DRIFT CURIOCOOKIE POLICY
COOKIE POLICY

Cookies

This policy explains the browser storage and security technologies used by the current DRIFT CURIO storefront, including the cookies needed for inquiry sign-in and temporary Exact Piece reservations.

Effective September 10, 2026Website driftcurio.com
01

What this policy covers

Cookies are small pieces of data that a website can ask a browser to store and send back with later requests. Websites can also use related browser or device technologies for security, authentication, preferences, analytics or advertising.

The current DRIFT CURIO storefront uses first-party cookies for functions a customer requests: keeping an authenticated inquiry session and identifying the browser that owns a server-confirmed temporary Exact Piece reservation. These cookies are not used to build advertising profiles or follow customers across unrelated websites.

This policy describes the application behavior currently implemented on driftcurio.com. Security infrastructure can also process limited browser or device signals when necessary to protect forms, accounts and transactions from automated abuse.

02

First-party cookies currently set by DRIFT CURIO

The application currently defines the following cookies. Their purpose and lifetime are tied to the customer function that creates them.

dc_inquiry_sessionInquiry authentication
Keeps a customer signed in to the Exact Piece inquiry area after successful passwordless verification. Maximum lifetime: 30 days. Logging out clears the cookie. It is set as HttpOnly, SameSite=Lax and Path=/; production environments also use Secure.
dw_reservation_ownerTemporary Exact Piece reservation
Identifies the browser that owns a server-confirmed temporary reservation so the service can distinguish that customer's hold from another visitor's hold. Maximum lifetime: 30 minutes. It is set as HttpOnly, SameSite=Lax and Path=/api/reservations; HTTPS use also adds Secure.

These cookies contain opaque credentials rather than the customer's email address, product description or payment information. Server-side records determine whether a session or reservation is still valid.

03

Security and anti-bot services

DRIFT CURIO uses Cloudflare Turnstile on protected inquiry-authentication actions to help distinguish legitimate visitors from automated abuse. Turnstile performs a browser-side security challenge and produces a token that the DRIFT CURIO service validates with Cloudflare before the protected action can continue.

Cloudflare can process browser, device and network signals needed for that security function. DRIFT CURIO's application code does not define an advertising or customer analytics cookie for Turnstile. Cloudflare may use strictly necessary security technologies according to its own Turnstile privacy documentation and the security configuration applied to the site.

Security technologies are used to protect requested site functions, not to sell customer data or create cross-site advertising profiles.

04

Advertising and analytics cookies

DRIFT CURIO does not currently use advertising cookies, cross-site marketing trackers or customer-behavior analytics cookies in the current storefront implementation. We therefore do not present an advertising or analytics cookie preference banner at this stage.

This describes the current implementation; it is not a promise that the site's technology stack will never change. If we add non-essential analytics, advertising or similar tracking technologies, we will update this policy and implement the notice, choice or consent controls required for that use before enabling them where applicable.

Product and operational requirements may describe future measurement capabilities. A planned capability is not treated as an active cookie or tracker until it is actually enabled in the customer-facing service.

05

Browser controls and what happens if cookies are blocked

Most browsers allow you to view, delete or block cookies through browser settings. You can use those controls at any time.

Blocking or deleting the necessary cookies described above can interrupt the function they support. For example, deleting the inquiry-session cookie can require a new sign-in, and blocking the reservation-owner cookie can prevent the service from recognizing that your browser owns a temporary reservation.

Because the current storefront does not enable non-essential advertising or analytics cookies, there is no separate DRIFT CURIO advertising/analytics cookie preference to save at this stage.

06

Changes and related policies

We may update this Cookie Policy when site functionality, security services, measurement tools or legal requirements change. The effective date at the top of this page identifies the current version.

For broader information about how DRIFT CURIO handles personal information, see our Privacy Policy. Site and transaction rules are in our Terms of Use. Questions about an order, inquiry or site function can be routed through our Contact page.