Kidrobot
Statutory Schedule // Storage & Attribution

First-Party Session Tokens and Advertising Click Identifiers Operate Under Explicit Storage Consent

Kidrobot maintains an inquiry-only acquisition desk for limited-edition designer vinyl figures, sealed blind box cases, and archival pop-culture collectibles from our physical premises at 74 Leonard St, New York, New York 10013. We do not operate customer accounts, stored profiles, or payment checkout carts. This schedule details every client-side storage token, advertising click parameter, and consent signal gating mechanism running across this domain.

Clause 1. Effective Schedule Date. This Cookie Specification and Storage Schedule took effect on October 13, 2026. All parameters, browser storage keys, and marketing tag configurations documented herein reflect active production deployment across kidrobotstoys.com. Any future modifications to telemetry keys or attribution parameters will be recorded with revised version timestamps directly in this register.
Clause 2. Storage Classification Framework. Browser storage is segregated into three functional categories. Strictly Necessary Storage: Local tokens essential for basic site security, CSRF protection on specification inquiry forms, live chat connection tokens, and the persistence of the visitor's consent decision. These tokens do not carry marketing telemetry and cannot be deactivated without disrupting site utility. Measurement and Analytics Storage: Identifiers used to evaluate visitor pathing across editions, scale comparisons, and inquiry submissions in an aggregated format without cross-site profiling. Paid Advertising and Attribution Storage: Telemetry keys and click identifiers attached by ad network campaigns to measure lead conversion for designer art toy allocations.
Clause 3. Advertising Platform Click Identifiers. Our acquisition desk acquires collector traffic through paid marketing campaigns. Active campaigns run on google ads, Microsoft Advertising, and Meta Ads. When a visitor reaches kidrobotstoys.com via an ad placement, the respective network appends a specific query parameter to the landing URL. Google Ads appends the gclid parameter; Microsoft Advertising attaches the msclkid parameter; Meta Ads attaches the fbclid parameter. These identifiers verify the ad campaign source when an allocation inquiry is submitted. In strict compliance with regulatory standards, click identifiers are not written into persistent local cookies unless the visitor explicitly grants consent through our consent interface. No advertising network has reviewed, endorsed, or verified this website.
Clause 4. Consent Mode v2 Signal Architecture. We operate the four standard consent signals defined under consent mode v2: ad_storage, ad_user_data, ad_personalization, and analytics_storage. By default, upon initial page view before user action, all four signals are held strictly in a denied state. While in this denied state, no advertising cookies are read or set, personal data is not transmitted to advertising network modeling endpoints, and analytics measurements operate exclusively in cookieless ping mode. Only if the visitor explicitly selects "Accept All" are all four signals transitioned to granted. If the visitor declines non-essential storage or modifies preferences, the signals are immediately set back to denied.
Clause 5. Consent Affirmation and Modification Mechanisms. Consent is established through an affirmative action on the floating consent bar presented on the initial visit. Visitors may accept all categories or decline non-essential storage. The visitor's selection is stored in localStorage under the key site_consent_v2 for a retention window of 6 months. Visitors may re-examine, modify, or revoke their consent choice at any moment by clicking the link located in the footer of every page. Revocation is instantaneous; updating preferences purges optional tokens from client storage and updates Consent Mode v2 signals.
Clause 6. Consequences of Declining Optional Storage. Declining non-essential storage carries no penalty or loss of primary functionality. A visitor who declines may freely browse the flagship editions, inspect 3-inch and 4-inch scale comparisons, read rotocast vinyl casting specifications, utilize the allocation calculator tool, initiate chat consultations, and submit formal allocation inquiries via sapue30.php. Only marketing attribution cookies, cross-domain conversion verification tags, and personalized advertising profiles are blocked. We also recognize and honor browser-level Global Privacy Control signals (Sec-GPC) as an automatic refusal of optional tracking.
Clause 7. Third-Party Platform Policies and Governance. Where consent is granted, interaction data may be processed under the independent privacy frameworks of our platform partners. For Google Ads and measurement infrastructure, consult the Google Privacy Policy at policies.google.com. For Microsoft Advertising, data governance is detailed under the Microsoft Privacy Statement at privacy.microsoft.com. For Meta Ads, processing is governed by Meta Platforms Ireland Ltd. We do not permit third-party advertising brokers to sell or broker personal contact information collected through our inquiry desk.
Clause 8. Technical Inquiries and Privacy Contact. Questions concerning browser storage implementation, specific script operations, or request verification should be directed to the Kidrobot privacy and acquisition desk at 74 Leonard St, New York, New York 10013, New York, New York, United States. Telephone: 212-255-8066. Email: [email protected]. Technical inquiries regarding local storage and network request headers are reviewed by our operations engineering staff.