Cookie Policy

Last updated: 23 October 2025

1) What are cookies?

Cookies and equivalent technologies (e.g., pixels or SDKs) are small files or identifiers stored on your device to enable technical functions, remember preferences, carry out aggregated measurements and, where applicable, personalise advertising. The installation and use of non-essential cookies require your informed consent in accordance with Article 22.2 of the LSSI and Article 5(3) of the ePrivacy Directive.

2) Who is the controller?

The controller for data processing in relation to cookies on this website is the one indicated in our Legal Notice and Privacy Policy. There you will also find information on your rights and the contact details of the Data Protection Officer, where applicable.

3) How do we obtain your consent?

We display a consent banner (Consent Management Platform – CMP) provided by Consentmo that allows you to Accept all, Reject all or Save preferences by categories (Necessary, Preferences, Statistics and Marketing). The options to accept and reject are presented with the same prominence and format, with no pre-ticked boxes, and we do not use “cookie walls” that prevent access without accepting cookies (except in cases admitted by the AEPD).

4) Categories of cookies we use

  • Necessary (technical): These allow the site and checkout to function (e.g., anti-fraud security, load balancing, remembering cart contents). These do not require consent. On Shopify they may include technologies such as hCaptcha to protect forms and processes. These cookies are essential for the proper functioning of the website and enable key features such as security, navigation and access to secure areas. They cannot be disabled.
  • Preferences: These cookies remember your choices, such as language preferences or login details, to deliver a more personalised experience. They are not essential, but if not used, your shopping experience will be poorer.
  • Statistics (analytics): By collecting anonymous data, these cookies help us understand how visitors interact with the website, allowing us to improve performance and user experience (e.g., Google Analytics 4).
  • Marketing: These enable remarketing and advertising measurements (e.g., Google Ads, Meta, TikTok or Pinterest) when you activate them. These cookies track your activity across different websites to offer you personalised ads and relevant content. They also help measure the effectiveness of our marketing campaigns.

Important: unless you grant consent for each non-essential category, the affected tags remain blocked or switch to a cookieless measurement mode (see section 6).

5) Which third parties are involved?

In addition to our own cookies, we may use third-party cookies and technologies:

  • Google (Analytics 4 and Google Ads): measurement and, where applicable, personalisation/remarketing. Managed via Google Tag Manager (GTM) and Google Consent Mode v2. google.com
  • Judge.me (reviews): may use cookies/identifiers to display widgets and link reviews. Judge.me
  • Zing Loyalty (loyalty programme): may use cookies/identifiers for points, referrals and customer experience. zingloyalty.com
  • Back in Stock | Preorder (Doran): manages back-in-stock/pre-order alerts; may use cookies/identifiers linked to its functions. doran.app
  • hCaptcha (Shopify anti-bot security): technology necessary to protect forms (login, registration, contact) and mitigate abuse. hcaptcha.com
  • Meta (Facebook/Instagram): measurement and/or advertising (pixels/tags) subject to your Marketing consent. facebook.com
  • TikTok: measurement and/or advertising (pixels/tags) subject to your Marketing consent. tiktok.com
  • Pinterest: measurement and/or advertising (pixels/tags) subject to your Marketing consent. pinterest.com

In the cookie table inserted below (generated by Consentmo) you will see, for each cookie, the provider, purpose, category and duration.


Name Description Category Provider Duration
cookieconsent_status This cookie is associated with the Consentmo GDPR Compliance app and is used to store the customer’s consent. Necessary Consentmo 1 year
cookieconsent_preferences_disabled This cookie is associated with the Consentmo GDPR Compliance app and is used to store the customer’s consent. Necessary Consentmo 1 day
_ab Used to control when the admin bar is displayed in the shop. Necessary Shopify 1 year
_abv Keeps the collapsed state of the admin bar. Necessary Shopify 1 year
_checkout_queue_token Used when there is a queue during the checkout process. Necessary Shopify 1 year
_identity_session Merchant authentication: primary session cookie for Identity authentication. It is the Rails session cookie. Contains the SID. Necessary Shopify 2 years
_master_udr Persistent device identifier. Necessary Shopify Session
_merchant_essential Contains essential information for the proper functioning of merchant areas, such as the admin area. Necessary Shopify 1 year
_pay_session Rails session cookie for Shopify Pay. Necessary Shopify Session
_shopify_country Used in Plus shops where currency/country is set via GeoIP, to prevent further lookups after the initial request. Necessary Shopify 30 minutes
_shopify_essential Contains essential information for the proper functioning of the shop, such as session data, payment and anti-tampering protection. Necessary Shopify 1 year
_shopify_essential_ Contains an opaque token used to identify a device for all essential purposes. Necessary Shopify 1 year
_shopify_test Used to check cookie capabilities on the client. Necessary Shopify 1 minute
_storefront_u Used to facilitate updating customer account information. Necessary Shopify 1 minute
_tracking_consent Used to store user preferences where the merchant has configured privacy rules. Necessary Shopify 1 year
auth_state_* Stores the authentication state before redirecting the customer to third parties. Necessary Shopify 25 minutes
cart Contains information related to the user’s cart. Necessary Shopify 2 weeks
cart_currency Used after completing checkout to start a new cart with the same currency. Necessary Shopify 2 weeks
checkout Used during checkout to identify the user. Necessary Shopify 21 days
checkout_token Used during checkout to identify the user. Necessary Shopify Session
customer_account_locale Used to track the customer account language when redirected from the shop or checkout. Necessary Shopify 1 year
discount_code Stores a discount code (received via URL) for the next checkout. Necessary Shopify Session
hide_shopify_pay_for_checkout Set when a buyer closes the Shop Pay sign-in modal during checkout. Necessary Shopify Session
identity-state Stores a hash of the OAuth flow state between redirects. Necessary Shopify 1 day
identity_customer_account_number Stores an identifier that facilitates sign-in between the customer account and the shop domain. Necessary Shopify 12 weeks
in_checkout_profile_preview Used to determine whether the merchant is in the checkout profile preview. Necessary Shopify Session
keep_alive Used when international redirection is enabled to determine whether this is the first request of the session. Necessary Shopify Session
localization Used to localise the cart to the correct country. Necessary Shopify 2 weeks
login_with_shop_finalize Used to facilitate sign-in with Shop. Necessary Shopify 5 minutes
master_device_id Merchant authentication: persistent device identifier, public version. Necessary Shopify 1 year
order Enables access to the buyer’s order details page data. Necessary Shopify 3 weeks
profile_preview_token Used to preview checkout customisations. Necessary Shopify 5 minutes
shop_pay_accelerated Indicates whether a buyer is eligible for accelerated checkout with Shop Pay. Necessary Shopify 1 year
shopify_pay Used to sign in to Shop Pay when the buyer returns to checkout in the same shop. Necessary Shopify 1 year
shopify_pay_redirect Speeds up checkout if the buyer has a Shop Pay account. Necessary Shopify 1 year
skip_shop_pay Disables Shop Pay as a payment method during checkout. Necessary Shopify 1 year
storefront_digest Stores a digest of the shop password, allowing the merchant to preview the password-protected shop. Necessary Shopify 1 year
theme Used to determine the shop’s theme. Necessary Shopify 1 week
user Used in relation to sign-in with Shop. Necessary Shopify 1 year
user_cross_site Used in relation to sign-in with Shop. Necessary Shopify 1 year
_landing_page Captures the visitor’s landing page when arriving from other sites. Statistics Shopify 2 weeks
_merchant_analytics Contains analytics data for the merchant’s session. Statistics Shopify 1 year
_orig_referrer Allows the merchant to identify where visitors come from. Statistics Shopify 2 weeks
_shopify_analytics Contains analytics data for buyer-facing interfaces such as the shop or checkout. Statistics Shopify 1 year
_shopify_ga Contains Google Analytics parameters that enable cross-domain measurement. Statistics Shopify Session
_shopify_s Used to identify a session/browser and shop combination. Valid for 30 minutes from last use. Statistics Shopify 30 minutes
_shopify_y Shopify analytics. Statistics Shopify 1 year
shop_analytics Contains necessary buyer information for analytics in Shop. Statistics Shopify 1 year
_shopify_marketing Contains marketing data for buyer-facing interfaces such as the shop or checkout. Marketing Shopify 1 year
shopify_override_user_locale Used as a mechanism to set the user’s language in the admin. Preferences Shopify 1 year

6) Measurement and Google tags with Consent Mode v2

We have activated Google Consent Mode v2. This means that Google Ads/Analytics adjust their behaviour based on your choice: if you refuse consent for advertising and/or analytics categories, cookieless pings are sent and personalised advertising is not enabled until you grant permission. The new parameters ad_user_data and ad_personalization are only granted when you accept Marketing; without them, there is no remarketing or personalised advertising.

7) Managing your preferences and withdrawing consent

  • You can accept, reject or configure cookies by category from the initial consent banner. The Accept and Reject options are shown at the same level and with the same prominence, in line with the AEPD’s criteria. Spanish Data Protection Agency
  • You can modify or withdraw your consent at any time via the “Manage cookies” button visible on the site, which reopens the preferences panel to change your selection (for example, reject all or adjust by purpose). This permanent access ensures that withdrawing consent is as easy as giving it, as required by the AEPD’s guidance.
  • If for any reason you do not see the button (e.g., due to blockers), you can write to us using the contact details indicated in the Legal Notice and Privacy Policy so that we can provide alternative instructions.
  • Withdrawing your consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

8) How to delete cookies from your browser

If you have already accepted cookies and wish to delete them (for example, so that our banner reappears or to reset your preferences), you can do so from your browser settings. Please note that deleting cookies may sign you out and you may lose saved preferences.

Google Chrome (computer)

  • Delete all cookies: Menu ⋮ → Settings → Privacy and security → Third-party cookies → See all site data and permissions → Clear all data → Clear. Google Help
  • Delete cookies for a specific site: Menu ⋮ → Settings → Privacy and security → Third-party cookies → See all site data and permissions → search for the domain → Remove.
  • By time period: Menu ⋮ → Clear browsing data → under Time range choose (e.g., “All time”) → tick Cookies and other site data → Clear data. Google Help

Google Chrome (Android)

  • Delete by time period: Menu ⋮ → Clear browsing data → choose time range → tick Cookies and site data → Clear data. Google Help
  • Delete cookies only for the site you are visiting: Open the site → tap the information icon to the left of the address bar → Cookies and site data → Clear. Google Help

Mozilla Firefox (computer)

  • Delete everything (cookies, site data and cache): Menu ☰ → Settings → Privacy & Security → Cookies and Site Data → Clear Data… → confirm. Mozilla Support
  • Delete cookies for a specific site: Settings → Privacy & Security → Cookies and Site Data → Manage Data… → search for the site → Remove Selected.
  • From the padlock (current site): padlock icon next to the URL → Clear cookies and site data. Mozilla Support

Microsoft Edge (computer)

  • Delete all cookies: Settings and more … → Settings → Privacy, search and services → Clear browsing data → Choose what to clear → tick Cookies and other site data → Clear now. Microsoft Support
  • Delete cookies for a specific site: Settings → Cookies / Cookies and site data → See all cookies and site data → search for the domain → Remove. Microsoft Support

Apple Safari (macOS)

  • Delete cookies from one or several sites, or all: Safari → Preferences/Settings → Privacy → Manage Website Data… → select sites → Remove or Remove All. Apple Help Library

Apple Safari (iPhone / iPad)

  • Clear history, cache and cookies: Settings → Safari → Clear History and Website Data (choose the period and confirm). Apple Support
  • Clear cookies/data only (keeping history): Settings → Safari → Advanced → Website Data → Remove All Website Data. Apple Support

Opera (computer)

  • Delete cookies and other data: Settings (Alt+P) → Privacy & security → Clear browsing data → tick Cookies and other site data → Clear data. Opera Help
  • Optional – view/delete cookies per site: Settings → Privacy & security → Site settings → Cookies and site data → See all cookies and site data (search and delete). Opera News

9) International transfers

By accepting third-party cookies, your data (e.g., online identifiers, truncated IP addresses, events) may be processed outside the EEA. Google declares its adherence to the EU-U.S. Data Privacy Framework (DPF) for its advertising and analytics products; where appropriate, it applies supplementary mechanisms. Other providers may rely on Standard Contractual Clauses or other safeguards. Please refer to their policies in the cookie table. Business Data Responsibility

10) Retention of preferences and consent records

  • The AEPD considers it good practice not to maintain the validity of cookie consent for more than 24 months, retaining the user’s selection during that time.
  • Consent records (proof of what you accepted or rejected) are retained by our CMP (Consentmo) for 12 months from collection, after which they are automatically deleted. We may back them up in our systems if necessary for compliance purposes for up to 24 months.

11) Necessary cookies from Shopify and hCaptcha

Our platform (Shopify) uses its own technical cookies and hCaptcha protection on forms and critical processes to prevent abuse and fraud. These technologies are considered necessary to provide the service.

12) Changes to this Cookie Policy

We will update this Policy and the cookie table when we introduce new features, change providers or purposes vary. We will inform you of relevant changes in accordance with the applicable regulations.

13) How to contact us

For any questions about this Cookie Policy or to exercise your rights, please refer to the contact details indicated in our Legal Notice and Privacy Policy.