Data stored in the CMS

Customer ID

By default, the customer ID assigned to your customer from your Provider is written in plain text into the Kirby CMS user content file.

Shopping Cart and Wishlist

The item UUID, variant, and the number of items in the shopping cart and wishlist are written in plain text into the Kirby CMS user content file.

Orders

Unless you disable storing orders with the config setting, Kart will link the customer to the stored order. The reference ID, datetimes, monetary amounts and order items are stored as content pages for each order. By default, the page of an order is publicly available yet protected by an unguessable signature.

Caches

The Kart plugin will cache API calls to your provider regarding which products and prices are available.

It will not cache API calls regarding any actions performed on behalf of a customer.

The ratelimit for public-facing endpoints uses an encrypted version of the visitor's IP address as a hash.

The plugin will also create caches to improve lookups for products, categories, tags, orders, stocks, licenses, gravatar images, and encrypted URL parameters.