Cookie policy
This English text is a translation for your convenience. The Spanish version is the legally binding one and prevails in case of any discrepancy.
This policy explains which cookies and similar technologies this shop uses, what they are for, who sets them and how you can accept them, refuse them or change your mind. We have written it in accordance with article 22.2 of Ley 34/2002 (LSSI-CE, Spain's Information Society Services and E-Commerce Act), Regulation (EU) 2016/679 (GDPR) and the cookie guidelines of the Agencia Española de Protección de Datos (AEPD, the Spanish data protection authority). It complements the Privacy policy.
In short: the cookies the shop needs in order to work are always used; analytics and advertising cookies only if you accept them in the cookie banner. Refusing them is as easy as accepting them and you can change your choice at any time.
1. What cookies and similar technologies are
A cookie is a small text file that a website stores in your browser when you visit it. It is used, for example, to remember what is in your cart, the country you have chosen or whether you have already answered the cookie banner. Some are set by this shop (first-party cookies) and others by companies that provide us with a service (third-party cookies).
In this policy we also call “cookies” other techniques that store or read information on your device for the same purpose: the browser's local storage (localStorage and sessionStorage) and tracking pixels or tags. The law treats them alike.
2. Who uses them
- Owner of this website: Alexis Cantos (trading name: Vivagag), NIF 46488715B, Carrer de Girona, 81, 3.º — 08820 El Prat de Llobregat (Barcelona), España, vivagag01@gmail.com. Full details are in the Legal notice, linked in the shop footer.
- Shopify International Limited (Ireland): the platform the shop runs on. It sets the cookies needed for the cart, the session and the checkout and, only if you accept them, the platform's own analytics and marketing cookies. It acts on our behalf as a processor; for some services it provides directly to shoppers (for example, Shop Pay) it acts as an independent controller. Its official cookie list: shopify.com/legal/cookies.
- hCaptcha (Intuition Machines, Inc., United States): the anti-spam filter Shopify integrates into the shop's forms (contact and withdrawal). It only runs when you use one of those forms.
- TikTok (TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited): the TikTok pixel, installed with the official TikTok app for Shopify. It is only activated if you accept advertising cookies.
- Apps installed in the shop that set cookies: none. If we install a new app that uses cookies, we will add it to this policy before activating it.
We use no other third-party tools in the shop: no external fonts, no embedded videos from other platforms (the videos are hosted by Shopify), no chats.
3. Which cookies we use, what for and for how long
3.1 Necessary cookies (no consent needed)
Without them the shop does not work: they keep your session and your cart, remember your choice about cookies, make payment possible and protect the website against fraud and automated submissions. They are exempt from consent because they are strictly necessary for the service you yourself request (article 22.2 of the LSSI-CE); as regards data processing, they rely on the performance of the contract and on our legitimate interest in a working, secure shop.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _shopify_essential | Shopify | Essential information for the shop to work: session, checkout and anti-tampering protection | 1 year |
| _tracking_consent | Shopify | Stores your choice in the cookie banner | 1 year |
| cart | Shopify | Contents of your cart | 2 weeks |
| cart_currency | Shopify | After a purchase, creates a new empty cart with the same currency | 2 weeks |
| discount_code | Shopify | Stores a discount code that came in the link you arrived with, to apply it at checkout | Session |
| localization | Shopify | Remembers the chosen country to localise the cart | 1 year |
| _shopify_test | Shopify | Checks whether your browser accepts cookies | 1 minute |
| shopify_pay | Shopify | Recognises you in Shop Pay when you come back to this shop's checkout | 1 year |
| login_with_shop_finalize | Shopify | Completes the login with Shop | 5 minutes |
| __Host-shop_binding | Shopify | Binds the login with Shop to your browser session | 3 hours |
| storefront_digest | Shopify | Only while the shop is password-protected: remembers that you have entered the password | 1 year |
| __cf_bm | hCaptcha | Security of the anti-spam filter on the forms | Up to 1 day |
| hc_accessibility | hCaptcha | Only if you enable hCaptcha's accessibility mode | Up to 30 days |
What the shop's own theme stores in your browser (not cookies, no consent needed, and it never leaves your device):
viral-withdrawal:statement(sessionStorage): while you fill in the withdrawal form it keeps a draft of what you type, to show you a copy on the confirmation screen and to restore the fields if the submission fails. It is deleted when the confirmation is shown or when you close the tab.viral-language-banner:dismissed(localStorage): remembers that you closed the banner suggesting the shop in another language, so that it is not shown again. It is kept until you clear your browser data.
3.2 Preference cookies
Today the shop uses no preference cookies other than the necessary ones: the country is remembered with the localization cookie and the language is part of the page address (for example, /en). Shopify's list includes the cookie shopify_override_user_locale (user language, 1 year); if the scan of the shop shows that it is set here, this line describes it.
3.3 Analytics cookies (only if you accept them)
They let us know how many people visit the shop, where they come from and which pages they view, through Shopify's statistics. Legal basis: your consent (article 22.2 of the LSSI-CE and article 6(1)(a) of the GDPR). Until you accept, they are not set.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _shopify_y | Shopify | Identifies your browser for the shop's statistics | 1 year |
| _shopify_s | Shopify | Identifies your browsing session in the shop | 30 minutes from last use |
| _shopify_analytics | Shopify | Analytics data for the shop and the checkout | 1 year |
| _landing_page | Shopify | Page through which you entered the shop | 2 weeks |
| _orig_referrer | Shopify | Website you came to the shop from | 2 weeks |
| shop_analytics | Shopify | Buyer information for Shop analytics | 1 year |
3.4 Advertising cookies (only if you accept them)
They are used to measure whether our videos and ads lead to visits and purchases and to show you ads for our products on other platforms. Legal basis: your consent (article 22.2 of the LSSI-CE and article 6(1)(a) of the GDPR). Until you accept, they are not set and the pixel does not load.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _shopify_marketing | Shopify | Marketing data for the platform in the shop and at checkout | 1 year |
| _ttp | TikTok (first- and third-party) | To measure and improve advertising campaigns and personalise ads on TikTok | 13 months from last use |
| ttcsid_ followed by the pixel code | TikTok (first-party) | To measure and improve advertising campaigns and personalise ads on TikTok | 13 months from last use |
| ttclid | TikTok (first-party) | Identifier of the click that brought you from a TikTok ad, to attribute the visit or purchase to it | 13 months from last use |
| _pangle | TikTok (third-party) | To measure and personalise ads of TikTok's Pangle advertising network | 13 months from last use |
With the pixel, TikTok receives data about your browsing and your purchases in the shop and may link them to your TikTok account. Exactly what it collects, who is responsible for it and how it transfers data outside the European Union is explained in sections 5 and 6 of the Privacy policy.
4. How to accept, refuse or change your choice
- In the cookie banner, the first time you visit: “Accept” accepts analytics and advertising cookies; “Decline” refuses all of them except the necessary ones; the preferences button lets you choose by purpose. Both buttons are at the same level and no box is pre-ticked. Until you choose, only the necessary cookies are used: continuing to browse is not acceptance.
- Changing your mind later: click the shop's “Cookie preferences” link to reopen the panel and change your choice. Withdrawing consent is as easy as giving it and does not affect processing carried out before.
- From your browser: you can view, delete or block cookies in the privacy settings of Chrome, Safari, Firefox or Edge (each one explains how in its help pages). If you delete cookies, the shop will ask you again; if you block the necessary ones, the cart and the checkout may stop working.
- At most every 24 months we will ask for your choice again.
5. International transfers
Shopify may process data outside the European Economic Area (including in Canada); hCaptcha processes data in the United States; TikTok, if you accept its cookies, transfers data outside Europe. The safeguards that apply (adequacy decisions, the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework) and where to consult them are in section 5 of the Privacy policy.
6. Your data and your rights
The data collected by these cookies (cookie and device identifiers, IP address, pages viewed, purchase events) is processed as explained in the Privacy policy, which also tells you how long we keep it, who we share it with and how to exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to vivagag01@gmail.com. You can lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es). We do not build profiles that produce legal effects concerning you.
7. Changes to this policy
We will update it when the cookies we use change (for example, if we install a new app) or when the law changes. The Spanish version of this policy is the legally binding one; the English version is a translation.
Last updated: 20 September 2026.