Cookie Policy
Cookie Policy
Which cookies we use, who sets them, what they actually do, and how to switch off the ones you don't want.
The short version
If you read nothing else
Some cookies keep your cart working and let you check out. Those we can't switch off. The rest measure how the site is used and help our ads find people who might like a cat holding a martini — and you can turn those off.
A cookie is a small text file a website stores on your device. We also use closely related technologies — pixels, tags, local storage and software development kits — and for simplicity this page calls all of them "cookies".
The four categories
What we run, and why
Remember what's in your cart, keep you logged in, process checkout, and block fraud. Without these the shop simply doesn't function.
Remember preferences like your region, and power the order tracking page. Small conveniences rather than tracking.
Tell us which pages people visit, where they lose patience, and what's broken. This includes session recording — see below.
Measure whether our ads work and show them to people with similar interests. Also power our email sign-up and any abandoned-cart reminders.
Session recording, spelled out
The one people don't expect
We use Microsoft Clarity, which records how you move through the site.
That means mouse movement, scrolling, clicks and taps are captured and replayed back to us as an anonymised session, alongside heatmaps showing where people click most.
We use it to find the parts of the shop that don't work — a button nobody can find, a size guide people scroll past, a checkout step where everyone gives up. It is not watched live, and it isn't tied to your name.
What Clarity does not capture: text you type into form fields is masked by default, and payment details never reach it at all, because checkout runs on Shopify's own infrastructure. We can't see your card number, and neither can Clarity.
Microsoft is a joint controller of this data. Their handling of it is described in the Microsoft Privacy Statement.
The specifics
Who sets what
Cookie names and lifespans are set by the providers, not by us, and they change from time to time. The list below covers the main ones rather than every last item.
| Set by | Examples | What it does | Typical life |
|---|---|---|---|
| Shopify |
cart cart_ts checkout_token
|
Keeps your cart contents and carries them through to checkout. | Up to 2 weeks |
| Shopify |
_secure_session_id secure_customer_sig
|
Maintains a secure session and keeps you signed in. | Session to 1 year |
| Shopify | _tracking_consent |
Remembers your cookie choices so we don't ask again on every page. | 1 year |
| Shopify |
localization cart_currency
|
Remembers your region and currency. | Up to 1 year |
| ParcelPanel | Order tracking cookies | Powers the Track Your Order page so it can show your shipment status. | Session to 1 year |
| Set by | Examples | What it does | Typical life |
|---|---|---|---|
| Shopify |
_shopify_y _shopify_s _shopify_sa_t
|
Shopify's own store analytics — visits, sessions, traffic sources. | 30 minutes to 1 year |
| Google Analytics |
_ga _ga_<id> _gid
|
Counts visitors and pageviews, and shows how people move through the site. | 24 hours to 2 years |
| Microsoft Clarity |
_clck _clsk MUID CLID
|
Session recording and heatmaps, as described above. | 1 day to 1 year |
| Set by | Examples | What it does | Typical life |
|---|---|---|---|
| Meta (Facebook, Instagram) |
_fbp fbc
|
The Meta Pixel. Measures whether an ad led to a visit or a purchase, and builds audiences for future ads. | Around 3 months |
| Klaviyo | __kla_id |
Links your email sign-up to your browsing so we can send relevant email and abandoned-cart reminders. | Up to 2 years |
Meta and Google may combine what they collect here with data from other sites you visit. That's how their advertising networks work, and it's worth knowing. Their own policies govern it: Meta Privacy Policy, Google Privacy Policy, Klaviyo Privacy Notice, Shopify Privacy Policy.
How to turn things off
Several routes, all of them yours
In your browser
Every major browser lets you block or delete cookies, and most can block third-party cookies specifically while leaving the ones that keep your cart working intact. Look under Settings → Privacy. Be aware that blocking everything will break checkout — that isn't us being awkward, it's how carts work.
At the source
- Google Analytics — install the Google Analytics opt-out add-on, which works across every site you visit.
- Meta — adjust what you see and what's collected in your Meta ad preferences.
- Microsoft Clarity — covered by Microsoft's own privacy controls.
- Klaviyo email — the unsubscribe link at the bottom of any email we send you works immediately, and we don't make you explain yourself.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of the sale or sharing of personal information where the law recognises it. You don't need to tell us separately.
Where your data goes
Briefly, and honestly
Our providers are largely US-based, which means data collected through these cookies may be processed in the United States and other countries. Those transfers rely on the safeguards each provider has in place, described in the policies linked above.
Depending on where you live you may have the right to access, correct or delete the personal data we hold, and to object to certain processing. Write to us and we'll handle it — no form to fill in.
Changes to this policy
We'll date them
If we add a tool, drop one, or change how we use them, we'll update this page and change the date at the bottom. If a change is significant, we'll say so rather than hoping you don't notice.
Questions about any of this
Privacy questions, a request to delete your data, or a query about something on this page — write to us. We read every email and normally reply within one to two business days.
info@wildhollowco.comPut "Privacy" in the subject line and it gets to the right place faster.