Privacy in detail

Cookies and technologies

This overview transparently shows which cookies and comparable storage technologies may be used in our store, what they do and how long they remain stored.

Cookies and technologies
Provider Cookie or storage Purpose Duration Category Legal basis
Shopify _shopify_essential, _shop_app_essential Secures login, checkout, cart and core store functionality. 1 year Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Shopify _tracking_consent Stores your privacy choice for the store. 1 year Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Shopify cart Associates your cart with your browser. 91 days measured, Shopify documents 14 days To be checked Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Shopify cart_currency Stores the currency selected for the cart. 14 days Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Shopify localization Stores your country and language selection. 1 year Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Shopify _shopify_analytics, _shopify_y Associates store visits with a browser for audience measurement. 1 year Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Shopify _shopify_s Connects store visits within an analytics session. 30 minutes, rolling Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Shopify _shopify_marketing Measures interactions with store advertising. 1 year Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Shopify shopify_client_id Associates analytics events with a browser. 1 year measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Google Analytics _ga, _ga_* Distinguishes visitors and measures store usage. 400 days in Chrome, Google default 2 years with browser limits Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Google Ads _gcl_au, _gcl_aw, GCL_AW_P Measures clicks and purchases from Google ads. 90 days measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Meta _fbp Attributes visits and purchases to Meta ads. 90 days measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Meta _fbc Stores the Meta click identifier when an fbclid parameter is present. Not detected in the audit, duration to be checked To be checked Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Klaviyo __kla_id Recognises returning visitors and associates product views and form sign-ups with a Klaviyo profile to trigger personalised emails. Chrome 400 days, up to 2 years depending on browser and setup Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Klaviyo __kla_session Connects events during a Klaviyo session. Session, measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
fraud0 f0_uid Recognises returning browsers to detect invalid traffic. 1 year measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
fraud0 f0_sid Connects page views to detect invalid traffic. 1 day measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
GoAffPro ref, source, dcode, gfp_v_id Attributes referrals and partner sales to an affiliate. 7 days, current store configuration Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Judge.me No cookie or browser storage detected in the audit Provides review features and may measure their use. No duration detected, recheck after configuration changes To be checked Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Instafeed No cookie or browser storage detected in the audit Loads and displays Instagram content in the store. No duration detected, recheck after configuration changes To be checked Preferences Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Notify-Me NM_customerData (Local Storage) Stores customer data for back-in-stock notifications. Until manually deleted, provider retention to be checked To be checked Preferences Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Notify-Me cart-count (Session Storage) Remembers the cart count during the browser session. Session Preferences Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
B4B No cookie or browser storage detected in the audit Technically supports the delivery of store functions. No duration detected, recheck after configuration changes To be checked Necessary Art. 6(1)(b) or (f) GDPR, section 25(2)(2) TDDDG
Triple Whale TriplePixel (Local Storage) Stores a browser identifier for attribution and session analysis. Until manually deleted, provider retention to be checked To be checked Analytics Legal basis to be checked
Microsoft Clarity _clck, _clsk Connects page views and sessions for behaviour analytics. Not detected in the audit, provider duration to be checked To be checked Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Microsoft Clarity MUID, SRM_B Recognises a browser on Microsoft domains for usage analytics. 390 days measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Microsoft Clarity MR Checks whether the lifetime of Microsoft cookies should be extended. 7 days measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Microsoft Clarity ANONCHK, SM Transfers session information and synchronises Microsoft identifiers. Session, measured Analytics Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Microsoft Advertising _uetsid Attributes page views within an advertising session. 1 day measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Microsoft Advertising _uetvid Recognises returning visitors to measure ads. 390 days measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Pinterest _pin_unauth, _pinterest_ct_ua Measures visits and purchases from Pinterest ads. 1 year Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
TikTok _ttp, ttcsid, ttcsid_* Measures visits and purchases from TikTok ads. 13 months Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Reddit _rdt_uuid Measures visits and purchases from Reddit ads. 90 days measured Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Snapchat _scid, _scid_r, _scsrid_r Attributes visits and purchases to Snapchat ads. 395 days measured, Snap documents 1 year Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG
Snapchat X-AB Supports the technical delivery and measurement of Snapchat content. 1 day Marketing Consent: Art. 6(1)(a) GDPR, section 25(1) TDDDG

Status: 1 September 2026. Durations are based on provider documentation and a complete opt-in measurement on prezor.com. Browser, device and provider configuration can shorten the actual storage period.

To be checked This information is not conclusively supported by provider documentation or a current measurement. We check it again when the integration changes.