Last updated: April 20, 2021

Cookie Policy

What are cookies?

A cookie is a small amount of information that’s downloaded to your computer or device when you visit certain websites. We use a number of different cookies on the Shopify website, including strictly necessary, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor. Read more about cookies (and other similar tracking technologies) and how we use the data collected through these technologies, in our Privacy Policy.

What cookies do we use and why?

Some cookies are necessary to allow you to browse our website, use its features, and access secure areas. The use of these cookies is essential for the website to work. For example, we use user-input cookies for the duration of a session to keep track of a user’s input when filling in forms that span several pages.

We also use functional cookies to remember choices you’ve made or information you’ve provided, such as your username, language, or the region you are in. This allows us to tailor your website experience specifically to your preferences. For example, authentication cookies are functional cookies that are used for the duration of a session (or persistent, if you agree to the “remember me” function) to allow users to authenticate themselves on subsequent visits or to gain access to authorized content across pages. The functional cookies we use include:

  • User-centric security cookies to detect authentication abuses for a limited
  • persistent duration, like repeated failed login attempts. These cookies are
  • set for the specific task of increasing thesecurity of the service.
  • Multimedia content player session cookies (flash cookies) are used
  • for the duration of a session to store technical data needed to play
  • back video or audio content (e.g. image quality, network link speed,
  • and buffering parameters).
  • Load balancing session cookies are used for the duration of the
  • session to identify the same server in the pool in order for the
  • load balancer to redirect user requests appropriately.
  • User interface customization persistent cookies are used to store a
  • user’s preference regarding a service across web pages.

Shopify is dedicated to user experience and we use many tools to help us improve our website and our commerce platform. To this end, we use reporting and analytics cookies to collect information about how you use our website or our merchants’ storefronts, and how often. These cookies only gather information for statistical purposes and only use pseudonymous cookie identifiers that do not directly identify you. The performance cookies we use include:

  • First party analytics cookies - We use these cookies to estimate the
  • number of unique visitors, to improve our websites and our
  • merchants’ websites, and to detect the most searched for words in
  • search engines that lead to a webpage. These cookies are not used to
  • target you with online marketing. We use these cookies to learn how
  • our websites and our merchants’ websites are performing and make
  • relevant improvements to improve your browsing experience.
  • Third party analytics cookies - We also use Google Analytics and
  • other third-party analytics providers listed below to help measure
  • how users interact with our website content. These cookies
  • “remember” what our users have done on previous pages and how
  • they’ve interacted with the website. For more information on Google
  • Analytics, visit Google’s information
  • page.
  • For instructions on how to opt out of Google Analytics, see below.

Advertising cookies are used on our website to tailor marketing to you and your interests and provide you with a more personalized service in the future. These cookies remember that you visited our website and we may share this information with third-parties, such as advertisers. Although these cookies can track your device’s visits to our website and other sites, they typically cannot personally identify you. Without these cookies, the advertisements that you see may be less relevant and interesting to you. Read more about how companies use cookies to conduct targeted or retargeted advertising here. We do not set advertising cookies through our merchants’ storefronts ourselves, though merchants may choose to do so independently.

Finally, Social and Content cookies are placed by many social media plugins (for example the Facebook ’like’ button), and other tools meant to provide or improve the content on a website (for example services that allow the playing of video files, or that create comments sections). We integrate these modules into our platform to improve the experience of browsing and interacting with our websites. Please note that some of these third party services place cookies that are also used for things like behavioural advertising, analytics, and/or market research.

Merchant storefronts

When merchants use our platform to power their online stores, we place the following cookies for visitors of their stores:

Cookies Necessary for the Functioning of the Store:

NameFunctionDuration
_abUsed in connection with access to admin.2y
_customer_account_shop_sessionsUsed in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts30d
_secure_account_session_idUsed to track a user's session for new customer accounts30d
_secure_session_idUsed to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.24h
_shopify_countryFor shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.session
_shopify_mUsed for managing customer privacy settings.1y
_shopify_tmUsed for managing customer privacy settings.30min
_shopify_twUsed for managing customer privacy settings.2w
_storefront_uUsed to facilitate updating customer account information.1min
_tracking_consentUsed to store a user's preferences if a merchant has set up privacy rules in the visitor's region.1y
_cmp_aUsed for managing customer privacy settings.1d
cUsed in connection with checkout.1y
cartUsed in connection with shopping cart.2w
cart_currencySet after a checkout is completed to ensure that new carts are in the same currency as the last checkout.2w
cart_sigA hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.2w
cart_tsUsed in connection with checkout.2w
cart_verUsed in connection with shopping cart.2w
checkoutUsed in connection with checkout.4w
checkout_tokenUsed in connection with checkout.1y
customer_account_localeUsed in connection with new customer accounts1y
dynamic_checkout_shown_on_cartUsed in connection with checkout.30min
hide_shopify_pay_for_checkoutUsed in connection with checkout.session
keep_aliveUsed in connection with buyer localization.2w
master_device_idUsed in connection with merchant login.2y
previous_stepUsed in connection with checkout.1y
discount_codeUsed in connection with checkout.session
remember_meUsed in connection with checkout.1y
secure_customer_sigUsed to identify a user after they sign into a shop as a customer so they do not need to log in again.1y
shopify_payUsed in connection with checkout.1y
shopify_pay_redirectUsed in connection with checkout.1 hour, 3w or 1y depending on value
shop_pay_acceleratedUsed in connection with checkout.1y
storefront_digestStores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.2y
tracked_start_checkoutUsed in connection with checkout.1y
checkout_session_lookupUsed in connection with checkout.3w
checkout_prefillUsed in connection with checkout.5m
checkout_queue_tokenUsed in connection with checkout.1y
checkout_queue_checkout_tokenUsed in connection with checkout.1y
checkout_worker_sessionUsed in connection with checkout.3d
checkout_session_tokenUsed in connection with checkout.3w
checkout_session_token_<<token>>Used in connection with checkout.3w
cookietestUsed to ensure our systems are working correctly1m
orderUsed in connection with order status page.3w
identity-stateUsed in connection with customer authentication24h
identity-state-<<token>>Used in connection with customer authentication24h
identity_customer_account_numberUsed in connection with customer authentication12w
card_update_verification_idUsed in connection with checkout.20m
customer_account_new_loginUsed in connection with customer authentication20m
customer_account_previewUsed in connection with customer authentication7d
customer_payment_methodUsed in connection with checkout.1h
customer_shop_pay_agreementUsed in connection with checkout.20m
pay_update_intent_idUsed in connection with checkout.20m
localizationUsed in connection with checkout.2w
profile_preview_tokenUsed in connection with checkout.5m
login_with_shop_finalizeUsed in connection with customer authentication5m
preview_themeUsed in connection with the theme editorsession
shopify-editor-unconfirmed-settingsUsed in connection with the theme editor16h
wpm-test-cookieUsed to ensure our systems are working correctly.session

Reporting and Analytics

NameDescriptionDuration
_landing_pageTrack landing pages.2w
_orig_referrerTrack landing pages.2w
_sShopify analytics.30min
_shopify_dShopify analytics.session
_shopify_fsShopify analytics.30min
_shopify_sShopify analytics.30min
_shopify_sa_pShopify analytics relating to marketing & referrals.30min
_shopify_sa_tShopify analytics relating to marketing & referrals.30min
_shopify_yShopify analytics.1y
_yShopify analytics.1y
_shopify_gaShopify and Google Analytics.session
customer_auth_providerShopify analytics.session
customer_auth_session_created_atShopify analytics.session
shop_analyticsShopify analytics.1y
unique_interaction_idShopify analytics.10min

Shopify’s websites

When visitors load Shopify’s websites, we generally place the following Shopify cookies:

Cookies Necessary for the Functioning of the Sites

NameDescriptionDuration
_Brochure_sessionUsed in connection with browsing through site.-
checkoutUsed in connection with Pay checkout on shop.app.3w
signed_inUsed in connection with Shop login.1y
userUsed in connection with Shop login.1y

Reporting and Analytics

NameFunction
_landing_pageTracks landing pages.
_orig_referrerTracks landing pages.
_sShopify analytics.
_session_idShopify analytics
_shopify_sShopify analytics.
_shopify_sa_tShopify analytics relating to marketing & referrals.
_shopify_uniqShopify analytics.
_shopify_yShopify analytics.
_yShopify analytics.
*_assignmentShopify analytics
ab_test_*Shopify analytics.
cart_sigShopify analytics.
ki_rShopify analytics.
ki_tShopify analytics.

Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:

Cookies Necessary for the Functioning of the Sites

Third PartyDescriptionPrivacy Policy
CloudflareShopify uses Cloudflare Network as a Service for edge routing.https://www.cloudflare.com/privacypolicy/

Reporting & Analytics

Third PartyDescriptionPrivacy Policy
Alexa MetricsWe use Alexa Metrics to help measure how users interact with our websites.https://www.alexa.com/help/privacy
BizibleWe use Bizible to help measure how users interact with our websites.https://documents.marketo.com/legal/privacy/
ChartbeatWe use Chartbeat to help measure how users interact with our websites.https://chartbeat.com/privacy/
Crazy EggWe use Crazy Egg to help measure how users interact with our websites.https://www.crazyegg.com/privacy
Datadog RUMWe use Datadog RUM to help measure how users interact with our websites.https://www.datadoghq.com/legal/privacy/
DC AnalyticsWe use DC Analytics to help measure how users interact with our websites.https://dcanalytics.dcmn.com/privacy-policy
Facebook PixelWe use Facebook Pixel to help measure how users interact with our websites.https://www.facebook.com/privacy/explanation
FullstoryWe use Fullstory to help measure how users interact with our websites.https://www.fullstory.com/legal/privacy/
Google AnalyticsWe use Google Analytics to help measure how users interact with our websites.https://policies.google.com/privacy
Google Tag ManagerWe use Google Tag Manager to help manage analytics vendors.https://policies.google.com/privacy
HotjarWe use Hotjar to help measure how users interact with our websites.https://www.hotjar.com/legal/policies/privacy
iSpotWe use iSpot to help measure how users interact with our websites.https://www.ispot.tv/terms-of-service
KissInsightsWe use KissInsights to help measure how users interact with our websites.https://signin.kissmetrics.com/privacy/
LinkedIn Insight TagWe use LinkedIn Insight Tag to help measure how users interact with our websites.https://www.linkedin.com/legal/privacy-policy
New RelicWe use New Relic to help measure how users interact with our websites.https://newrelic.com/termsandconditions/privacy
OptimizelyWe use Optimizely to help us test improvements or changes to our websites.https://www.optimizely.com/privacy/
Pinterest AnalyticsWe use Pinterest Analytics to help measure how users interact with our websites.https://policy.pinterest.com/privacy-policy
SegmentWe use Segment to help measure how users interact with our websites.https://segment.com/legal/privacy/
SnapchatWe use Snapchat to help measure how users interact with our websites.https://snap.com/privacy/privacy-policy
TaboolaWe use Taboola to help measure how users interact with our websites.https://www.taboola.com/policies/privacy-policy
TealiumWe use Tealium to help manage analytics vendors.https://tealium.com/privacy/
TikTokWe use TikTok to help measure how users interact with our websites.https://www.tiktok.com/legal/privacy-policy?lang=en
TwitterWe use Twitter to help measure how users interact with our websites.https://twitter.com/en/privacy
Yelp Audience PlatformWe use Yelp to help measure how users interact with our websites.https://terms.yelp.com/privacy/en_us/20200101_en_us/

Advertising

Third PartyDescriptionPrivacy Policy
Microsoft AdvertisingWe use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.https://privacy.microsoft.com/en-ca/privacystatement
DriftWe use Drift to help us with conversational marketing to customers while they visit our websites.https://www.drift.com/privacy-policy/
Facebook Custom AudiencesWe use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.https://www.facebook.com/policy.php
GoogleWe use Google Ads to deliver targeted advertisements to individuals who visit our websites.https://policies.google.com/privacy
HubspotWe use Hubspot to manage our relationships with our customers.https://legal.hubspot.com/privacy-policy
IntercomWe use Intercom to manage our relationships with our customers.https://www.intercom.com/terms-and-policies#privacy
MarketoWe use Marketo to manage our relationships with our customers.https://documents.marketo.com/legal/privacy/
OutbrainWe use Outbrain to deliver targeted advertisements to individuals who visit our websites.https://www.outbrain.com/privacy
QuoraWe use Quora to deliver targeted advertisements to individuals who visit our websites.https://www.quora.com/about/privacy
RedditWe use Reddit Ads to deliver targeted advertisements to individuals who visit our websites.https://www.reddit.com/help/privacypolicy
SourceKnowledgeWe use SourceKnowledge to deliver targeted advertisements to individuals who visit our websites.http://www.sourceknowledge.com/privacy
Yahoo Japan AdsWe use Yahoo Japan Ads to deliver targeted advertisements to individuals who visit our websites.https://about.yahoo.co.jp/common/terms/

Social Media & Content

Third PartyDescriptionPrivacy Policy
DisqusWe use Disqus to provide commenting capabilities on posts on our websites.https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook ConnectWe use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.https://www.facebook.com/policy.php
GravatarWe use Gravatar to allow visitors to our websites to create avatars.https://en.gravatar.com/site/privacy
TwitterWe use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.https://twitter.com/en/privacy
WistiaWe use Wistia to display video content.https://wistia.com/privacy

Oberlo websites

When visitors load Oberlo’s websites, we generally place the following Oberlo cookies:

Cookies Necessary for the Functioning of the Sites

NameFunction
oberlo_sessionUsed in connection with navigation through an app.
shippingCountryUsed in connection with navigation through an app. For product exploration, calculating shipping price.
user_localeUsed in connection with customer login. For storing language chosen in log-in page.
hideFufilmentBannerUsed in connection with navigation through an app.
hideBulkOrderingFeatureBannerUsed in connection with navigation through an app.
hideChangePlanBannerBulkFulfillmentUsed in connection with navigation through an app.
hideBanner101Used in connection with navigation through an app.
alert_setup_notifications_1Used in connection with navigation through an app.

Reporting and Analytics

NameFunction
conversionOberlo analytics.
conversion_leaveOberlo analytics.
trackExtensionCheckOberlo analytics.
shopify_refAnalytics relating to marketing & referrals. Referrals tracking.

Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:

Reporting & Analytics:

Third PartyDescriptionPrivacy Policy
LogglyWe use Loggly to help us troubleshoot and fix issues with our websites.https://www.loggly.com/about/privacy-policy/
SleeknoteWe use Sleeknote to measure how people interact with our website.https://sleeknote.com/privacy-policy
InspectletWe use Inspectlet to help measure how users interact with our websites.https://www.inspectlet.com/terms-of-service
Google AnalyticsWe use Google Analytics to help measure how users interact with our websites.https://policies.google.com/privacy
FullstoryWe use Fullstory to help measure how users interact with our websites.https://www.fullstory.com/legal/privacy/
KissInsightsWe use KissInsights to help measure how users interact with our websites.https://signin.kissmetrics.com/privacy/
OptimizelyWe use Optimizely to help us test improvements or changes to our websites.https://www.optimizely.com/privacy/
LinkedIn Insight TagWe use LinkedIn Insight Tag to help measure how users interact with our websites.https://www.linkedin.com/legal/privacy-policy
TapfiliateWe use Tapfiliate to help measure how users interact with our websites.https://tapfiliate.com/privacy/privacy-policy/

Advertising:

Third PartyDescriptionPrivacy Policy
Microsoft AdvertisingWe use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.https://privacy.microsoft.com/en-ca/privacystatement
Facebook Custom AudiencesWe use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.https://www.facebook.com/policy.php
GoogleWe use Google Ads to deliver targeted advertisements to individuals who visit our websites.https://policies.google.com/privacy
IntercomWe use Intercom to manage our relationships with our customers.https://www.intercom.com/terms-and-policies#privacy

Social Media & Content:

Third PartyDescriptionPrivacy Policy
DisqusWe use Disqus to provide commenting capabilities on posts on our websites.https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook ConnectWe use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.https://www.facebook.com/policy.php
GravatarWe use Gravatar to allow visitors to our websites to create avatars.https://en.gravatar.com/site/privacy
YoutubeWe use Youtube to display video content.https://policies.google.com/privacy?hl=en-US
WistiaWe use Wistia to display video content.https://wistia.com/privacy
AddThisWe use AddThis to display social share capabilities on the website.https://www.addthis.com/privacy/terms-of-service
TwitterWe use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.https://twitter.com/en/privacy
KajabiWe use Kajabi to serve Oberlo 101 course material.https://kajabi.com/policies/privacy

How long will cookies remain on my computer or mobile device?

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device. See the section below on how to control cookies for more information on removing them before they expire.

How to control cookies?

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Many of the third party advertising and other tracking services listed above offer you the opportunity to opt out of their tracking systems. You can read more about the information they collect and how to opt out through the privacy policy links listed above.