Cookie policy
This document is intended to explain the types of cookies and other tracking technologies that Shopify may place on your device when you visit our websites or the online store of a merchant who uses our platform for their website.
What are cookies?
A cookie is a small amount of information that is downloaded to your computer or device when you visit certain websites. We use a number of different cookies on the Shopify website: strictly necessary cookies, performance cookies, advertising cookies, social media cookies, content cookies, etc. Cookies improve your browsing experience by enabling the website to remember your actions and preferences (such as username and region selection). This means you don't have to re-enter this information each time you return to the site or navigate from one page to another. Cookies also provide information about how visitors use the website, for example whether this is their first visit or whether they are frequent visitors. To find out more about cookies (and similar tracking technologies) and our use of data collected through these technologies, please see our Privacy Policy.
What cookies do we use and why?
Some cookies are necessary to enable you to browse our website, to use its features and to access its secure areas. The use of these cookies is essential to the operation of the website. For example, we use per-session user input cookies to track user input when completing forms on multiple pages.
We also use functional cookies to remember choices you've made or information you've provided, such as your username, language or location. This allows us to personalize your experience on our website according to your preferences. For example, authentication cookies are functional cookies used for the duration of a session (or persistently, if you agree to use the "Remember me" function) to enable users to identify themselves on subsequent visits or to access authorized content on multiple pages. Here are some of the functional cookies we use:
-
User-centric security cookies are used to detect authentication abuse for a limited continuous period, such as unsuccessful login attempts. These cookies are specifically configured to improve service security.
-
Multimedia content playback cookies (flash cookies) are used for the duration of a session to record the technical data required to play video or audio content (e.g. image quality, network link speed and buffer memory settings).
-
Load balancing cookies are used during a session to identify the same server in the pool, enabling the load balancer to redirect user requests appropriately.
-
Persistent user interface personalization cookies are used to record a user's preference for a service on several web pages.
User experience is fundamental to Shopify and we employ many tools to improve our website and commerce platform. To this end, we use reporting and data analysis cookies to collect information about how and how often you use our website or our merchants' online stores. These cookies collect information for statistical purposes only and use only pseudonyms as cookie identifiers, which do not identify you personally. Here are some of the performance cookies we use:
-
Proprietary data analysis cookies: we use these cookies to estimate the number of unique visitors, to improve our websites and those of our merchants, and to detect the most searched-for words in search engines leading to a web page. These cookies are not used to target you with online marketing. We use these cookies to learn more about the performance of our websites and those of our merchants, and to make relevant improvements to your browsing experience.
-
Third-party data analysis cookies - We also use Google Analytics and other third-party data analysis providers to help us evaluate how users interact with the content of our website. These cookies "remember" our users' actions on previous pages and how they interact with the website. To find out more about Google Analytics, visit the Google information page. See below to find out how to opt out of Google Analytics.
Advertising cookies are used on our website to personalize marketing content according to you and your interests, and then to offer you a more personalized service. These cookies remember your visit to our website and we may share this information with third parties, such as advertisers. Although these cookies can track visits from your device to our website and other sites, they generally cannot identify you personally. Without these cookies, the advertisements you see would be less relevant and interesting to you. To find out more about how companies use cookies to run targeted or retargeted advertising campaigns, click here. We do not personally set advertising cookies via our merchants' online stores, but they are free to make this choice themselves.
Finally, social media and content cookies are set by many social media plug-ins (e.g. Facebook's "Like" button), as well as by other tools used to provide or enrich website content (e.g. services enabling the playback of video files or the creation of comment sections). We integrate these modules into our platform to enhance the browsing experience and interactions with our websites. Please note that some of these third-party services set cookies which are also used for functions such as behavioral advertising, data analysis and/or market research.
Merchant online stores
When merchants use our platform to power their online stores, we set the following cookies for visitors to their stores:
Cookies necessary for the operation of the store:
Name | Function | Duration |
---|---|---|
_ab | Use linked to administrator interface access. | 2 years |
_customer_account_shop_sessions | Use with _secure_account_session_id cookie to track user sessions for new customer accounts | 30d |
_secure_account_session_id | Use to track user sessions for new customer accounts | 30d |
_secure_session_id | Used for browsing in an online store. | 24 h |
_shopify_country | Payment-related use. | session |
_shopify_m | Used to manage customer privacy settings. | 1 year |
_shopify_tm | Used to manage customer privacy settings. | 30 min. |
_shopify_tw | Used to manage customer privacy settings. | 2 wks |
_storefront_u | Used to update customer account information. | 1 min |
tracking_consent | Tracking preferences. | 1 year |
_cmp_a | Used to manage customer privacy settings. | 1 j |
c | Payment-related use. | 1 year |
cart | Shopping cart usage. | 2 wks |
cart_currency | Shopping cart usage. | 2 wks |
cart_sig | Payment-related use. | 2 wks |
cart_ts | Payment-related use. | 2 wks |
cart_ver | Shopping cart usage. | 2 wks |
checkout | Payment-related use. | 4 wks |
checkout_token | Payment-related use. | 1 year |
customer_account_locale | Use for new customer accounts | 1 year |
dynamic_checkout_shown_on_cart | Payment-related use. | 30 min. |
hide_shopify_pay_for_checkout | Payment-related use. | session |
keep_alive | Use linked to buyer location. | 2 wks |
master_device_id | Use linked to merchant IDs. | 2 years |
previous_step | Payment-related use. | 1 year |
discount_code | Payment-related use. | session |
remember_me | Payment-related use. | 1 year |
secure_customer_sig | Use linked to customer IDs. | 1 year |
shopify_pay | Payment-related use. | 1 year |
shopify_pay_redirect | Payment-related use. | 30 minutes, 3 weeks or 1 year depending on value |
shop_pay_accelerated | Payment-related use. | 1 year |
source_name | Used with mobile applications to personalize payment if the store is viewed from a compatible mobile application. | session |
storefront_digest | Use linked to customer IDs. | 2 years |
tracked_start_checkout | Payment-related use. | 1 year |
checkout_session_lookup | Payment-related use. | 3 wks |
checkout_prefill | Payment-related use. | 5 months |
checkout_queue_token | Payment-related use. | 1 year |
checkout_queue_checkout_token | Payment-related use. | 1 year |
checkout_worker_session | Payment-related use. | 3d |
checkout_session_token | Payment-related use. | 3 wks |
checkout_session_token_<<token>> | Payment-related use. | 3 wks |
cookietest | Use to ensure the proper functioning of our systems. | 1m |
order | Use linked to the order status page. | 3 wks |
identity-state | Use for customer authentication | 24 h |
identity-state-<<token>> | Use for customer authentication | 24 h |
identity_customer_account_number | Use for customer authentication | 12 wks |
card_update_verification_id | Payment-related use. | 20 months |
customer_account_new_login | Use for customer authentication | 20 months |
customer_account_preview | Use for customer authentication | 7 days |
customer_payment_method | Payment-related use. | 1 h |
customer_shop_pay_agreement | Payment-related use. | 20 months |
pay_update_intent_id | Payment-related use. | 20 months |
localization | Payment-related use. | 2 wks |
profile_preview_token | Payment-related use. | 5 months |
login_with_shop_finalize | Use for customer authentication | 5 m |
preview_theme | Theme editor usage | session |
shopify-editor-unconfirmed-settings | Theme editor usage | 16 h |
wpm-test-cookie | Use to ensure the proper functioning of our systems. | session |
Reports and data analysis
Name | Function | Duration |
---|---|---|
_landing_page | Landing page tracking. | 2 wks |
_orig_referrer | Landing page tracking. | 2 wks |
_s | Analysis of data provided by Shopify. | 30 min. |
_shopify_d | Analysis of data provided by Shopify. | session |
_shopify_fs | Analysis of data provided by Shopify. | 30 min. |
_shopify_s | Analysis of data provided by Shopify. | 30 min. |
_shopify_sa_p | Analysis of marketing and sponsorship data provided by Shopify. | 30 min. |
_shopify_sa_t | Analysis of marketing and sponsorship data provided by Shopify. | 30 min. |
_shopify_y | Analysis of data provided by Shopify. | 1 year |
_y | Analysis of data provided by Shopify. | 1 year |
_shopify_ga | Shopify and Google Analytics. | session |
customer_auth_provider | Analysis of data provided by Shopify. | session |
customer_auth_session_created_at | Analysis of data provided by Shopify. | session |
unique_interaction_id | Analysis of data provided by Shopify. | 10 min. |
Shopify websites
When visitors load Shopify websites, we set the following Shopify cookies:
Cookies required for site operation
Name | Function | Duration |
---|---|---|
_Brochure_session | Use related to site navigation. | - |
checkout | Use in conjunction with Pay on shop.app. | 3 wks |
signed_in | Use of Shop identifiers. | 1 year |
user | Use of Shop identifiers. | 1 year |
Reports and data analysis
Name | Function |
---|---|
_landing_page | Landing page tracking. |
_orig_referrer | Landing page tracking. |
_s | Analysis of data provided by Shopify. |
session_id | Analysis of Shopify data |
_shopify_s | Analysis of data provided by Shopify. |
_shopify_sa_t | Analysis of marketing and sponsorship data provided by Shopify. |
_shopify_uniq | Analysis of data provided by Shopify. |
_shopify_y | Analysis of data provided by Shopify. |
_y | Analysis of data provided by Shopify. |
*_assignment | Analysis of data provided by Shopify. |
ab_test_* | Analysis of data provided by Shopify. |
cart_sig | Analysis of data provided by Shopify. |
ki_r | Analysis of data provided by Shopify. |
ki_t | Analysis of data provided by Shopify. |
In addition, we use pixels and beacons from the following third-party suppliers, who may in turn place cookies:
Cookies required for site operation
Third parties | Description | Privacy Policy |
---|---|---|
Cloudflare | Shopify uses the Cloudflare Network service for state-of-the-art routing. | https://www.cloudflare.com/privacypolicy/ |
Reporting and data analysis :
Third parties | Description | Privacy Policy |
---|---|---|
Alexa Metrics | We use Alexa Metrics to measure user interaction with our websites. | https://www.alexa.com/help/privacy |
Bizible | We use Bizible to evaluate user interaction with our websites. | https://documents.marketo.com/legal/privacy/ |
Chartbeat | We use Chartbeat to measure user interaction with our websites. | https://chartbeat.com/privacy/ |
Crazy Egg | We use Crazy Egg to measure how users interact with our websites. | https://www.crazyegg.com/privacy |
Datadog RUM | We use Datadog RUM to evaluate user interaction with our websites. | https://www.datadoghq.com/legal/privacy/ |
DC Analytics | We use DC Analytics to evaluate user interaction with our websites. | https://dcanalytics.dcmn.com/privacy-policy |
Facebook pixel | We use the Facebook pixel to measure user interaction with our websites. | https://www.facebook.com/privacy/explanation |
Fullstory | We use Fullstory to evaluate user interaction with our websites. | https://www.fullstory.com/legal/privacy/ |
Google Analytics | We use Google Analytics to measure user interaction with our websites. | https://policies.google.com/privacy |
Google Tag Manager | We use Google Beacon Manager to manage analytics providers. | https://policies.google.com/privacy |
Hotjar | We use Hotjar to measure user interaction with our websites. | https://www.hotjar.com/legal/policies/privacy |
iSpot | We use iSpot to measure user interaction with our websites. | https://www.ispot.tv/terms-of-service |
KissInsights | We use KissInsights to measure user interaction with our websites. | https://signin.kissmetrics.com/privacy/ |
LinkedIn information tag | We use the LinkedIn information beacon to evaluate user interaction with our websites. | https://www.linkedin.com/legal/privacy-policy |
New Relic | We use New Relic to evaluate user interaction with our websites. | https://newrelic.com/termsandconditions/privacy |
Optimizely | We use Optimizely to test improvements or changes to our websites. | https://www.optimizely.com/privacy/ |
Pinterest analysis | We use Pinterest Analytics to evaluate user interaction with our websites. | https://policy.pinterest.com/privacy-policy |
Segment | We use Segment to measure user interaction with our websites. | https://segment.com/legal/privacy/ |
Snapchat | We use Snapchat to measure user interaction with our websites. | https://snap.com/privacy/privacy-policy |
Taboola | We use Taboola to measure user interaction with our websites. | https://www.taboola.com/policies/privacy-policy |
Tealium | We use Tealium to manage analytics providers. | https://tealium.com/privacy/ |
TikTok | We use TikTok to evaluate user interaction with our websites. | https://www.tiktok.com/legal/privacy-policy?lang=fr |
We use Twitter to measure user interaction with our websites. | https://twitter.com/en/privacy | |
Yelp audience platform | We use Yelp to evaluate user interaction with our websites. | https://terms.yelp.com/privacy/en_us/20200101_en_us/ |
Advertising:
Third parties | Description | Privacy Policy |
---|---|---|
Microsoft Advertising | We use Microsoft Advertising to deliver targeted advertising to visitors to our websites. | https://privacy.microsoft.com/fr-ca/privacystatement |
Drift | We use Drift for our conversational marketing to customers while they are visiting our websites. | https://www.drift.com/privacy-policy/ |
Facebook Custom Audiences | We use Facebook Custom Audiences to deliver targeted advertising to visitors to our websites. | https://www.facebook.com/policy.php |
We use Google Ads to provide targeted advertising to visitors to our websites. | https://policies.google.com/privacy | |
Hubspot | We use Hubspot to manage our customer relationships. | https://legal.hubspot.com/privacy-policy |
Intercom | We use Intercom to manage our relationships with our customers. | https://www.intercom.com/terms-and-policies#privacy |
Marketo | We use Marketo to manage our relationships with our customers. | https://documents.marketo.com/legal/privacy/ |
Outbrain | We use Outbrain to deliver targeted advertising to visitors to our websites. | https://www.outbrain.com/privacy/fr |
Quora | We use Quora to provide targeted advertising to visitors to our websites. | https://www.quora.com/about/privacy |
We use Reddit Ads to provide targeted advertising to visitors to our websites. | https://www.reddit.com/help/privacypolicy | |
SourceKnowledge | We use SourceKnowledge to provide targeted advertising to visitors to our websites. | http://www.sourceknowledge.com/privacy |
Yahoo Japan Ads | We use Yahoo Japan Ads to deliver targeted advertising to visitors to our websites. | https://about.yahoo.co.jp/common/terms/ |
Social media and content :
Third parties | Description | Privacy Policy |
---|---|---|
Disqus | We use Disqus to offer the possibility of commenting on publications on our websites. | https://help.disqus.com/terms-and-policies/disqus-privacy-policy |
Facebook Connect | We use Facebook Connect to enable visitors to our website to interact with and share our content through the Facebook social media platform. | https://www.facebook.com/policy.php |
Gravatar | We use Gravatar to allow visitors to our websites to create avatars. | https://en.gravatar.com/site/privacy |
We use Twitter to enable visitors to our website to interact with and share our content on the Twitter social media platform. | https://twitter.com/en/privacy | |
Wistia | We use Wistia to display video content. | https://wistia.com/privacy |
Oberlo websites
When visitors load Oberlo websites, we set the following Oberlo cookies:
Cookies required for site operation
Name | Function |
---|---|
oberlo_session | Used in connection with navigation via an application. |
shippingCountry | Used in connection with navigation through an application. For product exploration, shipping rate calculation. |
user_locale | Used in connection with customer identifiers. To store the language selected on the login page. |
hideFufilmentBanner | Used in connection with navigation via an application. |
hideBulkOrderingFeatureBanner | Used in connection with navigation via an application. |
hideChangePlanBannerBulkFulfillment | Used in connection with navigation via an application. |
hideBanner101 | Used in connection with navigation via an application. |
alert_setup_notifications_1 | Used in connection with navigation via an application. |
Reports and data analysis
Name | Function |
---|---|
conversion | Oberlo data analysis. |
conversion_leave | Oberlo data analysis. |
trackExtensionCheck | Oberlo data analysis. |
shopify_ref | Marketing and sponsorship data analysis. Sponsorship follow-up. |
In addition, we use pixels and beacons from the following third-party suppliers, who may in turn place cookies:
Reporting and data analysis :
Third parties | Description | Privacy Policy |
---|---|---|
Loggly | We use Loggly to resolve problems with our websites. | https://www.loggly.com/about/privacy-policy/ |
Sleeknote | We use Sleeknote to measure user interaction with our website. | https://sleeknote.com/privacy-policy |
Inspectlet | We use Inspectlet to evaluate user interaction with our websites. | https://www.inspectlet.com/terms-of-service |
Google Analytics | We use Google Analytics to measure user interaction with our websites. | https://policies.google.com/privacy |
Fullstory | We use Fullstory to evaluate user interaction with our websites. | https://www.fullstory.com/legal/privacy/ |
KissInsights | We use KissInsights to measure user interaction with our websites. | https://signin.kissmetrics.com/privacy/ |
Optimizely | We use Optimizely to test improvements or changes to our websites. | https://www.optimizely.com/privacy/ |
LinkedIn information tag | We use the LinkedIn information beacon to evaluate user interaction with our websites. | https://www.linkedin.com/legal/privacy-policy |
Tapfiliate | We use Tapfiliate to evaluate user interaction with our websites. | https://tapfiliate.com/privacy/privacy-policy/ |
Advertising:
Third parties | Description | Privacy Policy |
---|---|---|
Microsoft Advertising | We use Microsoft Advertising to deliver targeted advertising to visitors to our websites. | https://privacy.microsoft.com/fr-ca/privacystatement |
Facebook Custom Audiences | We use Facebook Custom Audiences to deliver targeted advertising to visitors to our websites. | https://www.facebook.com/policy.php |
We use Google Ads to provide targeted advertising to visitors to our websites. | https://policies.google.com/privacy | |
Intercom | We use Intercom to manage our relationships with our customers. | https://www.intercom.com/terms-and-policies#privacy |
Social media and content :
Third parties | Description | Privacy Policy |
---|---|---|
Disqus | We use Disqus to offer the possibility of commenting on publications on our websites. | https://help.disqus.com/terms-and-policies/disqus-privacy-policy |
Facebook Connect | We use Facebook Connect to enable visitors to our website to interact with and share our content through the Facebook social media platform. | https://www.facebook.com/policy.php |
Gravatar | We use Gravatar to allow visitors to our websites to create avatars. | https://en.gravatar.com/site/privacy |
Youtube | We use Youtube to display video content. | https://policies.google.com/privacy?hl=en-US |
Wistia | We use Wistia to display video content. | https://wistia.com/privacy |
AddThis | We use AddThis to display our social network sharing capabilities on our website. | https://www.addthis.com/privacy/terms-of-service |
We use Twitter to enable visitors to our website to interact with and share our content on the Twitter social media platform. | https://twitter.com/en/privacy | |
Kajabi | We use Kajabi to present the Oberlo 101 course documents. | https://kajabi.com/policies/privacy |
How long will cookies remain on my computer or mobile device?
The length of time a cookie remains on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Session cookies remain in place until you stop browsing, while persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they were downloaded to your device. Please see the section on cookie control below to find out how to delete them before they expire.
How can I control cookies?
You can control and manage cookies in various ways. Keep in mind that deleting or blocking cookies may have negative effects on your user experience and may prevent you from fully accessing certain parts of our website.
Most browsers automatically accept cookies, but you can choose whether or not to accept them through your browser's controls, often found in your browser's "Tools" or "Preferences" menu. To find out more about modifying your browser settings, or to find out how to block, manage or filter cookies, consult your browser's help file or sites such as: www.allaboutcookies.org.
Most of the third-party advertising and other tracking services listed above offer you the ability to opt-out of their tracking systems. To learn more about the information they collect and how to exercise this option, see the privacy policy links listed above.