This document is intended to explain the types of cookies and other tracking technologies that Shopify may place on your device when you visit our websites or the online store of a merchant who uses our platform for their website.

What are cookies?

A cookie is a small amount of information that is downloaded to your computer or device when you visit certain websites. We use a number of different cookies on the Shopify website: strictly necessary cookies, performance cookies, advertising cookies, social media cookies, content cookies, etc. Cookies improve your browsing experience by enabling the website to remember your actions and preferences (such as username and region selection). This means you don't have to re-enter this information each time you return to the site or navigate from one page to another. Cookies also provide information about how visitors use the website, for example whether this is their first visit or whether they are frequent visitors. To find out more about cookies (and similar tracking technologies) and our use of data collected through these technologies, please see our Privacy Policy.

What cookies do we use and why?

Some cookies are necessary to enable you to browse our website, to use its features and to access its secure areas. The use of these cookies is essential to the operation of the website. For example, we use per-session user input cookies to track user input when completing forms on multiple pages.

We also use functional cookies to remember choices you've made or information you've provided, such as your username, language or location. This allows us to personalize your experience on our website according to your preferences. For example, authentication cookies are functional cookies used for the duration of a session (or persistently, if you agree to use the "Remember me" function) to enable users to identify themselves on subsequent visits or to access authorized content on multiple pages. Here are some of the functional cookies we use:

  • User-centric security cookies are used to detect authentication abuse for a limited continuous period, such as unsuccessful login attempts. These cookies are specifically configured to improve service security.

  • Multimedia content playback cookies (flash cookies) are used for the duration of a session to record the technical data required to play video or audio content (e.g. image quality, network link speed and buffer memory settings).

  • Load balancing cookies are used during a session to identify the same server in the pool, enabling the load balancer to redirect user requests appropriately.

  • Persistent user interface personalization cookies are used to record a user's preference for a service on several web pages.

User experience is fundamental to Shopify and we employ many tools to improve our website and commerce platform. To this end, we use reporting and data analysis cookies to collect information about how and how often you use our website or our merchants' online stores. These cookies collect information for statistical purposes only and use only pseudonyms as cookie identifiers, which do not identify you personally. Here are some of the performance cookies we use:

  • Proprietary data analysis cookies: we use these cookies to estimate the number of unique visitors, to improve our websites and those of our merchants, and to detect the most searched-for words in search engines leading to a web page. These cookies are not used to target you with online marketing. We use these cookies to learn more about the performance of our websites and those of our merchants, and to make relevant improvements to your browsing experience.

  • Third-party data analysis cookies - We also use Google Analytics and other third-party data analysis providers to help us evaluate how users interact with the content of our website. These cookies "remember" our users' actions on previous pages and how they interact with the website. To find out more about Google Analytics, visit the Google information page. See below to find out how to opt out of Google Analytics.

Advertising cookies are used on our website to personalize marketing content according to you and your interests, and then to offer you a more personalized service. These cookies remember your visit to our website and we may share this information with third parties, such as advertisers. Although these cookies can track visits from your device to our website and other sites, they generally cannot identify you personally. Without these cookies, the advertisements you see would be less relevant and interesting to you. To find out more about how companies use cookies to run targeted or retargeted advertising campaigns, click here. We do not personally set advertising cookies via our merchants' online stores, but they are free to make this choice themselves.

Finally, social media and content cookies are set by many social media plug-ins (e.g. Facebook's "Like" button), as well as by other tools used to provide or enrich website content (e.g. services enabling the playback of video files or the creation of comment sections). We integrate these modules into our platform to enhance the browsing experience and interactions with our websites. Please note that some of these third-party services set cookies which are also used for functions such as behavioral advertising, data analysis and/or market research.

Merchant online stores

When merchants use our platform to power their online stores, we set the following cookies for visitors to their stores:

Cookies necessary for the operation of the store:

Name Function Duration
_ab Use linked to administrator interface access. 2 years
_customer_account_shop_sessions Use with _secure_account_session_id cookie to track user sessions for new customer accounts 30d
_secure_account_session_id Use to track user sessions for new customer accounts 30d
_secure_session_id Used for browsing in an online store. 24 h
_shopify_country Payment-related use. session
_shopify_m Used to manage customer privacy settings. 1 year
_shopify_tm Used to manage customer privacy settings. 30 min.
_shopify_tw Used to manage customer privacy settings. 2 wks
_storefront_u Used to update customer account information. 1 min
tracking_consent Tracking preferences. 1 year
_cmp_a Used to manage customer privacy settings. 1 j
c Payment-related use. 1 year
cart Shopping cart usage. 2 wks
cart_currency Shopping cart usage. 2 wks
cart_sig Payment-related use. 2 wks
cart_ts Payment-related use. 2 wks
cart_ver Shopping cart usage. 2 wks
checkout Payment-related use. 4 wks
checkout_token Payment-related use. 1 year
customer_account_locale Use for new customer accounts 1 year
dynamic_checkout_shown_on_cart Payment-related use. 30 min.
hide_shopify_pay_for_checkout Payment-related use. session
keep_alive Use linked to buyer location. 2 wks
master_device_id Use linked to merchant IDs. 2 years
previous_step Payment-related use. 1 year
discount_code Payment-related use. session
remember_me Payment-related use. 1 year
secure_customer_sig Use linked to customer IDs. 1 year
shopify_pay Payment-related use. 1 year
shopify_pay_redirect Payment-related use. 30 minutes, 3 weeks or 1 year depending on value
shop_pay_accelerated Payment-related use. 1 year
source_name Used with mobile applications to personalize payment if the store is viewed from a compatible mobile application. session
storefront_digest Use linked to customer IDs. 2 years
tracked_start_checkout Payment-related use. 1 year
checkout_session_lookup Payment-related use. 3 wks
checkout_prefill Payment-related use. 5 months
checkout_queue_token Payment-related use. 1 year
checkout_queue_checkout_token Payment-related use. 1 year
checkout_worker_session Payment-related use. 3d
checkout_session_token Payment-related use. 3 wks
checkout_session_token_<<token>> Payment-related use. 3 wks
cookietest Use to ensure the proper functioning of our systems. 1m
order Use linked to the order status page. 3 wks
identity-state Use for customer authentication 24 h
identity-state-<<token>> Use for customer authentication 24 h
identity_customer_account_number Use for customer authentication 12 wks
card_update_verification_id Payment-related use. 20 months
customer_account_new_login Use for customer authentication 20 months
customer_account_preview Use for customer authentication 7 days
customer_payment_method Payment-related use. 1 h
customer_shop_pay_agreement Payment-related use. 20 months
pay_update_intent_id Payment-related use. 20 months
localization Payment-related use. 2 wks
profile_preview_token Payment-related use. 5 months
login_with_shop_finalize Use for customer authentication 5 m
preview_theme Theme editor usage session
shopify-editor-unconfirmed-settings Theme editor usage 16 h
wpm-test-cookie Use to ensure the proper functioning of our systems. session

Reports and data analysis

Name Function Duration
_landing_page Landing page tracking. 2 wks
_orig_referrer Landing page tracking. 2 wks
_s Analysis of data provided by Shopify. 30 min.
_shopify_d Analysis of data provided by Shopify. session
_shopify_fs Analysis of data provided by Shopify. 30 min.
_shopify_s Analysis of data provided by Shopify. 30 min.
_shopify_sa_p Analysis of marketing and sponsorship data provided by Shopify. 30 min.
_shopify_sa_t Analysis of marketing and sponsorship data provided by Shopify. 30 min.
_shopify_y Analysis of data provided by Shopify. 1 year
_y Analysis of data provided by Shopify. 1 year
_shopify_ga Shopify and Google Analytics. session
customer_auth_provider Analysis of data provided by Shopify. session
customer_auth_session_created_at Analysis of data provided by Shopify. session
unique_interaction_id Analysis of data provided by Shopify. 10 min.

Shopify websites

When visitors load Shopify websites, we set the following Shopify cookies:

Cookies required for site operation

Name Function Duration
_Brochure_session Use related to site navigation. -
checkout Use in conjunction with Pay on shop.app. 3 wks
signed_in Use of Shop identifiers. 1 year
user Use of Shop identifiers. 1 year

Reports and data analysis

Name Function
_landing_page Landing page tracking.
_orig_referrer Landing page tracking.
_s Analysis of data provided by Shopify.
session_id Analysis of Shopify data
_shopify_s Analysis of data provided by Shopify.
_shopify_sa_t Analysis of marketing and sponsorship data provided by Shopify.
_shopify_uniq Analysis of data provided by Shopify.
_shopify_y Analysis of data provided by Shopify.
_y Analysis of data provided by Shopify.
*_assignment Analysis of data provided by Shopify.
ab_test_* Analysis of data provided by Shopify.
cart_sig Analysis of data provided by Shopify.
ki_r Analysis of data provided by Shopify.
ki_t Analysis of data provided by Shopify.

In addition, we use pixels and beacons from the following third-party suppliers, who may in turn place cookies:

Cookies required for site operation

Third parties Description Privacy Policy
Cloudflare Shopify uses the Cloudflare Network service for state-of-the-art routing. https://www.cloudflare.com/privacypolicy/

Reporting and data analysis :

Third parties Description Privacy Policy
Alexa Metrics We use Alexa Metrics to measure user interaction with our websites. https://www.alexa.com/help/privacy
Bizible We use Bizible to evaluate user interaction with our websites. https://documents.marketo.com/legal/privacy/
Chartbeat We use Chartbeat to measure user interaction with our websites. https://chartbeat.com/privacy/
Crazy Egg We use Crazy Egg to measure how users interact with our websites. https://www.crazyegg.com/privacy
Datadog RUM We use Datadog RUM to evaluate user interaction with our websites. https://www.datadoghq.com/legal/privacy/
DC Analytics We use DC Analytics to evaluate user interaction with our websites. https://dcanalytics.dcmn.com/privacy-policy
Facebook pixel We use the Facebook pixel to measure user interaction with our websites. https://www.facebook.com/privacy/explanation
Fullstory We use Fullstory to evaluate user interaction with our websites. https://www.fullstory.com/legal/privacy/
Google Analytics We use Google Analytics to measure user interaction with our websites. https://policies.google.com/privacy
Google Tag Manager We use Google Beacon Manager to manage analytics providers. https://policies.google.com/privacy
Hotjar We use Hotjar to measure user interaction with our websites. https://www.hotjar.com/legal/policies/privacy
iSpot We use iSpot to measure user interaction with our websites. https://www.ispot.tv/terms-of-service
KissInsights We use KissInsights to measure user interaction with our websites. https://signin.kissmetrics.com/privacy/
LinkedIn information tag We use the LinkedIn information beacon to evaluate user interaction with our websites. https://www.linkedin.com/legal/privacy-policy
New Relic We use New Relic to evaluate user interaction with our websites. https://newrelic.com/termsandconditions/privacy
Optimizely We use Optimizely to test improvements or changes to our websites. https://www.optimizely.com/privacy/
Pinterest analysis We use Pinterest Analytics to evaluate user interaction with our websites. https://policy.pinterest.com/privacy-policy
Segment We use Segment to measure user interaction with our websites. https://segment.com/legal/privacy/
Snapchat We use Snapchat to measure user interaction with our websites. https://snap.com/privacy/privacy-policy
Taboola We use Taboola to measure user interaction with our websites. https://www.taboola.com/policies/privacy-policy
Tealium We use Tealium to manage analytics providers. https://tealium.com/privacy/
TikTok We use TikTok to evaluate user interaction with our websites. https://www.tiktok.com/legal/privacy-policy?lang=fr
Twitter We use Twitter to measure user interaction with our websites. https://twitter.com/en/privacy
Yelp audience platform We use Yelp to evaluate user interaction with our websites. https://terms.yelp.com/privacy/en_us/20200101_en_us/

Advertising:

Third parties Description Privacy Policy
Microsoft Advertising We use Microsoft Advertising to deliver targeted advertising to visitors to our websites. https://privacy.microsoft.com/fr-ca/privacystatement
Drift We use Drift for our conversational marketing to customers while they are visiting our websites. https://www.drift.com/privacy-policy/
Facebook Custom Audiences We use Facebook Custom Audiences to deliver targeted advertising to visitors to our websites. https://www.facebook.com/policy.php
Google We use Google Ads to provide targeted advertising to visitors to our websites. https://policies.google.com/privacy
Hubspot We use Hubspot to manage our customer relationships. https://legal.hubspot.com/privacy-policy
Intercom We use Intercom to manage our relationships with our customers. https://www.intercom.com/terms-and-policies#privacy
Marketo We use Marketo to manage our relationships with our customers. https://documents.marketo.com/legal/privacy/
Outbrain We use Outbrain to deliver targeted advertising to visitors to our websites. https://www.outbrain.com/privacy/fr
Quora We use Quora to provide targeted advertising to visitors to our websites. https://www.quora.com/about/privacy
Reddit We use Reddit Ads to provide targeted advertising to visitors to our websites. https://www.reddit.com/help/privacypolicy
SourceKnowledge We use SourceKnowledge to provide targeted advertising to visitors to our websites. http://www.sourceknowledge.com/privacy
Yahoo Japan Ads We use Yahoo Japan Ads to deliver targeted advertising to visitors to our websites. https://about.yahoo.co.jp/common/terms/

Social media and content :

Third parties Description Privacy Policy
Disqus We use Disqus to offer the possibility of commenting on publications on our websites. https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook Connect We use Facebook Connect to enable visitors to our website to interact with and share our content through the Facebook social media platform. https://www.facebook.com/policy.php
Gravatar We use Gravatar to allow visitors to our websites to create avatars. https://en.gravatar.com/site/privacy
Twitter We use Twitter to enable visitors to our website to interact with and share our content on the Twitter social media platform. https://twitter.com/en/privacy
Wistia We use Wistia to display video content. https://wistia.com/privacy

Oberlo websites

When visitors load Oberlo websites, we set the following Oberlo cookies:

Cookies required for site operation

Name Function
oberlo_session Used in connection with navigation via an application.
shippingCountry Used in connection with navigation through an application. For product exploration, shipping rate calculation.
user_locale Used in connection with customer identifiers. To store the language selected on the login page.
hideFufilmentBanner Used in connection with navigation via an application.
hideBulkOrderingFeatureBanner Used in connection with navigation via an application.
hideChangePlanBannerBulkFulfillment Used in connection with navigation via an application.
hideBanner101 Used in connection with navigation via an application.
alert_setup_notifications_1 Used in connection with navigation via an application.

Reports and data analysis

Name Function
conversion Oberlo data analysis.
conversion_leave Oberlo data analysis.
trackExtensionCheck Oberlo data analysis.
shopify_ref Marketing and sponsorship data analysis. Sponsorship follow-up.

In addition, we use pixels and beacons from the following third-party suppliers, who may in turn place cookies:

Reporting and data analysis :

Third parties Description Privacy Policy
Loggly We use Loggly to resolve problems with our websites. https://www.loggly.com/about/privacy-policy/
Sleeknote We use Sleeknote to measure user interaction with our website. https://sleeknote.com/privacy-policy
Inspectlet We use Inspectlet to evaluate user interaction with our websites. https://www.inspectlet.com/terms-of-service
Google Analytics We use Google Analytics to measure user interaction with our websites. https://policies.google.com/privacy
Fullstory We use Fullstory to evaluate user interaction with our websites. https://www.fullstory.com/legal/privacy/
KissInsights We use KissInsights to measure user interaction with our websites. https://signin.kissmetrics.com/privacy/
Optimizely We use Optimizely to test improvements or changes to our websites. https://www.optimizely.com/privacy/
LinkedIn information tag We use the LinkedIn information beacon to evaluate user interaction with our websites. https://www.linkedin.com/legal/privacy-policy
Tapfiliate We use Tapfiliate to evaluate user interaction with our websites. https://tapfiliate.com/privacy/privacy-policy/

Advertising:

Third parties Description Privacy Policy
Microsoft Advertising We use Microsoft Advertising to deliver targeted advertising to visitors to our websites. https://privacy.microsoft.com/fr-ca/privacystatement
Facebook Custom Audiences We use Facebook Custom Audiences to deliver targeted advertising to visitors to our websites. https://www.facebook.com/policy.php
Google We use Google Ads to provide targeted advertising to visitors to our websites. https://policies.google.com/privacy
Intercom We use Intercom to manage our relationships with our customers. https://www.intercom.com/terms-and-policies#privacy

Social media and content :

Third parties Description Privacy Policy
Disqus We use Disqus to offer the possibility of commenting on publications on our websites. https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook Connect We use Facebook Connect to enable visitors to our website to interact with and share our content through the Facebook social media platform. https://www.facebook.com/policy.php
Gravatar We use Gravatar to allow visitors to our websites to create avatars. https://en.gravatar.com/site/privacy
Youtube We use Youtube to display video content. https://policies.google.com/privacy?hl=en-US
Wistia We use Wistia to display video content. https://wistia.com/privacy
AddThis We use AddThis to display our social network sharing capabilities on our website. https://www.addthis.com/privacy/terms-of-service
Twitter We use Twitter to enable visitors to our website to interact with and share our content on the Twitter social media platform. https://twitter.com/en/privacy
Kajabi We use Kajabi to present the Oberlo 101 course documents. https://kajabi.com/policies/privacy

How long will cookies remain on my computer or mobile device?

The length of time a cookie remains on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Session cookies remain in place until you stop browsing, while persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they were downloaded to your device. Please see the section on cookie control below to find out how to delete them before they expire.

How can I control cookies?

You can control and manage cookies in various ways. Keep in mind that deleting or blocking cookies may have negative effects on your user experience and may prevent you from fully accessing certain parts of our website.

Most browsers automatically accept cookies, but you can choose whether or not to accept them through your browser's controls, often found in your browser's "Tools" or "Preferences" menu. To find out more about modifying your browser settings, or to find out how to block, manage or filter cookies, consult your browser's help file or sites such as: www.allaboutcookies.org.

Most of the third-party advertising and other tracking services listed above offer you the ability to opt-out of their tracking systems. To learn more about the information they collect and how to exercise this option, see the privacy policy links listed above.