Cookies
What each cookie does and how to turn it off.
Last updated: 25 August 2026
A cookie is a small file a website leaves in your browser so it can remember something between page loads. Some are the reason a shopping cart works at all; others exist so we can see which ads earn their keep. This page lists both kinds, and you can refuse the second kind without breaking anything.
Categories
| Category | What it does | Consent needed |
|---|---|---|
| Strictly necessary | Cart contents, checkout session, fraud and security checks. | No — the shop cannot work without them |
| Preferences | Remembers your country, currency and saved items. | No, while it stays cosmetic |
| Analytics | Which pages get read, where people drop off, how fast the site loads. | Yes |
| Advertising | Measures which ad led to a sale and builds audiences for future ads. | Yes |
The cookies we set on the live store
These are the cookies present once the shop runs on Shopify with our advertising tools connected. Names ending in a number or hash vary between sessions.
Strictly necessary
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
cart, cart_ts, cart_sig | Shopify | Keeps your cart and its contents attached to your session. | 2 weeks |
_secure_session_id | Shopify | Keeps you signed in through checkout. | 24 hours |
secure_customer_sig | Shopify | Keeps your customer account session valid. | 20 years |
_cmp_a | Shopify | Stores your choices from this cookie banner. | 24 hours |
keep_alive | Shopify | Tracks your region so checkout loads the right settings. | 30 minutes |
__cf_bm | Cloudflare | Tells bots from humans, so the shop is not scraped or attacked. | 30 minutes |
Analytics — only after you accept
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_shopify_y, _shopify_s | Shopify Analytics | Counts visitors and sessions so we can see what the shop is actually doing. | 1 year / 30 min |
_ga, _ga_* | Google Analytics | Distinguishes visitors and measures how you move through the site. | 2 years |
_landing_page, _orig_referrer | Shopify | Records which page and which site you arrived from. | 2 weeks |
Advertising — only after you accept
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_fbp | Meta (Facebook, Instagram) | Links your visit to the ad you clicked, so we can measure it and show you related ads. | 3 months |
fbc / fbclid | Meta | Carries the click identifier from the ad into the visit. | 3 months |
_gcl_au | Attributes a sale to a Google ad. | 3 months | |
ttclid, _ttp | TikTok | Same measurement, if we advertise on TikTok. | 13 months |
Advertising without cookies
We also send Meta a server-side copy of key events — page view, add to cart, purchase — through their Conversions API. It carries no cookie, but it is still advertising data about you, so it only runs once you have accepted the advertising category, and it is covered by the same consent choice.
Changing your mind
Reopen the cookie banner from the link in the footer and switch any category off. Withdrawing consent is as easy as giving it, and it takes effect immediately — we do not ask you why.
Local storage on this build
This static build sets no cookies at all. It stores three things in your browser's local storage, on your device only, never sent anywhere:
lunelle_cart_v1— your cart.lunelle_wishlist— whether you tapped "Save".lunelle_useful_*— which reviews you marked helpful.
Clearing your browsing data for this site removes all of it, and empties your cart with it.
Turning them off in your browser
Every browser lets you block or delete cookies per site — look for "Privacy and security" in settings. Blocking the strictly-necessary ones breaks the cart and checkout, which is why we do not offer that switch ourselves. You can also opt out of Google Analytics everywhere with Google's browser add-on, and manage ad personalisation inside your Meta ad preferences.
Questions
Write to lunelle.shop.support@gmail.com and a person answers within two business days. Who "we" are in legal terms is on the legal notice; what we do with the data itself is in the privacy policy.