Cookie Policy

Type Name of the cookie Session / Persistent First-party / Third-party Lifespan Purpose
Essential incap_ses_* Session First Party Session These first party cookies are set by a third party service to filter out malicious requests. The information generated cannot identify you as an individual.
visid_incap_* Session First Party 1 Year
_identity_session Persistent First Party 2 Year Merchant authentication: Main session cookie for Identity authentication. This is the underlying Rails session cookie. It contains the SID.
_master_udr session First Party session Permanent device identifier.
_merchant_essential Persistent First Party 1 Year Contains essential information for the correct functionality of merchant surfaces such as the admin area.
_shopify_essential Persistent First Party 1 Year Contains essential information for the correct functionality of a store such as session and checkout information and anti-tampering data.
_shopify_essential_ Persistent First Party 1 Year Contains an opaque token that is used to identify a device for all essential purposes.
_shopify_test Persistent First Party 1 Min Used to check cookie capabilities on the client.
_tracking_consent Persistent First Party 1 Year Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.
auth_state_[id] Persistent First Party 25 Mins Stores authentication state before redirecting customers to third party for authentication.
cart Persistent First Party 2 Weeks Contains information related to the user's cart.
cart_currency Persistent First Party 2 Weeks Used after a checkout is completed to initialize a new empty cart with the same currency as the one just used.
discount_code session First Party session Stores a discount code (received from an online store visit with a URL parameter) in order to the next checkout.
keep_alive session First Party session Used when international domain redirection is enabled to determine if a request is the first one of a session.
localization Persistent First Party 2 Weeks Used to localize the cart to the correct country.
login_with_shop_finalize Persistent First Party 5 Mins Used to facilitate login with Shop.
shopify_pay Persistent First Party 1 Year Used to log in a buyer into Shop Pay when they come back to checkout on the same store.
storefront_digest Persistent First Party 1 Year Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.
_shop_app_essential Persistent First Party 1 Year Contains essential information for the correct functionality of Shop.app.
privacy_signal Persistent First Party 1 Year Remembers a user's privacy choices about cookies and online tracking, especially for marketing and advertising, based on user's regional privacy laws.
__Host-_identity_session_same_site Session First Party session Merchant authentication: Identity session cookie.
privacy_signal Persistent First Party 1 Year Remembers a user's privacy choices about cookies and online tracking, especially for marketing and advertising, based on user's regional privacy laws.
Cloudflare - First Party - Shopify uses Cloudflare Network as a Service for edge routing.
https://www.cloudflare.com/privacypolicy/
Audience measurement _ga Session Third Party 1 Year
1 Month
Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_ga_* Session Third Party 1 Year
1 Month
_gid Session Third Party 1 Day
_gat Session Third Party 1 Minute Used by Google Analytics to throttle request rate.
_landing_page Persistent First Party 2 Weeks Capture the landing page of visitor when they come from other sites.
_merchant_analytics Persistent First Party 1 Year Contains analytics data for the merchant session.
_orig_referrer Persistent First Party 2 Weeks Allows merchant to identify where people are visiting them from.
_shopify_analytics Persistent First Party 1 Year Contains analytics data for buyer surfaces such as the storefront or checkout.
_shopify_s Persistent First Party 30 Mins Used to identify a given browser session/shop combination. Duration is 30 minute rolling expiry of last use.
_shopify_y Persistent First Party 1 Year Shopify analytics.
shop_analytics Persistent First Party 1 Year Contains the required buyer information for analytics in Shop.
_shopify_marketing Persistent First Party 1 Year Contains marketing data for buyer surfaces such as the storefront or checkout.
shopify_override_user_locale Persistent First Party 1 Year Used as a mechanism to set User locale in admin.
_shop_app_analytics Persistent First Party 1 Year Contains analytics data for Shop.app.
is_shopify_merchant Persistent First Party 1 Year Used to determine if a user is a Shopify merchant.
_orig_referrer Persistent First Party 2 Weeks Allows merchant to identify where people are visiting them from.
Functional PREF Persistent Third Party 8 Months Stores the user's video player preferences using embedded YouTube video.
VISITOR_INFO1_LIVE Persistent Third Party 180 Days Tries to estimate the users' bandwidth on pages with integrated YouTube videos.
YSC Session Third Party Session Registers a unique ID to keep statistics of what videos from YouTube the user has seen.
yt-player-headers-readable Persistent Third Party 17 Days Used to determine the optimal video quality based on the visitor's device and network settings.
yt-remote-cast-installed Session Third Party   Stores the user's video player preferences using embedded YouTube video.
yt-remote-connected-devices Persistent Third Party  
yt-remote-device-id Persistent Third Party  
yt-remote-fast-check-period Session Third Party  
yt-remote-session-app Session Third Party  
yt-remote-session-name Session Third Party  
shopify_override_user_locale Session First Party 1 Year Used as a mechanism to set User locale in admin.

Additionally, we use pixels and tags from the following third parties, which may in turn place cookies.

Type Third Party Description Privacy Policy
Cookies Necessary for the Functioning of the Site Cloudflare Shopify uses Cloudflare Network as a Service for edge routing. https://www.cloudflare.com/privacypolicy/
Reporting & Analytics Fullstory We use Fullstory to help measure how users interact with our websites. https://www.fullstory.com/legal/privacy/
Google Analytics We use Google Analytics to help measure how users interact with our websites. https://policies.google.com/privacy
Google Tag Manager We use Google Tag Manager to help manage analytics vendors. https://policies.google.com/privacy
Vidyard We use Vidyard to provide video content and measure how users interact with our content. https://www.vidyard.com/privacy/
Advertising Bizible We use Bizible to help measure marketing and advertising campaign attribution. https://www.vidyard.com/privacy/
Facebook Pixel We use Facebook Pixel to help measure how users interact with our websites. https://www.facebook.com/privacy/explanation
Facebook Custom Audiences We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites. https://www.facebook.com/policy.php
Google We use Google Ads to deliver targeted advertisements to individuals who visit our websites. https://policies.google.com/privacy
Instagram We use Instagram to deliver targeted advertisements to individuals who visit our websites. https://privacycenter.instagram.com/policy
iSpot We use iSpot to help measure how users interact with our websites. https://www.ispot.tv/terms-of-service
LinkedIn Insight Tag We use LinkedIn Insight Tag to help measure how users interact with our websites. https://www.linkedin.com/legal/privacy-policy
Reddit We use Reddit Ads to deliver targeted advertisements to individuals who visit our websites. https://www.reddit.com/help/privacypolicy
TikTok We use TikTok to help measure how users interact with our websites. https://www.tiktok.com/legal/privacy-policy?lang=en
Twitter We use Twitter to help measure how users interact with our websites. https://twitter.com/en/privacy
YouTube We use YouTube to deliver targeted advertisements to individuals who visit our websites. https://policies.google.com/privacy?hl=en
Social Media & Content Facebook Connect We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform. https://www.facebook.com/policy.php
Gravatar We use Gravatar to allow visitors to our websites to create avatars. https://www.facebook.com/policy.php
Instagram CDN Shopify uses Instagram CDN to provide content to user. https://privacycenter.instagram.com/policy
Sanity CDN Shopify uses Sanity CDN to provide content to user. https://www.sanity.io/legal/privacy
Simplecast Shopify uses Sanity CDN to provide content to user. https://www.sanity.io/legal/privacy
Twitter CDN We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform. https://twitter.com/en/privacy
TypeKit (Adobe fonts) We use typekit to load web fonts from Adobe CDN. https://www.adobe.com/privacy/policies/typekit.html
Wistia We use Wistia to display video content. https://wistia.com/privacy
YouTube CDN Shopify uses YouTube CDN to provide content to user. https://policies.google.com/privacy?hl=en