Cookie Policy
What are cookies?
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer
if you agree. Cookies contain information that is transferred to your computer's hard drive.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a
good experience when you browse our website and also allows us to improve our site.
Where we use cookies that contain personal data, terms by which we do are set out in our
Privacy Notice.
What cookies may we use?
We may use the following cookies:
Strictly necessary cookies: These are cookies that are essential for certain basic
functionalities of our website. These are cookies that are required for the operation of our website. These
essential cookies are always enabled because our website won’t work properly without them.
Functionality cookies: These are used to recognise you when you return to our website. This
enables us to personalise our content for you, greet you by name and remember your preferences (for example, your
choice of language or region).
Analytical/performance cookies: These allow us to recognise and count the number of visitors and
to see how visitors move around our website when they are using it. This helps us to improve the way our website
works, for example, by ensuring that users are finding what they are looking for easily.
Targeting cookies: These cookies record your visit to our website, the pages you have visited and
the links you have followed. We will use this information to make our website and the advertising displayed on it
more relevant to your interests. We may also share this information with third parties for this purpose.
We include below a list of the cookies we currently use on our website which may be updated from time to time:
Cloudflare:
We use Cloudflare embedded player. The Cloudflare cookies we use are as below:
- cf_bm: The cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently
in private beta. As part of our bot management service, this cookie helps manage incoming traffic that matches
criteria associated with bots. Duration: 30 minutes.
- cfuvid: The Rate Limiting Rules product uses a number of techniques for applying rate limits to
traffic where multiple unique visitors share the same IP address, such as traffic from behind a NAT. These
techniques can be enabled by using the cf.unique_visitor_id field in the rate limiting configuration. The
_cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the
Cloudflare WAF to distinguish individual users who share the same IP address. Visitors who do not provide the
cookie are likely to be grouped together and may not be able to access the site if there are many other visitors
from the same IP address. Duration: One session.
For more information regarding the Cloudflare cookies we use, please see the
Cloudflare Cookie Policy.
Video player cookies:
We use Vimeo embedded player. The Vimeo cookies we use are as below:
- vuid: Vimeo-generated ID used for generating analytics information for the video owner.
Duration: 2 years.
- player: Stores preferences for player controls (i.e. volume, stream quality, captions).
Duration: 1 year.
- [clip_id]_password: Stores an encoded password entered to authenticate a. Duration: One
session.
- [webinar_uuid]_webinar_r egistrant: Stores the ID of a user who has registered for a webinar.
Duration: 7 days.
- lc_[hash]: Stores the ID of a user who has submitted information through a video registration
form. Duration: 7 days.
- player_clearance: Vimeo cookie used for bot prevention. Duration: 7 days.
- _cf_bm: Cloudflare bot manager, manages incoming traffic that matches criteria associated with
bots. Duration: 30 minutes.
- _cfuvid: Cloudflare cookie used to enforce rate limiting rules. Duration: One session.
- cf_clearance: Cloudflare cookie used for bot prevention. Duration: 1 year.
For more information regarding the Vimeo cookies we use, please see the
Vimeo Cookie Policy.
Shopping cookies:
We use Shopify. The Shopify cookies we use are those marked
"Cookies Necessary for the Functioning of the Store"
as below:
_ab:
Used to control when the admin bar is shown on the storefront. Duration: 1 year.
_abv:
Persist the collapsed state of the admin bar. Duration: 1 year.
_checkout_queue_token:
Used when there is a queue during the checkout process. Duration: 1 year
_cmp_a:
Used for managing customer privacy settings. Duration: 1 day.
_identity_session:
Contains the identity session identifier of the user. Duration: 2 years.
_master_udr:
Permanent device identifier. Duration: One session.
_pay_session:
The Rails session cookie for Shopify Pay. Duration: One session.
_secure_account_session_id:
Used to track a customer's session for new customer accounts. Duration: 30 days.
_session_id:
Used for providing reporting and analytics. Duration: 2 years.
_shopify_country:
Used for Plus shops where pricing currency/country is set from GeoIP by helping avoid GeoIP lookups after the
first request. Duration: 30 minutes.
_shopify_essential:
Contains essential information for the correct functionality of a store such as session and checkout information
and anti-tampering data. Duration: 24 hours.
_storefront_u:
Used to facilitate updating customer account information. Duration: 1 minute.
_tracking_consent:
Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region. Duration: 1
year.
auth_state_[id]:
Stores authentication state before redirecting customers to third party for authentication.
card_update_verification_id:
Used to support verification when a buyer is redirected back to Shopify after completing 3D Secure during
checkout. Duration: 20 minutes.
cart:
Contains information related to the user's cart. Duration: 2 weeks.
cart_currency:
Used after a checkout is completed to initialize a new empty cart with the same currency as the one just used.
Duration: 2 weeks.
cart_sig:
A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of
some cart operations. Duration: 2 weeks.
cart_ts:
Used in connection with checkout. Duration: 2 weeks.
cart_ver:
Set every time a cart is updated and used to track cart version mismatches. Duration: 2 weeks.
checkout:
Used in connection with checkout. Duration: 21 days.
checkout_one_remember_me:
Used to prefill checkout with the details from the previous checkout. Duration: 1 year.
checkout_prefill:
Encrypts and stores URL parameters containing PII which are used in cart permalink URLs. Duration: 5 minutes.
checkout_session_lookup:
Used in connection with checkout. Duration: 3 weeks.
checkout_session_token_:[id]
Used when a checkout session is established on the server. Duration: 3 weeks.
checkout_token:
Captures the landing page of the visitor when they come from other sites. Duration: One session.
customer_account_locale:
Used to keep track of a customer account locale when a redirection occurs from checkout or the storefront to
customer accounts. Duration: 1 year.
customer_payment_method:
Stores what payment method is being updated for subscriptions. Duration: 1 hour.
customer_shop_pay_agreement:
Used to help verify a new Shop Pay payment instrument. Duration: 20 minutes.
device_fp_id:
Device fingerprint identifier to help prevent fraud. Duration: One session.
device_id:
Session device identifier to help prevent fraud. Duration: One session.
discount_code:
Stores a discount code (received from an online store visit with a URL parameter) in order to the next checkout.
Duration: One session.
dynamic_checkout_shown_on_cart:
Adjusts checkout experience for buyers that proceed with regular checkout versus dynamic checkout. Duration: 30
minutes.
hide_shopify_pay_for_checkout:
Set when a buyer dismisses the Shop Pay login modal during checkout, informing display to buyer. Duration: One
session.
identity-state
Stores state before redirecting customers to identity authentication. Duration: 1 day.
identity-state-[id]
Stores state before redirecting customers to identity authentication. Duration: 1 day.
identity_customer_account_number:
Stores an identifier used to facilitate login across the customer's account and storefront domains. Duration: 12
weeks.
keep_alive:
Used when international domain redirection is enabled to determine if a request is the first one of a session.
Duration: One session.
locale_bar_accepted:
Preserves if the modal from the geolocation app was accepted. Duration: One session.
locale_bar_dismissed:
Preserves if the modal from the geolocation app was dismissed. Duration: 1 day.
localization:
Used to localize the cart to the correct country. Duration: 2 weeks.
logged_in:
Identity logged-in hint. Duration: 12 weeks.
login_with_shop_finalize:
Used to facilitate login with Shop. Duration: 5 minutes.
master_device_id:
Permanent device identifier. Duration: 1 year.
order:
Used to allow access to the data of the order details page of the buyer. Duration: 3 weeks.
pay_update_intent_id:
Stores an ID of a Shop Pay billing agreement update intent, required for a callback after verifying a new Shop Pay
payment instrument. Duration: 20 minutes.
preview_theme:
Used to indicate whether the theme is being previewed. Duration: One session.
previous_checkout_one_token:
Used to prefill checkout with the details from the previous checkout. Duration: 1 year.
previous_checkout_token:
Used to prefill checkout with the details from the previous checkout. Duration: 1 year.
previous_step:
Used in connection with checkout. Duration: 1 year.
profile_preview_token:
Used for previewing checkout extensibility. Duration: 1 year.
queue_token:
Powers the checkout queue for checkout one. Duration: 1 hour.
remember_me:
Used to prefill checkout with the details from the previous checkout. Duration: 1 year.
secure_customer_sig:
Used to prefill checkout with the details from the previous checkout. Duration: 1 year
shop_pay_accelerated:
Indicates if a buyer is eligible for Shop Pay accelerated checkout. Duration: 1 year.
shopify-editor-unconfirmed-settings:
Stores changes merchant does in the editor to update the preview. Duration: 16 hours.
shopify_pay:
Used to log in a buyer into Shop Pay when they come back to checkout on the same store. Duration: 1 year.
shopify_pay_redirect:
Used to accelerate the checkout process when the buyer has a Shop Pay account. Duration: 1 year.
storefront_digest:
Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password
protected. Duration: 1 year.
tracked_start_checkout:
Used in connection with checkout. Duration: 1 year.
user:
Used in connection with Shop login. Duration: 1 year.
user_cross_site:
Used in connection with Shop login. Duration: 1 year.
wpm-domain-test:
Used to test Shopify's Web Pixel Manager with the domain to make sure everything is working correctly. Duration:
One session.
For more information regarding the Shopify cookies we use, please see the
Shopify Cookie Policy.
Please note third parties (including, for example, Shopify and Vimeo) may use cookies on the website, over which
we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
If you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able
to access all or parts of our website.
Except for strictly necessary cookies, all cookies will remain unless the cookie cache is cleared, unless
otherwise indicated above.
For further information regarding cookies more generally and how to disable them, please see:
www.aboutcookies.org or
www.allaboutcookies.org.
Last updated 12 September, 2024.