Name

Function

Duration

_ab

Used in connection with access to admin.

2y

_customer_account_shop_sessions

Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts

30d

_secure_account_session_id

Used to track a user's session for new customer accounts

30d

_secure_session_id

Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.

24h

_shopify_country

For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.

session

_shopify_m

Used for managing customer privacy settings.

1y

_shopify_tm

Used for managing customer privacy settings.

30min

_shopify_tw

Used for managing customer privacy settings.

2w

_storefront_u

Used to facilitate updating customer account information.

1min

_tracking_consent

Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.

1y

_cmp_a

Used for managing customer privacy settings.

1d

c

Used in connection with checkout.

1y

cart

Used in connection with shopping cart.

2w

cart_currency

Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.

2w

cart_sig

A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.

2w

cart_ts

Used in connection with checkout.

2w

cart_ver

Used in connection with shopping cart.

2w

checkout

Used in connection with checkout.

4w

checkout_token

Used in connection with checkout.

1y

customer_account_locale

Used in connection with new customer accounts

1y

dynamic_checkout_shown_on_cart

Used in connection with checkout.

30min

hide_shopify_pay_for_checkout

Used in connection with checkout.

session

keep_alive

Used in connection with buyer localization.

2w

master_device_id

Used in connection with merchant login.

2y

previous_step

Used in connection with checkout.

1y

discount_code

Used in connection with checkout.

session

remember_me

Used in connection with checkout.

1y

secure_customer_sig

Used to identify a user after they sign into a shop as a customer so they do not need to log in again.

1y

shopify_pay

Used in connection with checkout.

1y

shopify_pay_redirect

Used in connection with checkout.

1 hour, 3w or 1y depending on value

shop_pay_accelerated

Used in connection with checkout.

1y

source_name

Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app.

session

storefront_digest

Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.

2y

tracked_start_checkout

Used in connection with checkout.

1y

checkout_session_lookup

Used in connection with checkout.

3w

checkout_prefill

Used in connection with checkout.

5m

checkout_queue_token

Used in connection with checkout.

1y

checkout_queue_checkout_token

Used in connection with checkout.

1y

checkout_worker_session

Used in connection with checkout.

3d

checkout_session_token

Used in connection with checkout.

3w

checkout_session_token_<<token>>

Used in connection with checkout.

3w

cookietest

Used to ensure our systems are working correctly

1m

order

Used in connection with order status page.

3w

identity-state

Used in connection with customer authentication

24h

identity-state-<<token>>

Used in connection with customer authentication

24h

identity_customer_account_number

Used in connection with customer authentication

12w

card_update_verification_id

Used in connection with checkout.

20m

customer_account_new_login

Used in connection with customer authentication

20m

customer_account_preview

Used in connection with customer authentication

7d

customer_payment_method

Used in connection with checkout.

1h

customer_shop_pay_agreement

Used in connection with checkout.

20m

pay_update_intent_id

Used in connection with checkout.

20m

localization

Used in connection with checkout.

2w

profile_preview_token

Used in connection with checkout.

5m

login_with_shop_finalize

Used in connection with customer authentication

5m

preview_theme

Used in connection with the theme editor

session

shopify-editor-unconfirmed-settings

Used in connection with the theme editor

16h

wpm-test-cookie

Used to ensure our systems are working correctly.

session

Name

Function

Duration

_landing_page

Track landing pages.

2w

_orig_referrer

Track landing pages.

2w

_s

Shopify analytics.

30min

_shopify_d

Shopify analytics.

session

_shopify_fs

Shopify analytics.

30min

_shopify_s

Shopify analytics.

30min

_shopify_sa_p

Shopify analytics relating to marketing & referrals.

30min

_shopify_sa_t

Shopify analytics relating to marketing & referrals.

30min

_shopify_y

Shopify analytics.

1y

_y

Shopify analytics.

1y

_shopify_ga

Shopify and Google Analytics.

session

customer_auth_provider

Shopify analytics.

session

customer_auth_session_created_at

Shopify analytics.

session

unique_interaction_id

Shopify analytics.

10min

__utmc

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. It is not used in most sites but is set to enable interoperability with the older version of Google Analytics code known as Urchin. In this older versions this was used in combination with the __utmb cookie to identify new sessions/visits for returning visitors. When used by Google Analytics this is always a Session cookie which is destroyed when the user closes their browser. Where it is seen as a Persistent cookie it is therefore likely to be a different technology setting the cookie.

Session

__utmb

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30 minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor.

30 minutes

_ga_GQS5MDHMXB

This cookie is used by Google Analytics to persist session state.

1 year 1 month

__utmz

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour measure of site performance. This cookie identifies the source of traffic to the site - so Google Analytics can tell site owners where visitors came from when arriving on the site. The cookie has a life span of 6 months and is updated every time data is sent to Google Analytics.

6 months 2 days

__utmt

This cookie is set by Google Analytics. According to their documentation it is used to throttle the request rate for the service - limiting the collection of data on high traffic sites. It expires after 10 minutes

10 minutes

_ga

This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

1 year 1 month

__utma

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It it used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customised by website owners.

1 year 1 month

_fbp

Used by Meta to deliver a series of advertisement products such as real time bidding from third party advertisers

3 months