Tuʻutuʻuni Maluʻi ʻo e ʻŪkunga Fakafoʻituitui

behaviour

Pages viewed, items added to a basket, orders placed and the like, used to understand how the shop is used and which sources bring customers.

device_identifier

A random identifier stored in a cookie, so repeat visits from one browser are recognised as one person rather than many.

contact_hash

Email address and telephone number reduced to an irreversible hash, so an advertising platform can recognise its own customer without either party learning anything new.

advertising_click

The identifier an advertising platform adds to a link it was paid for, kept so an order placed weeks later can still be credited to the advertisement that earned it.

email

Account identification and communication.

phone

Optional two-factor authentication and account recovery.

password

Credential verification (stored as a one-way hash).

sessions

Session management and security.

audit_log

Security auditing of authentication events.

email

Identifies the customer for orders, delivery and support.

phone

Contact about an order and delivery notifications.

address

Delivery and billing addresses used to fulfil orders.

subscriber_email

Sends the newsletter the person asked for; a contact is created even without an account.

consent_record

Proves when a consent was given or withdrawn, with the address and time it came from.

mailbox_address

Identifies the mailbox a person sends from and receives into.

message_content

Subject and body of stored mail, kept so it can be read and answered.

correspondent_address

Sender and recipients of each message, including copies.

attachments

Files carried by a message; the stored location is encrypted.

address_book

Correspondents a person has written to, kept for addressing and completion.

search_index

Makes mail searchable without decrypting it: keyed hashes only.

external_mailbox_credentials

Host, user name, password or OAuth token of an outside mailbox the person connected.

device_push_tokens

Device identifiers used to notify a person of new mail.

delivery_log

Records what was sent, when, whether it was delivered, and the address and browser the event came from.

audit_log

Records administrative actions on mailboxes and the address they came from.