Cookie Policy
| Type | Name of the cookie | Session / Persistent | First-party / Third-party | Lifespan | Purpose |
|---|---|---|---|---|---|
| Essential | incap_ses_* | Session | First Party | Session | These first party cookies are set by a third party service to filter out malicious requests. The information generated cannot identify you as an individual. |
| visid_incap_* | Session | First Party | 1 Year | ||
| _identity_session | Persistent | First Party | 2 Year | Merchant authentication: Main session cookie for Identity authentication. This is the underlying Rails session cookie. It contains the SID. | |
| _master_udr | session | First Party | session | Permanent device identifier. | |
| _merchant_essential | Persistent | First Party | 1 Year | Contains essential information for the correct functionality of merchant surfaces such as the admin area. | |
| _shopify_essential | Persistent | First Party | 1 Year | Contains essential information for the correct functionality of a store such as session and checkout information and anti-tampering data. | |
| _shopify_essential_ | Persistent | First Party | 1 Year | Contains an opaque token that is used to identify a device for all essential purposes. | |
| _shopify_test | Persistent | First Party | 1 Min | Used to check cookie capabilities on the client. | |
| _tracking_consent | Persistent | First Party | 1 Year | Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region. | |
| auth_state_[id] | Persistent | First Party | 25 Mins | Stores authentication state before redirecting customers to third party for authentication. | |
| cart | Persistent | First Party | 2 Weeks | Contains information related to the user's cart. | |
| cart_currency | Persistent | First Party | 2 Weeks | Used after a checkout is completed to initialize a new empty cart with the same currency as the one just used. | |
| discount_code | session | First Party | session | Stores a discount code (received from an online store visit with a URL parameter) in order to the next checkout. | |
| keep_alive | session | First Party | session | Used when international domain redirection is enabled to determine if a request is the first one of a session. | |
| localization | Persistent | First Party | 2 Weeks | Used to localize the cart to the correct country. | |
| login_with_shop_finalize | Persistent | First Party | 5 Mins | Used to facilitate login with Shop. | |
| shopify_pay | Persistent | First Party | 1 Year | Used to log in a buyer into Shop Pay when they come back to checkout on the same store. | |
| storefront_digest | Persistent | First Party | 1 Year | Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected. | |
| _shop_app_essential | Persistent | First Party | 1 Year | Contains essential information for the correct functionality of Shop.app. | |
| privacy_signal | Persistent | First Party | 1 Year | Remembers a user's privacy choices about cookies and online tracking, especially for marketing and advertising, based on user's regional privacy laws. | |
| __Host-_identity_session_same_site | Session | First Party | session | Merchant authentication: Identity session cookie. | |
| privacy_signal | Persistent | First Party | 1 Year | Remembers a user's privacy choices about cookies and online tracking, especially for marketing and advertising, based on user's regional privacy laws. | |
| Cloudflare | - | First Party | - | Shopify uses Cloudflare Network as a Service for edge routing. https://www.cloudflare.com/privacypolicy/ |
|
| Audience measurement | _ga | Session | Third Party | 1 Year 1 Month |
Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
| _ga_* | Session | Third Party | 1 Year 1 Month |
||
| _gid | Session | Third Party | 1 Day | ||
| _gat | Session | Third Party | 1 Minute | Used by Google Analytics to throttle request rate. | |
| _landing_page | Persistent | First Party | 2 Weeks | Capture the landing page of visitor when they come from other sites. | |
| _merchant_analytics | Persistent | First Party | 1 Year | Contains analytics data for the merchant session. | |
| _orig_referrer | Persistent | First Party | 2 Weeks | Allows merchant to identify where people are visiting them from. | |
| _shopify_analytics | Persistent | First Party | 1 Year | Contains analytics data for buyer surfaces such as the storefront or checkout. | |
| _shopify_s | Persistent | First Party | 30 Mins | Used to identify a given browser session/shop combination. Duration is 30 minute rolling expiry of last use. | |
| _shopify_y | Persistent | First Party | 1 Year | Shopify analytics. | |
| shop_analytics | Persistent | First Party | 1 Year | Contains the required buyer information for analytics in Shop. | |
| _shopify_marketing | Persistent | First Party | 1 Year | Contains marketing data for buyer surfaces such as the storefront or checkout. | |
| shopify_override_user_locale | Persistent | First Party | 1 Year | Used as a mechanism to set User locale in admin. | |
| _shop_app_analytics | Persistent | First Party | 1 Year | Contains analytics data for Shop.app. | |
| is_shopify_merchant | Persistent | First Party | 1 Year | Used to determine if a user is a Shopify merchant. | |
| _orig_referrer | Persistent | First Party | 2 Weeks | Allows merchant to identify where people are visiting them from. | |
| Functional | PREF | Persistent | Third Party | 8 Months | Stores the user's video player preferences using embedded YouTube video. |
| VISITOR_INFO1_LIVE | Persistent | Third Party | 180 Days | Tries to estimate the users' bandwidth on pages with integrated YouTube videos. | |
| YSC | Session | Third Party | Session | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | |
| yt-player-headers-readable | Persistent | Third Party | 17 Days | Used to determine the optimal video quality based on the visitor's device and network settings. | |
| yt-remote-cast-installed | Session | Third Party | Stores the user's video player preferences using embedded YouTube video. | ||
| yt-remote-connected-devices | Persistent | Third Party | |||
| yt-remote-device-id | Persistent | Third Party | |||
| yt-remote-fast-check-period | Session | Third Party | |||
| yt-remote-session-app | Session | Third Party | |||
| yt-remote-session-name | Session | Third Party | |||
| shopify_override_user_locale | Session | First Party | 1 Year | Used as a mechanism to set User locale in admin. |
Additionally, we use pixels and tags from the following third parties, which may in turn place cookies.
| Type | Third Party | Description | Privacy Policy |
|---|---|---|---|
| Cookies Necessary for the Functioning of the Site | Cloudflare | Shopify uses Cloudflare Network as a Service for edge routing. | https://www.cloudflare.com/privacypolicy/ |
| Reporting & Analytics | Fullstory | We use Fullstory to help measure how users interact with our websites. | https://www.fullstory.com/legal/privacy/ |
| Google Analytics | We use Google Analytics to help measure how users interact with our websites. | https://policies.google.com/privacy | |
| Google Tag Manager | We use Google Tag Manager to help manage analytics vendors. | https://policies.google.com/privacy | |
| Vidyard | We use Vidyard to provide video content and measure how users interact with our content. | https://www.vidyard.com/privacy/ | |
| Advertising | Bizible | We use Bizible to help measure marketing and advertising campaign attribution. | https://www.vidyard.com/privacy/ |
| Facebook Pixel | We use Facebook Pixel to help measure how users interact with our websites. | https://www.facebook.com/privacy/explanation | |
| Facebook Custom Audiences | We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites. | https://www.facebook.com/policy.php | |
| We use Google Ads to deliver targeted advertisements to individuals who visit our websites. | https://policies.google.com/privacy | ||
| We use Instagram to deliver targeted advertisements to individuals who visit our websites. | https://privacycenter.instagram.com/policy | ||
| iSpot | We use iSpot to help measure how users interact with our websites. | https://www.ispot.tv/terms-of-service | |
| LinkedIn Insight Tag | We use LinkedIn Insight Tag to help measure how users interact with our websites. | https://www.linkedin.com/legal/privacy-policy | |
| We use Reddit Ads to deliver targeted advertisements to individuals who visit our websites. | https://www.reddit.com/help/privacypolicy | ||
| TikTok | We use TikTok to help measure how users interact with our websites. | https://www.tiktok.com/legal/privacy-policy?lang=en | |
| We use Twitter to help measure how users interact with our websites. | https://twitter.com/en/privacy | ||
| YouTube | We use YouTube to deliver targeted advertisements to individuals who visit our websites. | https://policies.google.com/privacy?hl=en | |
| Social Media & Content | Facebook Connect | We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform. | https://www.facebook.com/policy.php |
| Gravatar | We use Gravatar to allow visitors to our websites to create avatars. | https://www.facebook.com/policy.php | |
| Instagram CDN | Shopify uses Instagram CDN to provide content to user. | https://privacycenter.instagram.com/policy | |
| Sanity CDN | Shopify uses Sanity CDN to provide content to user. | https://www.sanity.io/legal/privacy | |
| Simplecast | Shopify uses Sanity CDN to provide content to user. | https://www.sanity.io/legal/privacy | |
| Twitter CDN | We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform. | https://twitter.com/en/privacy | |
| TypeKit (Adobe fonts) | We use typekit to load web fonts from Adobe CDN. | https://www.adobe.com/privacy/policies/typekit.html | |
| Wistia | We use Wistia to display video content. | https://wistia.com/privacy | |
| YouTube CDN | Shopify uses YouTube CDN to provide content to user. | https://policies.google.com/privacy?hl=en |
