Cookie details

Last updated: 8 May 2026

This page lists every cookie and similar technology used on ricki-robin.store, grouped by category. It supplements our Cookie Policy.


Necessary — always active, no consent required

Cookie / token Set by Purpose Duration
_shopify_y Shopify Persistent visitor identifier 1 year
_shopify_s Shopify Session identifier Session
cart, cart_sig, cart_ts, cart_ver Shopify Cart state and integrity 14 days
secure_customer_sig, _secure_session_id, _orig_referrer Shopify Customer login security and referrer attribution Session / 30 mins
checkout_token, tracked_start_checkout Shopify Checkout flow integrity Session
_shopify_country, _shopify_m Shopify Geo-targeting and merchandising Session / 1 year
__cf_bm, cf_chl_* Cloudflare (via Shopify) Bot management and DDoS protection 30 mins

Functional — consent required if used for non-essential personalisation

Cookie / token Set by Purpose Duration
Klarna session cookies Klarna (via Shopify Payments) BNPL eligibility check at checkout Session
Shop Pay Installments tokens Shopify BNPL eligibility check at checkout Session
PayPal session cookies PayPal Checkout integrity Session
Coinbase / Shopify Payments crypto session Shopify Payments + Coinbase Wallet detection and USDC authorisation Session
judge_me_session, judge_me_redirect Judge.me Reviews widget functionality Session / 30 days

Analytics — consent required, opt-in

Cookie / token Set by Purpose Duration
_ga Google Analytics 4 Distinguishes unique users 2 years
_ga_<container> Google Analytics 4 GA4 session state 2 years
_gid Google Analytics 4 Distinguishes unique users (24h) 24 hours

GA4 IP-anonymisation is ON. Data retention: 26 months.


Marketing — consent required, opt-in

None active at launch.

Planned within 90 days (will require consent when activated): Meta Pixel (_fbp, fbq) and TikTok Pixel (_ttp) — planned 30–60 days post-launch.

We do not use remarketing to children, fingerprinting beyond Shopify's anti-fraud layer, or third-party data brokers.