> (or gzipped json of it) Parent comment already covered that case. If the content is included in the code, it doesn't need to be stored anywhere. Nobody said

> (or gzipped json of it) Parent comment already covered that case. If the content is included in the code, it doesn't need to be stored anywhere. Nobody said permanent, either. It'd be reasonable that the data expires after a certain amount of time. Preferable, even, for limiting exposure in the event of a breach. Additionally, while I don't think this is the case for grocery stores, most stores do actually keep a record of every purchase made. The data and aggregated analytics on said data is huge, and it allows for things like faster returns and personalized coupons/recommendations.