Last updated: October 27, 2026
This Cookie Policy explains which cookies and similar technologies https://ekocommercial.com (operated by EKO North America, "EKO Commercial", "we") uses, what they do, and how you control them. It should be read with our Privacy Policy.
Table of Contents
- What cookies are
- How we ask for your consent
- The cookies we use
- Cookies set during checkout
- Managing cookies in your browser
- Changes and contact
1. What cookies are
Cookies are small text files that a website stores on your computer or phone. Some last only for your visit ("session" cookies); others stay until they expire or you delete them ("persistent" cookies). "First-party" cookies are set by ekocommercial.com; "third-party" cookies are set by another company whose service is embedded in a page. We also use similar technologies such as browser local storage for the same purposes; where we say "cookies" below we include these.
With your consent, we use Google's advertising tags (Google Ads and Google Merchant Center), which Shopify's Google & YouTube app adds to the website; their cookies are listed in section 3 below. We do not use session-recording tools, chat widgets, social-media "like" buttons or device fingerprinting on this website.
2. How we ask for your consent
- When you first visit, a banner from our consent tool, Consentmo, offers Accept, Reject and Preferences. Until you choose, only essential cookies are set.
- Accept turns on the Statistics and Marketing cookies listed below. Reject keeps them off. Preferences lets you choose by category (Statistics, Marketing, Preferences — Statistics and Marketing are in use today). If you switch on only one of Statistics or Marketing, Google's tags still load for that category; for the category you left off they set none of its cookies and send Google only signals marked as not consented for it (for example, that a page was viewed), which Google may use for aggregate measurement.
- You can change your mind at any time: click Cookie preferences in the website footer to reopen the panel.
- If your browser sends a Global Privacy Control signal (an Opt-Out Preference Signal), we treat it as a Reject for that browser and as an opt-out of sale/sharing: Statistics and Marketing cookies are not set. See our Privacy Policy, section 5, for how the signal is linked to your browser or account.
- Your choice is stored in the
cookieconsent_statuscookie for one year; if you clear your cookies, the banner will ask again.
3. The cookies we use
Last scanned: October 15, 2026 (Omnialta measurement).
Essential cookies (always on; no consent needed)
These are required for the website, the cart, your account, your consent choice and security to work. Some are set only when you use the related feature (for example logging in, or entering a store password).
| Name | Purpose | Provider | Duration | Party |
|---|---|---|---|---|
_shopify_essential |
Session, cart and anti-tampering information needed to run the store | Shopify | 1 year | 1st |
_shop_app_essential |
Needed for Shop / Shop Pay functions in the store | Shopify | 1 year | 3rd (.shop.app, operated by Shopify) |
_shopify_test |
Checks whether your browser accepts cookies | Shopify | Session | 1st |
_shopify_country |
Stores the country detected from your connection so prices show in the right currency without repeating the lookup | Shopify | Session | 1st |
keep_alive |
Used in connection with buyer localization (keeps your country/language setting) | Shopify | Session | 1st |
localization |
Keeps the country/region setting for the cart | Shopify | 1 year (measured; Shopify lists a shorter value) | 1st |
cart |
Remembers the contents of your cart | Shopify | Up to 13 weeks (measured; Shopify lists 2 weeks) | 1st |
cart_currency |
Starts a new cart in the same currency after a checkout | Shopify | 2 weeks | 1st |
shopify_recently_viewed |
Stores recently viewed products for easy access | Shopify | 1 day | 1st |
_tracking_consent |
Stores your tracking-consent choice for Shopify's Customer Privacy API | Shopify | 2 years | 1st |
_cmp_a |
Used for managing customer privacy settings | Shopify | 1 day | 1st |
secure_customer_sig |
Used in connection with customer login | Shopify | 1 year | 1st |
storefront_digest |
Used in connection with customer login (set after you enter a store password) | Shopify | 1 year | 1st |
_storefront_u |
Used to facilitate updating customer account information | Shopify | 1 minute | 1st |
customer_account_locale |
Remembers the language of your customer account | Shopify | 1 minute | 1st |
identity-state |
Used in connection with customer authentication | Shopify | 24 hours | 1st |
identity_customer_account_number |
Used in connection with customer authentication | Shopify | 12 minutes | 1st |
auth_state_* |
Stores your sign-in state before redirecting you to Shop to authenticate | Shopify | 25 minutes | 1st |
login_with_shop_finalize |
Completes a "Log in with Shop" sign-in | Shopify | 5 minutes | 1st |
user |
Used in connection with Shop login | Shopify (Shop) | 1 year | 3rd (shop.app, operated by Shopify) |
user_cross_site |
Used in connection with Shop login | Shopify (Shop) | 1 year | 3rd (shop.app, operated by Shopify) |
order |
Allows access to your order-status page after a purchase | Shopify | 3 minutes | 1st |
cookieconsent_status |
Stores your Accept / Reject choice | Consentmo | 1 year | 1st |
cookieconsent_preferences_disabled |
Stores which cookie categories you turned off | Consentmo | 1 year (measured; Consentmo lists 1 day) | 1st |
gdprCache |
Caches your consent settings so the banner does not re-ask on every page (browser local storage, not a cookie) | Consentmo | Until you clear site data | 1st |
csmConsentIdentifier |
Random identifier that links your consent record to this browser (browser local storage) | Consentmo | Until you clear site data | 1st |
consentHeader |
Stores the consent header sent with your preferences (browser local storage) | Consentmo | Until you clear site data | 1st |
csmADACountryDetection |
Determines your country for Consentmo's accessibility features | Consentmo | 1 year | 1st |
__cf_bm |
Bot protection for the hCaptcha challenge on the Your Privacy Choices opt-out form; only set when you open that page; holds no personal information | Cloudflare (for hCaptcha) | 30 minutes | 3rd (.hcaptcha.com) |
Checkout and Shop Pay cookies (essential)
Checkout runs on Shopify's secure checkout pages on this domain. These cookies keep your checkout session and, if you use it, Shop Pay working; they are essential to completing a purchase.
| Name | Purpose | Provider | Duration | Party |
|---|---|---|---|---|
checkout |
Identifies your checkout session | Shopify | 21 days | 1st |
checkout_token |
Used in connection with checkout | Shopify | 14 days | 1st |
_checkout_queue_token |
Used when there is a queue during the checkout process | Shopify | 1 year | 1st |
discount_code |
Remembers a discount code applied to your checkout | Shopify | Session | 1st |
shopify_pay |
Used in connection with checkout (Shop Pay) | Shopify | 1 year | 1st |
shopify_pay_redirect |
Used in connection with checkout (Shop Pay) | Shopify | 30 minutes | 1st |
shop_pay_accelerated |
Used in connection with checkout (Shop Pay accelerated checkout) | Shopify | 1 minute | 1st |
skip_shop_pay |
Disables Shop Pay as a payment method for a checkout | Shopify | 1 year | 1st |
hide_shopify_pay_for_checkout |
Used in connection with checkout (hides the Shop Pay option) | Shopify | Session | 1st |
_pay_session |
Session cookie for Shop Pay | Shopify (Shop Pay) | Session | 3rd (pay.shopify.com, operated by Shopify) |
Statistics cookies (set only after you choose Accept or switch on Statistics under Preferences)
| Name | Purpose | Provider | Duration | Party |
|---|---|---|---|---|
_ga |
Google Analytics: a random ID that tells one browser from another so page views can be counted per visitor | Google LLC | 2 years | 1st |
_ga_* (_ga_ followed by a Google tag ID; one cookie per tag) |
Google Analytics 4 and the Google Merchant Center tag: keep session state for our Google Analytics property and for measuring visits from our Google Shopping listings | Google LLC | 2 years | 1st |
_shopify_s |
Shopify analytics: identifies a browser session | Shopify | 30 minutes | 1st |
_shopify_y |
Shopify analytics: identifies a returning browser | Shopify | 1 year | 1st |
_shopify_analytics |
Shopify analytics data for buyer-facing pages | Shopify | 1 year | 1st |
_landing_page |
Shopify analytics: records the page you landed on | Shopify | 14 days | 1st |
_orig_referrer |
Shopify analytics: records the site that referred you | Shopify | 2 years | 1st |
shop_analytics |
Shopify analytics | Shopify | 30 minutes | 1st |
Google Analytics sets these cookies only after Accept (or Statistics under Preferences), and it is not loaded at all after Reject or when a Global Privacy Control signal is present. Google's description of these cookies is at https://policies.google.com/technologies/cookies. Shopify's own analytics cookies are set first-party by Shopify and are governed by the banner's Statistics category through Shopify's Customer Privacy API where it applies; Shopify classifies them as analytics.
Marketing and Preferences cookies
Marketing cookies are set only after you choose Accept or switch on Marketing under Preferences. They are not set after Reject or when a Global Privacy Control signal is present. If you chose Accept and later opt out on our Your Privacy Choices page, our contact-form tag is switched off; Google's other advertising tags may still read or set these cookies, but switch to Google's restricted data processing, in which Google acts only as our service provider and does not use your data to personalize ads. Google's advertising tags (Google Ads tag AW-18504863165 and the Google Merchant Center tag, added by Shopify's Google & YouTube app, plus a Google Ads tag we add through Shopify's Customer events to record contact-form submissions) use them to tell us which visits, quote requests and purchases came from our Google ads and Shopping listings, and we may also use them to show EKO Commercial ads on Google to people who have visited this website ("remarketing"). Under some US state privacy laws this may be a "sale" or "sharing" of personal information; see our Privacy Policy, section 4. Shopify classifies _shopify_marketing as a marketing cookie and governs it through its Customer Privacy API. No Preferences cookies are in use today. If we add any, we will list them here and they will stay off until you accept them in the banner.
| Name | Purpose | Provider | Duration | Party |
|---|---|---|---|---|
_gcl_au |
Google Ads conversion linker: a random ID that lets Google Ads link visits and purchases on this website to clicks on our ads | Google LLC | 90 days | 1st |
_gcl_aw (and related _gcl_* cookies) |
Google Ads: stores the details of a Google ad click. Set only when you arrive by clicking one of our Google ads (not seen in our scan, which did not use an ad click) | Google LLC | 90 days | 1st |
_gcl_ls |
Google Ads conversion linker: keeps the same ad-click and conversion information in browser local storage (not a cookie) | Google LLC | Until you clear site data | 1st |
_shopify_marketing |
Shopify marketing data for buyer-facing pages (Shopify's own marketing category) | Shopify | 1 year | 1st |
When these tags send data to Google, Google may also read or set its own cookies on its domains (for example google.com and doubleclick.net) if your browser allows third-party cookies; Google describes them at https://policies.google.com/technologies/cookies. You can control the ads Google shows you at https://myadcenter.google.com.
Cookies set by embedded payment buttons
| Name | Purpose | Provider | Duration | Party |
|---|---|---|---|---|
NID |
Set on google.com by the Google Pay button embedded in the cart and buy buttons. Google says it stores preferences and helps protect against abuse. It is necessary for the payment button to work. | Google LLC | 6 months | 3rd (.google.com) |
The PayPal and Shop Pay buttons load in frames from paypal.com and shopify.com; they did not set cookies on this website in our tests, but their own privacy policies apply once you click them.
Shopify's storefront scripts may also write short-lived entries to your browser's local storage (for example _shs_state, signInWithShop:*, __shopify_agent_context_events, wpm-ri-*) for the same essential and analytics purposes as the cookies above; they are covered by the same categories and consent choices.
4. Cookies set during checkout
Checkout runs on Shopify's secure checkout pages. Shopify sets additional first-party cookies there (for example checkout, checkout_token, _tracking_consent, shopify_pay*, order) to keep your checkout session, remember your consent choice and, if you use it, log you into Shop Pay. Shopify documents them at https://www.shopify.com/legal/cookies. These cookies are essential to completing a purchase.
5. Managing cookies in your browser
You can also block or delete cookies in your browser. Blocking essential cookies will stop the cart and checkout from working.
General information about cookies: https://www.allaboutcookies.org.
6. Changes and contact
We re-scan the website for cookies before each release and update this page when the list changes; the date at the top shows the latest version. Questions: support@ekonorthamerica.com, (866) 987-2980, or our contact form.
