Baker's Kettle Corn & Lemon Shakers cookie policy

Your choices

Optional services stay off until you explicitly allow them. Accept all enables eligible services, Reject all keeps them off, and Customize lets you choose individual services. Closing the controls or continuing to browse does not give consent.

You can reopen Cookie settings at any time and reject previously allowed services. Withdrawal stops future use through these controls and removes accessible storage listed for removal below. It cannot retract information already transmitted or erase records held by a provider.

Global Privacy Control keeps services classified here as sale/sharing, and their dependent services, off. Accept all cannot override an active signal. Removing the signal does not restore revoked choices.

Necessary storage and requests

The first-party rl_consent cookie stores a random consent ID, service choices, scopes and timestamps on this host at /. It is available to the consent code, uses SameSite=Lax and uses Secure over HTTPS. Grants expire after 180 days; saved choices are retained for up to 180 days from your last choice. A changed processing scope can require another choice.

If your browser prevents storage, choices apply in the current page but may not be remembered on another page or visit. The controls display a warning when saving fails.

/: Deliver requested pages and first-party images, fonts, scripts and styles.

/consent-log: Record cookie choices independently of optional services.

/booth.json: Check whether the booth is open at an event, to show the booth map; nothing about you is stored.

The booth map

When the booth is open at an event, the Find Us and Where Is the Booth pages show a map. The map code is served from this site, but the map pictures come from OpenStreetMap (tile.openstreetmap.org, run by the OpenStreetMap Foundation), so your browser requests them directly and OpenStreetMap receives your IP address and browser details, as any website does. OpenStreetMap sets no cookies through the map. When the booth is not open, no map is loaded.

Before these controls

Until these controls were added, Google Analytics loaded on every page without asking. If it left Google cookies in this browser, these controls remove them until you allow Google Analytics.

Google Analytics 4

Category: analytics. Purpose: Measure visits to bakerskettlecorn.com pages after explicit permission. Page addresses keep campaign tags (utm_*) and drop every other query parameter.

Provider integration: Google Analytics 4. Classified as sale/sharing for these controls; restricted by Global Privacy Control.

Required services: none. All required services must also be allowed.

Declared request destinations: https://www.googletagmanager.com, https://www.google-analytics.com, https://region1.google-analytics.com, https://analytics.google.com.

_ga (cookie): Google browser and session identifiers. Scope: this host/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga (cookie): Google browser and session identifiers. Scope: bakerskettlecorn.com/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_Q4EQWC3BJL (cookie): Google browser and session identifiers. Scope: this host/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_Q4EQWC3BJL (cookie): Google browser and session identifiers. Scope: bakerskettlecorn.com/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_5NZSM2H51D (cookie): Session identifier from the earlier Google Analytics property, no longer used. Scope: this host/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

_ga_5NZSM2H51D (cookie): Session identifier from the earlier Google Analytics property, no longer used. Scope: bakerskettlecorn.com/. Duration: Up to 400 days (about 13 months). Accessible storage is removed on withdrawal.

Microsoft Clarity

Category: analytics. Purpose: Record how pages are used (clicks, scrolling and layout) as session replays and heatmaps, to find what confuses visitors. Clarity masks text typed into forms.

Provider integration: Microsoft Clarity. Classified as sale/sharing for these controls; restricted by Global Privacy Control.

Required services: none. All required services must also be allowed.

Declared request destinations: https://www.clarity.ms, https://scripts.clarity.ms, https://*.clarity.ms, https://c.bing.com.

_clck (cookie): Clarity visitor identifier. Scope: this host/. Duration: Up to 1 year. Accessible storage is removed on withdrawal.

_clck (cookie): Clarity visitor identifier. Scope: bakerskettlecorn.com/. Duration: Up to 1 year. Accessible storage is removed on withdrawal.

_clsk (cookie): Clarity session identifier. Scope: this host/. Duration: Up to 1 day. Accessible storage is removed on withdrawal.

_clsk (cookie): Clarity session identifier. Scope: bakerskettlecorn.com/. Duration: Up to 1 day. Accessible storage is removed on withdrawal.

_cltk (sessionStorage): Clarity session tracking. Scope: this host/. Duration: Until the tab closes. Accessible storage is removed on withdrawal.

CLID (cookie): Clarity visitor identifier (third-party, set by Microsoft). Scope: www.clarity.ms/. Duration: Up to 1 year. This site's JavaScript cannot remove this storage.

MUID (cookie): Microsoft visitor identifier (third-party, set by Microsoft). Scope: clarity.ms/. Duration: Up to 13 months. This site's JavaScript cannot remove this storage.

MUID (cookie): Microsoft visitor identifier (third-party, set by Microsoft). Scope: bing.com/. Duration: Up to 13 months. This site's JavaScript cannot remove this storage.

SRM_B (cookie): Microsoft identifier synchronisation (third-party, set by Microsoft). Scope: c.bing.com/. Duration: Up to 13 months. This site's JavaScript cannot remove this storage.

MR (cookie): Microsoft identifier refresh (third-party, set by Microsoft). Scope: c.bing.com/. Duration: Up to 7 days. This site's JavaScript cannot remove this storage.

MR (cookie): Microsoft identifier refresh (third-party, set by Microsoft). Scope: c.clarity.ms/. Duration: Up to 7 days. This site's JavaScript cannot remove this storage.

SM (cookie): Microsoft session marker (third-party, set by Microsoft). Scope: c.clarity.ms/. Duration: Until the browser closes. This site's JavaScript cannot remove this storage.

ANONCHK (cookie): Microsoft identifier check (third-party, set by Microsoft). Scope: c.clarity.ms/. Duration: A few minutes. This site's JavaScript cannot remove this storage.

Consent records

Choices are sent to the same-origin /consent-log endpoint. Records contain site and random consent IDs, an event ID, submitted and effective choices, Global Privacy Control state, client/server timestamps and the policy/configuration/package versions. Cookie-choice records do not include a visitor name, email, full page URL, query string, raw IP address or browser fingerprint.

Configured record-processing providers: Railway, Cloudflare, Supabase. Hosting and network providers may process connection metadata; their logs and retention require separate review.

Consent events are retained for 730 days according to the configured deletion schedule. Referenced policy snapshots remain available for retained records. Database backups are kept for 7 days, so a deleted record can remain in a backup for up to 7 more days.

Your choices take effect even if record delivery fails. A bounded in-memory queue retries delivery; pending events can be lost when a page closes or the browser stops. Local choices are not proof that an audit record was delivered.

Contact and changes

Contact Baker's Kettle Corn & Lemon Shakers at bakerskettlecorn@gmail.com about cookie choices or retained consent records. A consent ID alone is not authorization to obtain records; requests require a separate identity/access review.

This policy and service inventory are versioned. Processing changes are reviewed before deployment; the banner may ask again when an existing grant no longer matches a service's scope.