Are they ubiquitous? I'm no client side guru, I know I could look at makeuseof etc, but why not ask some professionals instead.
At the very least localstorage is supported across the board
No. It is disabled in many browsers when opened in private mode. Where you can have session cookies