_analytics_visit · OrderWorth sessionStorage |
A random identifier to count a 30-minute visit in one tab. Created only after acceptance; cleared on withdrawal. | 30 minutes from creation or until the tab closes, whichever comes first. |
Only public page names are measured. Checkout, purchase accounts and staff pages are excluded. No advertising identifier, full URL, query string or precise location is collected by this feature. See measurement purposes, limits and server retention.
Cloudflare performance measurement
Cloudflare also measures website loading and responsiveness through a separate browser beacon. It uses no cookies or browser storage. Our first-party analytics choice and GPC/DNT handling do not control this performance service. It can run without an analytics choice; availability varies by location and browser. Read what it collects and who receives it.
Staff sign-in storage
Staff-only first-party cookies support requested sign-in, account security and navigation preferences. They are separate from customer browsing and analytics. Sign-in lasts for the browser session, with server access expiring after eight hours; pending security checks last up to 10 minutes, and navigation preferences up to seven days. Signing out or revoking access ends active access sooner.
Other browser storage
The purchase key, email access-link token, sample calculator and website tutorial use page memory. We do not store them in localStorage, sessionStorage or IndexedDB, or register a service worker. The purchase page removes the access-link token from its address before other page scripts run, and uses it only when you choose to continue. Downloaded receipts and JSON exports are files you choose to save; they remain on your device until you delete them. A copied key may remain in your clipboard.
The plugin uses WordPress settings, metadata and temporary records on your server, not this website’s cookie. Its optional scheduled email uses your own mail provider. Read the plugin data explanation.
Close this browser’s checkout recovery
This action clears the checkout cookie and invalidates its existing server associations. It does not cancel or refund a payment, delete purchase records, sign you out of Stripe, or clear platform sign-in cookies or your display-currency preference. To remove that preference, use the button below or clear this website’s data in your browser. Your saved key still opens My purchase; you can also request a new email access link after payment is verified.
You can also manage cookies in your browser settings. To remove personal records, use a privacy request.
Storage inside the WordPress plugin
Free uses session storage in your WordPress administration to avoid repeating contextual suggestions during a browser-tab session. It is scoped to your WordPress site and account. “Hide this suggestion” also saves a persistent preference in WordPress. This storage belongs to your store’s administration and is not website tracking.