Cookie Policy
Cookie Settings
Cookie Policy
This Cookie Policy governs how cookies and similar technologies are used on some of our own websites and websites controlled by us, web applications (e.g. so-called widgets or web applications) and mobile applications ("Mobile Apps") that refer to this Cookie Policy (the websites, web applications and mobile apps are hereinafter referred to individually and collectively as the "Site").
By using the Site, you agree to the provisions of this Cookie Policy. Please refrain from using the Site or deactivate cookies or similar technologies (as described below) if you do not wish cookies to be stored on, or accessed from, your computer or mobile device.
We reserve the right to change this Cookie Policy at any time. Please refer to the date under the heading "last changed" at the top of this page to see when this Cookie Policy was last changed. Changes to the Cookie Policy become effective as soon as we make them available on the Site.
WHAT IS A "COOKIE"?
A cookie is a text file that the Site's server transmits to the cookie file of the browser on your computer or mobile device, so that the Site's server can read and retrieve the contents of the cookie.
HOW WE USE COOKIES
2.1 We currently use both "session" cookies and persistent cookies.
The following table lists the main cookies we use on the Sites to support the relevant functions.
| Name | Description / Purpose | Expiry |
|---|---|---|
| _ab | Determines when the admin bar is displayed in the storefront. | 1 year |
| _abv | Retains the minimized state of the admin bar. | 1 year |
| _checkout_queue_token | Used when there is a queue during the checkout process. | 1 year |
| _cmp_a | Used to manage the customer's privacy settings. | 1 day |
| _identity_session | Contains the ID of the user's identity session. | 2 years |
| _master_udr | The persistent ID of the device. | Session |
| _pay_session | The Rails session cookie for Shopify Pay. | Session |
| _secure_account_session_id | Used to track a customer session for new customer accounts. | 30 days |
| _session_id | Used for reporting and analytics. | 2 years |
| _shopify_country | Used in Plus shops where the price currency or country is set via GeoIP, to avoid GeoIP lookups after the first request. | 30 minutes |
| _shopify_essential | Contains essential information for the correct functioning of a shop, e.g. session and checkout information as well as data for protection against tampering. | 1 year |
| _storefront_u | Used to help update customer account information. | 1 minute |
| _tracking_consent | Used to store a user's preferences when a merchant has set up privacy rules in the visitor's region. | 1 year |
| auth_state_<> | Stores the customer authentication state. | 25 minutes |
| card_update_verification_id | Supports verification when a buyer is redirected back to Shopify after completing 3D Secure during checkout. | 20 minutes |
| cart | Contains information about the user's shopping cart. | 2 weeks |
| cart_currency | Used after checkout is completed to initialize a new, empty cart with the same currency as the cart just completed. | 2 weeks |
| cart_sig | A hash value of the contents of a cart. It is used to verify the integrity of the cart and to ensure the performance of certain cart operations. | 2 weeks |
| cart_ts | Used in connection with the checkout. | 2 weeks |
| cart_ver | Set each time a cart is updated and used to track mismatched cart versions. | 2 weeks |
| checkout | Used in connection with the checkout. | 21 days |
| checkout_one_remember_me | Used to pre-fill the checkout with the details from the previous checkout. | 1 year |
| checkout_prefill | Encrypts and stores URL parameters containing personal data used in the URLs of cart permalinks. | 5 minutes |
| checkout_session_lookup | Used in connection with the checkout. | 3 weeks |
| checkout_session_token_<> | Used when a checkout session is set up on the server. | 3 weeks |
| checkout_token | Records the landing page of visitors coming from other websites. | Session |
| customer_account_locale | Used to track the locale of a customer account when redirecting from checkout or the storefront to customer accounts. | 1 year |
| customer_payment_method | Stores the payment method being updated for subscriptions. | 1 hour |
| customer_shop_pay_agreement | Used to verify a new payment method for Shop Pay. | 20 minutes |
| device_fp_id | Contains the device fingerprint ID used as a protective measure against fraud. | Session |
| device_id | Contains the ID of the session device, used as a protective measure against fraud. | Session |
| discount_code | Stores a discount code (obtained from an online store visit with a URL parameter) to be applied at the next checkout. | Session |
| dynamic_checkout_shown_on_cart | Customizes the checkout experience for buyers who use the regular checkout rather than dynamic checkout. | 30 minutes |
| hide_shopify_pay_for_checkout | Set when a buyer cancels the Shop Pay login modal during checkout. Subsequently displays an information notice to the buyer. | Session |
| keep_alive | Used when international domain redirection is enabled to determine whether a request is the first of a session. | Session |
| locale_bar_accepted | Persists when the modal has been accepted by the geolocation app. | Session |
| locale_bar_dismissed | Persists when the modal has been dismissed by the geolocation app. | 1 day |
| localization | Used to localize the cart to the correct country. | 2 weeks |
| logged_in | Indicates the logged-in identity. | 12 weeks |
| login_with_shop_finalize | Used to facilitate login in the shop. | 5 minutes |
| master_device_id | The persistent ID of the device. | 1 year |
| order | Used to enable access to the data on the buyer's order details page. | 3 weeks |
| pay_update_intent_id | Stores the ID of an update intent for a Shop Pay billing agreement, required for a callback after verification of a new Shop Pay payment method. | 20 minutes |
| preview_theme | Indicates whether the theme is being viewed in preview. | Session |
| previous_checkout_token | Used to pre-fill the checkout with the details from the previous checkout. | 1 year |
| previous_step | Used in connection with the checkout. | 1 year |
| profile_preview_token | Used to display a Checkout Extensibility preview. | 5 minutes |
| receive-cookie-deprecation | A cookie used by Google to identify certain Chrome browsers affected by the phase-out of third-party cookies. Further information about this cookie can be found here. | Session |
| remember_me | Used to pre-fill the checkout with the details from the previous checkout. | 1 year |
| secure_customer_sig | Used to identify a user after they have logged in as a customer in a shop, so that they do not have to log in again. | 1 year |
| shop_pay_accelerated | Indicates whether a buyer is eligible for Shop Pay's accelerated checkout. | 1 year |
| shopify-editor-unconfirmed-settings | Stores changes a merchant makes in the editor in order to update the preview. | 16 hours |
| shopify_pay | Used to sign a buyer in to Shop Pay when they return to checkout in the same shop. | 1 year |
| shopify_pay_redirect | Used to speed up the checkout process if the buyer has a Shop Pay account. | 1 year |
| storefront_digest | Stores a digest of the storefront password so that merchants can preview their storefront while it is password-protected. | 1 year |
| tracked_start_checkout | Used in connection with the checkout. | 1 year |
| user | Used in connection with the shop login. | 1 year |
| user_cross_site | Used in connection with the shop login. | 1 year |
| wpm-domain-test | Used to test Shopify's Web Pixel Manager with the domain to ensure everything works correctly. | Session |
Reporting and Statistics
| Name | Description | Duration |
|---|---|---|
| _landing_page | Records the landing page of visitors coming from other websites. | 2 weeks |
| _orig_referrer | Enables merchants to see where visitors come from. | 2 weeks |
| _shopify_ga | Contains Google Analytics parameters that enable cross-domain analytics measurement. | Session |
| _shopify_s | Used to identify a specific combination of browser session and shop. Automatically deleted 30 minutes after last use. | 30 minutes |
| _shopify_sa_p | Records the landing page of visitors coming from other websites, to support marketing analytics. | 30 minutes |
| _shopify_sa_t | Records the landing page of visitors coming from other websites, to support marketing analytics. | 30 minutes |
| _shopify_y | Shopify analytics. | 1 year |
| checkout_one_experiment | Used when a checkout is eligible for Checkout One and has been assigned to an experiment (control group or test group). | Session |
| shop_analytics | Contains the necessary information about buyers for analytics in Shop. | 1 year |
| unique_interaction_id | Used in calculating checkout metrics. | 10 minutes |
2.2 Third-Party Cookies
We use a variety of third-party content and applications on our Sites. If you visit a Site that contains content from, for example, Facebook or YouTube, cookies may therefore be set by these websites. We have no control over the distribution, content or use of these cookies. Please check the relevant third party's website for further information.
The following list contains some of the main third-party providers we use:
- Facebook – to support the registration of users for our services via their Facebook accounts, to "like" or share content from the Site on Facebook, and to display content from Facebook: https://www.facebook.com/help/cookies
- Twitter – to display content from Twitter and to enable users to connect to an artist's Twitter account: https://twitter.com/privacy
- YouTube – to play video content via YouTube's "embedded player": https://www.google.com/policies/privacy/
- Google – to enable users to be shown search or YouTube advertising that is relevant to the artist page visited, and for web analytics: https://www.google.com/policies/privacy/
- PayPal – to recognize a user as a PayPal customer; to personalize PayPal services, content and advertising; to measure the effectiveness of advertising materials; to obtain information about the user's computer or other access devices; to mitigate losses, prevent fraud and promote trust and safety: https://cms.paypal.com/us/cgi-bin/marketingweb?cmd=_render-content&content_ID=ua/Privacy_full&locale.x=en_US
- Adobe Flash Player – to improve the user experience and to store preferences: https://www.adobe.com/uk/privacy/policy.html
- SmartURL – we may use SmartURL to rename links to our Sites or to our partners' websites to which our Sites link. SmartURL provides anonymized and aggregated statistics in connection with the use of shortened URLs, for example by telling us how often the relevant link has been clicked. We do not have access to the IP address of the user's computer that is collected by SmartURL when a user uses its service. SmartURL does not have access to data collected via the Site.
- Third-party advertisers on our Sites may use cookies and other technologies in their advertising materials for statistical purposes; we have no control over cookies placed by third parties on our Sites.
Advertising
| Third party | Description | Privacy |
|---|---|---|
| Spotify | We use Spotify to deliver targeted advertising to visitors of our websites. | https://www.spotify.com/de/legal/privacy-policy/ |
| Facebook Pixel | We use Facebook Pixel to determine how users interact with our websites. | https://www.facebook.com/privacy/explanation |
| Facebook Custom Audiences | We use Facebook Custom Audiences to deliver targeted advertising to visitors of our websites. | https://www.facebook.com/policy.php |
| We use Google Ads to deliver targeted advertising to visitors of our websites. | https://policies.google.com/privacy | |
| We use Instagram to deliver targeted advertising to visitors of our websites. | https://privacycenter.instagram.com/policy | |
| We use Reddit Ads to deliver targeted advertising to visitors of our websites. | https://www.reddit.com/help/privacypolicy | |
| TikTok | We use TikTok to determine how users interact with our websites. | https://www.tiktok.com/legal/privacy-policy?lang=en |
| We use Twitter to determine how users interact with our websites. | https://twitter.com/en/privacy | |
| YouTube | We use YouTube to deliver targeted advertising to visitors of our websites. | https://policies.google.com/privacy?hl=en |
REFUSING COOKIES ON THE SITE
If you do not want your personal information to be collected through the use of cookies, most browsers offer a simple way to automatically refuse cookies or to accept or refuse the transfer of a particular cookie (or particular cookies) from a particular website to your computer, as you choose. Information about the settings you need to make in order to refuse cookies can be found on your browser provider's website via the help function. Further information about common browsers can be found at http://www.allaboutcookies.org/manage-cookies/index.html. Please note that not all functions on the Site will work as intended if cookies are refused.
We would like to tell you how to remove "tracking cookies" if you wish to do so. We therefore provide you with the option and give you links to websites through which you can manage cookies:
If you want to remove all "tracking cookies" from all of your websites, we give you here three links to websites from which you can download programs that delete "tracking cookies":