Cookie Policy

Name

Description

Duration

Type

_ab

Used to control when the admin bar is shown on the storefront.

1y

Essential

_abv

Persist the collapsed state of the admin bar.

1y

Essential

_checkout_queue_token

Used when there is a queue during the checkout process.

1y

Essential

_cmp_a

Used for managing customer privacy settings.

1d

Essential

_identity_session

Contains the identity session identifier of the user.

2y

Essential

_master_udr

Permanent device identifier.

session

Essential

_pay_session

The Rails session cookie for Shopify Pay

session

Essential

_secure_account_session_id

Used to track a customer's session for new customer accounts.

30d

Essential

_session_id

Used for providing reporting and analytics.

2y

Essential

_shopify_country

Used for Plus shops where pricing currency/country is set from GeoIP by helping avoid GeoIP lookups after the first request.

30min

Essential

_shopify_essential

Contains essential information for the correct functionality of a store such as session and checkout information and anti-tampering data.

1y

Essential

_storefront_u

Used to facilitate updating customer account information.

1min

Essential

_tracking_consent

Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.

1y

Essential

auth_state_<<id>>

Stores authentication state before redirecting customers to third party for authentication.

25min

Essential

card_update_verification_id

Used to support verification when a buyer is redirected back to Shopify after completing 3D Secure during checkout.

20min

Essential

cart

Contains information related to the user's cart.

2w

Essential

cart_currency

Used after a checkout is completed to initialize a new empty cart with the same currency as the one just used.

2w

Essential

cart_sig

A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.

2w

Essential

cart_ts

Used in connection with checkout.

2w

Essential

checkout

Used in connection with checkout.

21d

Essential

checkout_prefill

Encrypts and stores URL parameters containing PII which are used in cart permalink URLs.

5min

Essential

checkout_session_lookup

Used in connection with checkout.

3w

Essential

checkout_session_token_<<id>>

Used when a checkout session is established on the server.

3w

Essential

checkout_token

Captures the landing page of the visitor when they come from other sites.

session

Essential

customer_account_locale

Used to keep track of a customer account locale when a redirection occurs from checkout or the storefront to customer accounts.

1y

Essential

customer_payment_method

Stores what payment method is being updated for subscriptions.

1h

Essential

customer_shop_pay_agreement

Used to help verify a new Shop Pay payment instrument.

20min

Essential

device_fp_id

Device fingerprint identifier to help prevent fraud.

session

Essential

device_id

Session device identifier to help prevent fraud.

session

Essential

discount_code

Stores a discount code (received from an online store visit with a URL parameter) in order to the next checkout.

session

Essential

dynamic_checkout_shown_on_cart

Adjusts checkout experience for buyers that proceed with regular checkout versus dynamic checkout.

30min

Essential

hide_shopify_pay_for_checkout

Set when a buyer dismisses the Shop Pay login modal during checkout, informing display to buyer.

session

Essential

identity-state

Stores state before redirecting customers to identity authentication.

1d

Essential

identity-state-<<id>>

Stores state before redirecting customers to identity authentication.

1d

Essential

identity_customer_account_number

Stores an identifier used to facilitate login across the customer's account and storefront domains.

12w

Essential

keep_alive

Used when international domain redirection is enabled to determine if a request is the first one of a session.

session

Essential

locale_bar_accepted

Preserves if the modal from the geolocation app was accepted.

session

Essential

locale_bar_dismissed

Preserves if the modal from the geolocation app was dismissed.

1d

Essential

localization

Used to localize the cart to the correct country.

2w

Essential

logged_in

Identity logged-in hint.

12w

Essential

login_with_shop_finalize

Used to facilitate login with Shop.

5min

Essential

master_device_id

Permanent device identifier.

1y

Essential

order

Used to allow access to the data of the order details page of the buyer.

3w

Essential

pay_update_intent_id

Stores an ID of a Shop Pay billing agreement update intent, required for a callback after verifying a new Shop Pay payment instrument.

20min

Essential

preview_theme

Used to indicate whether the theme is being previewed.

session

Essential

previous_checkout_token

Used to prefill checkout with the details from the previous checkout.

1y

Essential

previous_step

Used in connection with checkout.

1y

Essential

profile_preview_token

Used for previewing checkout customizations.

5min

Essential

receive-cookie-deprecation

Used for previewing checkout customizations.

session

Essential

remember_me

Used to prefill checkout with the details from the previous checkout.

1y

Essential

secure_customer_sig

Used to identify a user after they sign into a shop as a customer so they do not need to log in again.

1y

Essential

shop_pay_accelerated

Indicates if a buyer is eligible for Shop Pay accelerated checkout.

1y

Essential

shopify-editor-unconfirmed-settings

Stores changes merchant does in the editor to update the preview.

16h

Essential

shopify_pay

Used to log in a buyer into Shop Pay when they come back to checkout on the same store.

1y

Essential

shopify_pay_redirect

Used to accelerate the checkout process when the buyer has a Shop Pay account.

1y

Essential

storefront_digest

Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.

1y

Essential

tracked_start_checkout

Used in connection with checkout.

1y

Essential

user

Used in connection with Shop login.

1y

Essential

user_cross_site

Used in connection with Shop login.

1y

Essential

wpm-domain-test

Used to test Shopify's Web Pixel Manager with the domain to make sure everything is working correctly.

session

Essential

_landing_page

Capture the landing page of visitor when they come from other sites.

2w

Analytics

_orig_referrer

Allows merchant to identify where people are visiting them from.

2w

Analytics

_shopify_ga

Contains Google Analytics parameters that enable cross-domain analytics measurement to work.

session

Analytics

_shopify_s

Used to identify a given browser session/shop combination. Duration is 30 minute rolling expiry of last use.

30min

Analytics

_shopify_sa_p

Capture the landing page of visitor when they come from other sites to support marketing analytics.

30min

Analytics

_shopify_sa_t

Capture the landing page of visitor when they come from other sites to support marketing analytics.

30min

Analytics

_shopify_y

Shopify analytics.

1y

Analytics

checkout_one_experiment

Used when a checkout is eligible to Checkout One and has been assigned to an experiment (control group or test group).

session

Analytics

shop_analytics

Contains the required buyer information for analytics in Shop.

1y

Analytics

unique_interaction_id

Used for checkout metrics.

10min

Analytics

_identity_session

Contains the identity session identifier of the user.

2y

Functionality

checkout

Used in connection with checkout.

21d

Functionality

user

Used in connection with Shop login.

1y

Functionality

_assignment

Shopify analytics.

1y

Analytics

_landing_page

Capture the landing page of visitor when they come from other sites.

2w

Analytics

_orig_referrer

Allows merchant to identify where people are visiting them from.

2w

Analytics

_shopify_s

Used to identify a given browser session/shop combination. Duration is 30 minute rolling expiry of last use.

30min

Analytics

_shopify_sa_t

Capture the landing page of visitor when they come from other sites to support marketing analytics.

30min

Analytics

_shopify_y

Shopify analytics.

1y

Analytics

Third Party

Description

Privacy Policy

Type

Cloudflare

Shopify uses Cloudflare Network as a Service for edge routing.

https://www.cloudflare.com/privacypolicy/

Essential

Drift

We use Drift to help with conversational marketing to customers while they visit our websites.

https://www.drift.com/privacy-policy/

Essential

Fullstory

We use Fullstory to help measure how users interact with our websites.

https://www.fullstory.com/legal/privacy/

Analytics

Google Analytics

We use Google Analytics to help measure how users interact with our websites.

https://policies.google.com/privacy

Analytics

Google Tag Manager

We use Google Tag Manager to help manage analytics vendors.

https://policies.google.com/privacy

Analytics

Vidyard

We use Vidyard to provide video content and measure how users interact with our content.

https://www.vidyard.com/privacy/

Analytics

Bizible

We use Bizible to help measure marketing and advertising campaign attribution.

https://documents.marketo.com/legal/privacy/

Advertising

Facebook Pixel

We use Facebook Pixel to help measure how users interact with our websites.

https://www.facebook.com/privacy/explanation

Advertising

Facebook Custom Audiences

We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.

https://www.facebook.com/policy.php

Advertising

Google

We use Google Ads to deliver targeted advertisements to individuals who visit our websites.

https://policies.google.com/privacy

Advertising

Instagram

We use Instagram to deliver targeted advertisements to individuals who visit our websites.

https://privacycenter.instagram.com/policy

Advertising

iSpot

We use iSpot to help measure how users interact with our websites.

https://www.ispot.tv/terms-of-service

Advertising

LinkedIn Insight Tag

We use LinkedIn Insight Tag to help measure how users interact with our websites.

https://www.linkedin.com/legal/privacy-policy

Advertising

Reddit

We use Reddit Ads to deliver targeted advertisements to individuals who visit our websites.

https://www.reddit.com/help/privacypolicy

Advertising

TikTok

We use TikTok to help measure how users interact with our websites.

https://www.tiktok.com/legal/privacy-policy?lang=en

Advertising

Twitter

We use Twitter to help measure how users interact with our websites.

https://twitter.com/en/privacy

Advertising

YouTube

We use YouTube to deliver targeted advertisements to individuals who visit our websites.

https://policies.google.com/privacy?hl=en

Advertising

Facebook Connect

We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.

https://www.facebook.com/policy.php

Social Media & Content

Gravatar

We use Gravatar to allow visitors to our websites to create avatars.

https://en.gravatar.com/site/privacy

Social Media & Content

Instagram CDN

Shopify uses Instagram CDN to provide content to user.

https://privacycenter.instagram.com/policy

Social Media & Content

Sanity CDN

Shopify uses Sanity CDN to provide content to user.

https://www.sanity.io/legal/privacy

Social Media & Content

Simplecast

Shopify uses Simplecast to distribute podcasts.

https://simplecast.com/privacy

Social Media & Content

Twitter CDN

We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.

https://twitter.com/en/privacy

Social Media & Content

TypeKit (Adobe fonts)

We use typekit to load web fonts from Adobe CDN

https://www.adobe.com/privacy/policies/typekit.html

Social Media & Content

Wistia

We use Wistia to display video content.

https://wistia.com/privacy

Social Media & Content

YouTube CDN

Shopify uses YouTube CDN to provide content to user.

https://policies.google.com/privacy?hl=en

Social Media & Content

Google Analytics

We use Google Analytics to help measure how users interact with our websites.

https://policies.google.com/privacy

Analytics

Microsoft Advertising

We use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.

https://privacy.microsoft.com/en-ca/privacystatement

Advertising

Google

We use Google Ads to deliver targeted advertisements to individuals who visit our websites.

https://policies.google.com/privacy

Advertising