Privacy
Cookie Policy
This policy explains how TBD Management Ltd, trading as Ethnic City, uses cookies and similar technologies on this website.
What are cookies?
Cookies are small text files stored on your device. They help a website remember information and work reliably between pages.
How we use them
Essential cookies support security, login sessions, the shopping cart, checkout and fraud prevention. We ask for your permission before using optional analytics or marketing cookies. Optional cookies are not currently active unless you enable them through Cookie preferences.
Manage your choices
You can change or withdraw your optional consent at any time using Cookie preferences in the footer. You can also delete cookies through your browser settings. Blocking essential cookies may prevent the cart or checkout from working correctly.
Contact
Questions about cookies or privacy can be sent to dpo@ethnic-city.com.
Storage and services used on this website
This inventory reflects the website application code. Cookie names and lifetimes can vary with hosting configuration and browser behavior; payment providers can also change their own storage. We do not currently use analytics or advertising tags.
| Name / technology | Provider and purpose | Category and duration |
|---|---|---|
| ethnic_city_session | Ethnic City (Hostinger-hosted Laravel app): maintains the session used for security, login, cart and checkout. | Strictly necessary; 120 minutes by default, configurable by the site. |
| XSRF-TOKEN | Ethnic City / Laravel: helps protect forms and requests against cross-site request forgery. | Strictly necessary; session lifetime (120 minutes by default). |
| remember_web_{hash} (when “Remember me” is selected) | Ethnic City / Laravel: keeps a signed-in customer session available between visits. | Strictly necessary for the requested persistent login; 400 days by default, removed/invalidated when the user logs out or the token changes. |
| ethnic_city_cookie_consent (first-party cookie and local storage) | Ethnic City: records essential/analytics/marketing choices, the choice type and the date/time saved on this device. The cookie provides a fallback if local storage is unavailable. | Strictly necessary for remembering privacy choices; 180 days. |
| promotion_modal_{id} (first-party local storage) | Ethnic City: stores the promotional modal's display count and timing so configured frequency limits can be applied. It is not sent to an advertising provider. | Marketing preference; written only after marketing consent, until browser storage is cleared. Removed when marketing consent is withdrawn where browser storage permits. |
Payment and external services
- Stripe.js (Stripe): requested only when the cart or checkout payment interface is initialized. It enables Stripe payment methods and fraud prevention. Stripe may use provider-controlled storage during payment; exact names and retention depend on Stripe and the browser and cannot be established from this application source. Check the live browser cookie store for the names and expiry actually used.
- PayPal through Stripe: available as a Stripe Express Checkout payment method when Stripe determines it is eligible. Stripe may redirect customers to PayPal to authorize payment; PayPal may set its own cookies on PayPal-hosted pages.
- Google Apps Script: the separate pre-order form sends submitted form details to a Google-hosted endpoint. The request occurs only when the visitor submits that form; it is not Google Analytics, Ads conversion tracking or a remarketing tag.
- Google Fonts, Tailwind CDN, Alpine.js (jsDelivr), Font Awesome (cdnjs), and CKEditor (ckeditor.com): external visual/interface resources referenced by the application (CKEditor is used in admin screens). These resources are requested independently of the optional consent categories and are not analytics or advertising tags in the application source; their requests can disclose basic network metadata to their providers. No cookies from these libraries were identifiable in the application code. Provider-side storage must be checked in a live browser and is not confirmed by this source inventory.
- Social network links are ordinary links and do not load a social tracking pixel on this website.
Analytics and advertising
No Google Analytics, Google Tag Manager, Google Ads conversion tag, remarketing tag, Meta Pixel, or other analytics/advertising tracker is currently installed in the application source. Google Ads has been described as a future plan, not an active integration. The analytics and marketing switches therefore do not enable an advertising or analytics service today. Future optional scripts must use the consent manager's category-gated script mechanism; ordinary script tags are not automatically blocked.
To review or change your choices, use . Read our Cookie Policy for this inventory.