Cookie policy

Last updated: 20 October 2026

1. Who is responsible

The website cocolitos.eu is owned by Eulàlia Delgado Catalán (Cocolitos), tax ID (NIF) 47870443Z, registered address Avinguda de l'Estatut de Catalunya, 1-13, 08035 Barcelona. Contact: contact@cocolitos.eu.

2. What cookies are

Cookies are small files that a website stores in your browser when you visit it. They allow us, for example, to remember the products in your cart, know whether you have accepted or rejected cookies, or measure how many people visit the website. In this policy we also use the word cookies for similar technologies, such as browser local storage and pixels.

3. Types of cookies

By who manages them:

  • First party: managed by us from our store, which runs on the Shopify platform.
  • Third party: managed by another company (for example, Google or Meta) that processes the information obtained.

By purpose: technical or necessary, preferences, analytics and advertising. They are explained below.

4. Cookies we use

Technical or necessary cookies

They are essential for the website and store to work: keeping your session, your cart, security and storing your cookie choice. They do not require consent and cannot be disabled.

Cookie Provider First / third party Purpose Duration
_shopify_essential Shopify First party (store platform) Keeps the session, security and basic operation of the store. 1 year
__Host-Http-shop_binding Shopify (Shop Pay) First party (store platform) Securely binds the express checkout session (Shop Pay). 1 hour
cart Shopify First party (store platform) Stores the products in your cart. 3 months
cart_currency Shopify First party (store platform) Stores the cart currency. 14 days
localization Shopify First party (store platform) Remembers the store language and country. 1 year
cookieconsent_status Consentmo First party (store platform) Stores your cookie choice. 1 year
cookieconsent_preferences_disabled Consentmo First party (store platform) Stores your consent preferences by category. 1 year
csmConsentIdentifier Consentmo First party (store platform) Identifier of your consent record. Persistent (local storage)
bugsnag-anonymous-id Shopify (pay.shopify.com) Third party Detects technical errors in the express checkout button. Persistent (local storage)

Preference or personalisation cookies

They remember your choices, for example so the subscription form is not shown to you again. They are only set if you accept them.

Cookie Provider First / third party Purpose Duration
forms_previous_session_id, forms_session_expires_at Shopify Forms First party (store platform) Remembers the subscription form session so it is not shown again. Persistent (local storage)

Analytics or statistics cookies

They help us understand how the website is used (pages visited, time, where visits come from) in aggregate so we can improve it. They are only set if you accept them.

Cookie Provider First / third party Purpose Duration
_shopify_analytics Shopify First party (store platform) Store usage statistics (Shopify Analytics). 1 year
_ga Google Analytics Third party Distinguishes visitors to produce usage statistics. 13 months
_ga_NHBHBNV40Z, _ga_YS1L42E5H2 Google Analytics Third party Keeps the Google Analytics 4 session state. 13 months
be.js Metricool Third party Visit measurement script (no own cookie detected) —

Advertising or marketing cookies

They are used to measure and show relevant ads and to personalise our communications. They are only set if you accept them.

Cookie Provider First / third party Purpose Duration
_shopify_marketing Shopify First party (store platform) Store marketing measurement (Shopify). 1 year
_fbp Meta Third party Measures ad effectiveness on Meta (Facebook and Instagram). 3 months
_gcl_au Google Ads Third party Measures Google Ads conversions. 3 months
_gcl_ls Google Ads Third party Measures Google Ads conversions. Persistent (local storage)
SEARCH_SAMESITE Google (google.com) Third party Google cookies for security and preferences of its advertising services. 6 months
__Secure-ENID Google (google.com) Third party Google cookies for security and preferences of its advertising services. 13 months
__kla_id Klaviyo Third party Identifies subscribers to personalise emails. 13 months
__kl_key, __kla_viewed, __kla_viewed_reviewed_items, $referrer, $last_referrer Klaviyo Third party Stores viewed products and visit source to personalise emails. Persistent (local storage)

During checkout, Shopify may use additional technical cookies needed to complete the purchase. You can see the full list in Shopify's cookie policy. Browser local storage items are marked in the tables as “Persistent (local storage)”: they are kept until you delete them from your browser.

5. How to accept, reject or change your choice

  • The first time you visit the website, a notice lets you accept all cookies, reject them or configure which categories you allow. Until you choose, only technical cookies are used.
  • You can change or withdraw your consent at any time with this button, which clears your choice and shows the cookie notice again:

  • You can also block or delete cookies in your browser settings (Chrome, Safari, Firefox, Edge or others). If you block technical cookies, some parts of the store, such as the cart, may stop working.

6. International transfers

Some third-party providers (such as Google, Meta or Klaviyo) may process data outside the European Economic Area, mainly in the United States. These transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. More information is available in each provider's privacy policy.

7. Changes to this policy

We review this policy whenever the tools we use change, so please check it from time to time. For any questions, write to us at contact@cocolitos.eu.