Essential website cookies
The Laravel website uses the roots-session session cookie and may issue an XSRF-TOKEN cookie to support session continuity and protection against forged requests. Cookies may be set even when you only visit the public site. They are not used here to build an advertising profile.
The session configuration has a 120-minute lifetime and cookies can be refreshed as you interact with the site. Your browser controls when stored cookies are removed. Production session cookies use HTTPS, and the session cookie is restricted from JavaScript access.
Mobile app storage
The Roots mobile app stores authentication credentials in the platform’s secure storage to maintain your sign-in. This is different from a browser cookie. Signing out revokes the current server token when the request succeeds and clears the local session. Uninstalling an app does not itself delete server-side personal information.
No advertising or analytics cookies configured
We have not added an advertising or analytics tracker to this website. The conversation prompt feature runs in your browser without creating a profile or sending your chosen question to Roots. Copying a prompt writes the question to your device’s clipboard only when you press the copy button.
External resources
Bootstrap is loaded from jsDelivr and jQuery from code.jquery.com. Those providers receive browser requests, which can include an IP address and standard request metadata, and control their own service practices. Website photography and Roots brand images are served from this domain. See the Privacy Policy for more information about recipients.
Your controls
You can view, block, or delete cookies in your browser settings. Blocking essential cookies may interfere with session-based functionality. You can also clear website storage and use your device’s app settings to manage local app data. These actions do not delete your Roots account; use the account deletion process to request that.
If nonessential technologies are introduced, we will update this policy and request consent before using them where required. Contact admin@craftcart.app for cookie and privacy questions.