Cookie Policy
Cookie Policy
Last updated August 11, 2026
This policy explains the cookies and similar technologies used on vitalplanet.com, what they do, who provides them and how long they stay on your device. It covers our online store. It does not cover other websites we link to.
Changing your choices. You can review or change your cookie choices at any time using the cookie settings button in the lower corner of any page on our site. If you are in California or another state with applicable privacy laws, you can also use our Do Not Sell or Share My Personal Information page and our Privacy Requests page.
What these technologies are
A cookie is a small text file a website stores on your device. We also use technologies that work in a similar way, including local storage, tracking pixels and scripts loaded from other companies. Throughout this policy we refer to all of them as cookies unless the distinction matters.
Some are set by us. Others are set by companies that provide services on our behalf, such as our email platform, our loyalty programme or our advertising measurement. Where a cookie is set by another company, that company is named in the tables below.
How we group them
Every cookie below falls into one of four groups. Only the first group is always active. The rest depend on the choices you make in our cookie settings, and on the privacy laws that apply where you are.
- Necessary. Required to run the store, keep your cart, process an order and remember your privacy choices. These cannot be switched off.
- Preferences. Remember choices such as language, region and content you have already seen.
- Statistics. Help us understand how visitors use the site so we can improve it.
- Marketing. Measure our advertising and help show relevant ads on other sites.
Two things worth calling out
Location checks for California safety warnings
California's Proposition 65 requires certain products to carry a safety warning for customers in California. To know whether that warning applies to you, our store checks your approximate location when you visit. That check sends your IP address to a location lookup service and returns only a country, region and city. It does not identify you, it is not used for advertising and the result is not shared with advertising partners. We treat it as strictly necessary because without it we cannot meet a legal obligation.
Measurement handled on our own servers
Some analytics and advertising measurement is processed through our own subdomain rather than sent directly from your browser to a third party. This means certain identifiers are stored as first party cookies even though the information is ultimately shared with Google. We list those cookies below under Statistics and Marketing so the picture is complete. Being first party does not change what the data is used for, and your cookie choices apply to them in the same way.
Necessary
These are required for the site to work. They cannot be switched off in our cookie settings.
Cloudflare 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| __cf_bm | Cookie | Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. | session |
Consentmo 5
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| cookieconsent_preferences_disabled | Cookie | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | 1 years |
| cookieconsent_status | Cookie | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | 1 years |
| csmADACountryDetection | Local storage | Determines the user's country for accessibility features. (Storage type: localStorage) | Session |
| csmConsentIdentifier | Local storage | Consent/preference storage required to remember user choices and operate the preference center. (Storage type: localStorage) | Session |
| gdprCache | Local storage | Consent/preference storage required to remember user choices and operate the preference center. (Storage type: localStorage) | Session |
Discount Ninja 3
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| la-dn-478506830821282-cached-cart-v8 | Local storage | Cached cart data for LimoniApps to support checkout and cart functionality. | persistent |
| la-dn-cart-summary-widget | Local storage | Local storage entry for cart summary widget, enhancing UX for cart display. (Storage type: localStorage) | persistent |
| laravel_session | Cookie | Application session identifier used by the promotions service to keep your session consistent across page loads. | Session |
Klaviyo 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| __kla_off | Cookie | Set by our consent controls to switch Klaviyo tracking off until marketing consent is given. | Session |
Shopify 47
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _ab | Cookie | Controls when Shopify's admin bar is shown on the storefront. | session |
| _checkout_queue_token | Cookie | The _checkout_queue_token cookie is set by Shopify to manage customers during periods of high checkout traffic. It assigns a queue token when a checkout waiting queue is activated, ensuring customers are processed fairly and can continue their checkout session once admitted. | 1 years |
| _identity_session | Cookie | The _identity_session cookie is Shopify's primary identity authentication session cookie. It is a Rails-based session cookie that maintains the authenticated merchant session by storing a session identifier (SID), enabling secure login and access to Shopify merchant services. | 2 years |
| _merchant_essential | Cookie | The _merchant_essential cookie is set by Shopify to store information required for Shopify merchant-facing interfaces, such as the admin dashboard, to function correctly. It maintains essential session and application state needed for secure access and core administrative features. | 1 years |
| _pay_session | Cookie | The Rails session cookie for Shopify Pay. | session |
| _shop_app_essential | Cookie | Contains essential information for the correct functionality of Shop.app. | 1 years |
| _shopify_country | Cookie | For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request. | session |
| _shopify_essential | Cookie | Contains essential information for the correct Functionality of a store such as session and checkout information and anti-tampering data. | 1 years |
| _shopify_essential_ | Cookie | Contains an opaque token that is used to identify a device for all essential purposes. | 1 years |
| _shopify_test | Cookie | Used to check cookie capabilities on the client. | 1 minutes |
| _shs_state | Local storage | Stores state information related to Shopify's shop session. (Storage type: localStorage) (Storage type: localStorage) | Session |
| _storefront_u | Cookie | Used to facilitate updating customer account information. | 1 minutes |
| _tracking_consent | Cookie | Stores a visitor's privacy preferences when privacy rules are configured for the visitor's region. | 2 years |
| auth_state_* | Cookie | Stores authentication state before redirecting customers to third party for authentication. | 25 minutes |
| Cart | Cookie | Used in connection with shopping cart. | 14 days |
| cart | Cookie | Stores the contents of your shopping cart. | 2 weeks |
| cart_currency | Cookie | Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout. | 14 days |
| checkout | Cookie | Used by checkout to identify the user. | 21 days |
| checkout_token | Cookie | Identifies the visitor's active Shopify checkout session. | 14 days |
| consentHeader | Local storage | Stores the consent header for user preferences on cookie usage. (Storage type: localStorage) | Session |
| customer_account_locale | Cookie | Used in connection with new customer accounts | 1 minutes |
| discount_code | Cookie | Used in connection with checkout. | session |
| hide_shopify_pay_for_checkout | Cookie | Used in connection with checkout payment gateway options. | session |
| identity-state | Cookie | Used in connection with customer authentication. | 24 hours |
| identity_customer_account_number | Cookie | Stores an identifier used to facilitate login across customer-account and storefront domains. | 12 minutes |
| in_checkout_profile_preview | Cookie | Used to determine if a merchant is in a checkout profile preview session. | 1 session |
| keep_alive | Cookie | Determines whether a request is the first request of a session when international domain redirection is enabled. | 14 minutes |
| la-dn-tracing-offerdata-sent | Local storage | Flag indicating offer data has been sent, part of marketing/offer tracking. (Storage type: localStorage) | persistent |
| la-dn-trigger-pages-visited-list | Local storage | Local storage item storing list of visited pages for tracking purposes. (Storage type: localStorage) | persistent |
| localization | Cookie | Used in connection with checkout. | 2 minutes |
| login_with_shop_finalize | Cookie | Used in connection with customer authentication when logging in with a user profile account. | 5 minutes |
| master_device_id | Cookie | Used in connection with merchant login. | 2 years |
| order | Cookie | Used to allow access to the data of the order details page of the buyer. | 3 weeks |
| profile_preview_token | Cookie | Used in connection with checkout to identify user profiles. | 5 minutes |
| sca_products_session | Local storage | Session storage for product data, essential for site session functionality. | Session |
| shop_pay_accelerated | Cookie | Used in connection with the Shop Pay payment gateway during checkout. | 1 minutes |
| shopify:webmcp_adapter_loaded | Local storage | Set by Shopify to indicate that the internal Web MCP adapter has been successfully loaded. It is used for internal coordination between Shopify's storefront components and is strictly necessary for the correct functioning of the Shopify platform. (Storage type: localStorage) | Session |
| shopify_client_id | Cookie | Used by the website's Shopify platform to enable e-commerce functions. | 1 year |
| shopify_pay | Cookie | Used in connection with Shopify's checkout payment gateway. | 1 minutes |
| shopify_pay_redirect | Cookie | Used in connection with the checkout payment gateway. | 30 minutes |
| signInWithShop:cartSyncTransferAttemptedAt | Local storage | Local storage flag for Shopify Sign in with Shop cart sync status. (Storage type: localStorage) | Session |
| signInWithShop:cartSyncTransferCompletedAt | Local storage | Tracks completion status of cart sync for Shopify Sign in with Shop customer accounts. (Storage type: localStorage) | Session |
| skip_shop_pay | Cookie | Disables Shop Pay as a payment method for a checkout. | 1 years |
| storefront_digest | Cookie | Stores a digest of the storefront password so authorized users can access or preview a password-protected storefront. | 2 years |
| theme | Cookie | Used to determine the theme of the storefront. | 1 minutes |
| user | Cookie | Used in connection with Shop login. | 1 years |
| user_cross_site | Cookie | Used in connection with Shop login. | 1 years |
Warnify (Elsner) 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| els_geo | Cookie | Stores your approximate location so we can determine whether a California Proposition 65 safety warning must be shown to you. | Session |
Preferences
These remember choices you make, such as language, region or what you have already been shown.
Bogos 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| bogos_discounts_apply | Local storage | Local storage for applying BOGOS discount rules and promotions on the store. | persistent |
Discount Ninja 15
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| la-dn-478506830821282-legacy-idb-deleted | Local storage | Legacy flag in local storage related to IndexedDB cleanup for a widget or app. (Storage type: localStorage) | Session |
| la-dn-bucket-product-api | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-bucket-product-liquid | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-country-info | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-discountcodes-to-load | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-discountninjalog | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-discountninjatracing | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-fallback-to-draft-order | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-gifts-quantity-in-session | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-offerinfo-requested-auto-0-51-US | Local storage | Local storage for offer or upsell information, likely tied to a personalization widget. | Session |
| la-dn-original-referrer | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-session-id | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-trigger-scroll-percentage | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-trigger-time-on-page | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
| la-dn-triggers-from-discountcode | Local storage | A local storage entry set by Discount Ninja. Used to operate the service described above. | Session |
QR App (Kaktus) 6
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| QRShopifyKaktusAppAfterPagesNumber | Local storage | QR code app tracking for page views or engagement count. | persistent |
| QRShopifyKaktusAppAfterTimeNumber | Local storage | QR code app tracking for post-purchase or engagement timing. | persistent |
| QRShopifyKaktusAppCurrentShownPerMonth | Cookie | Unclassified cookie related to Shopify application. | 1 month |
| QRShopifyKaktusAppPerDayNew | Cookie | Unclassified cookie related to Shopify application. | 1 day |
| QRShopifyKaktusAppStartDatePerDay | Cookie | Unidentified cookie; purpose and provider cannot be determined. | Session |
| QRShopifyKaktusAppStartDatePerMonth | Cookie | Unclassified cookie related to Shopify application. | 1 month |
Recurpay 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| recurpay_cart_upsell | Local storage | A local storage entry set by Recurpay. Used to operate the service described above. | Session |
Replo 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _replo_sid | Local storage | A local storage entry set by Replo. Used to operate the service described above. | Session |
Shopify 6
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| forms_fallback_session_id | Local storage | A local storage entry set by Shopify. Used to operate the service described above. | Session |
| forms_previous_session_id | Local storage | A local storage entry set by Shopify. Used to operate the service described above. | Session |
| is_eu | Local storage | Flag indicating EU user location for consent and privacy compliance. | persistent |
| la-dn-tracing-correlation-id | Local storage | Local storage tracing ID for correlating user activity and offers. (Storage type: localStorage) | Session |
| la-dn-trigger-pages-visited | Local storage | Local storage tracking visited pages for analytics or triggers. (Storage type: localStorage) | persistent |
| shopify_override_user_locale | Cookie | Stores the selected Shopify user locale as a user preference. | 1 years |
Smile.io 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| smile_dd_session | Local storage | A local storage entry set by Smile.io. Used to operate the service described above. | Session |
Statistics
These help us understand how the site is used so we can improve it.
Discount Ninja 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| la-dn-478506830821282-limoniapps.deviceid.v2 | Local storage | LimoniApps device identifier storage for user tracking and app functionality. | persistent |
Google Analytics (GA4) 5
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _ga_29Z6CB9XWJ | Cookie | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | Session |
| _ga_H14V7P6NG2 | Cookie | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | Session |
| FPGSID | Cookie | Unclassified cookie with no identifiable purpose. | Session |
| FPID | Cookie | Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. | session |
| FPLC | Cookie | This FPLC cookie is the cross-domain linker cookie hashed from the FPID cookie. It’s not HttpOnly, which means it can be read with JavaScript. It has a relatively short lifetime, just 20 hours. | session |
Reviews.io 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| ri-tjgLOGVITye93GUvpziGKBeEKXSW-z | Local storage | Random identifier stored in local storage, likely for user/session tracking or analytics. | Session |
Shopify 13
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| __shopify_agent_context_events | Local storage | Stores context events for Shopify analytics and web pixels. (Storage type: localStorage) (Storage type: localStorage) | Session |
| _landing_page | Cookie | Captures the landing page when a visitor arrives from another site for Shopify reporting and analytics. | 2 years |
| _merchant_analytics | Cookie | Contains analytics data for the merchant session. | 1 years |
| _orig_referrer | Cookie | Allows the merchant to identify where visitors arrived from for Shopify reporting and analytics. | 2 years |
| _shopify_analytics | Cookie | Contains analytics data for buyer surfaces such as the storefront or checkout. | 1 years |
| _shopify_ga | Cookie | Shopify and Google Analytics interface tracking. | session |
| _shopify_s | Cookie | Identifies your browser and store combination for the duration of a visit, so page views can be counted as one session. | 30 minutes |
| _shopify_y | Cookie | Identifies a returning browser so repeat visits can be counted without identifying you personally. | 1 years |
| forms_visit_count | Local storage | Zählt die Anzahl der Seitenaufrufe eines Besuchers, damit Shopify Forms entscheiden kann, wann ein Anmeldeformular oder Pop-up eingeblendet wird. (Storage type: localStorage) | Session |
| isWebPixelLoaded | Local storage | A local storage entry set by Shopify. Used to operate the service described above. | Session |
| shop_analytics | Cookie | Holds the information Shop needs to report on how the store is used. | 30 minutes |
| u_scsid | Local storage | Session identifier for maintaining user state and cart on Shopify store | Session |
| wpm-ri-b6380b38-6548-4f27-bddc-652fa7388628-1784297496-z | Local storage | Shopify Web Pixels Manager storage for analytics and tracking consent. | persistent |
Smile.io 1
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| __smile_rum_session__ | Local storage | A local storage entry set by Smile.io. Used to operate the service described above. | Session |
Marketing
These are used to measure advertising and to show you relevant ads on other sites.
Discount Ninja 3
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| la-dn-478506830821282-promotionevent-queue | Local storage | Queue for promotion events in LimoniApps discount and marketing automation. | persistent |
| la-dn-478506830821282-triggers-from-discountcode | Local storage | Stores discount code triggers for promotions and offers. | persistent |
| la-dn-offerinfo-auto-0-51-US-valid-in-session | Local storage | Stores session-based offer and discount validity information for US region. | Session |
Google Ads 4
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _gcl_au | Cookie | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | 3 months |
| _gcl_ls | Local storage | Google Ads conversion linker local storage for ad click and conversion tracking. | persistent |
| IDE | Cookie | Cookie pubblicitario di terza parte gestito da Google Ads (tramite i server DoubleClick). Viene utilizzato per mostrare annunci pertinenti e personalizzati agli utenti su altri siti web in base alla loro navigazione, evitando di mostrare ripetutamente la stessa pubblicità. | 2 years |
| test_cookie | Cookie | Used by Google to check whether your browser will accept advertising cookies. | 15 minutes |
Google Analytics (GA4) 2
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _ga | Cookie | ID used to identify users | 2 years |
| FPAU | Cookie | Assigns a specific ID to the visitor. This allows the website to determine the number of specific user-visits for analysis and statistics. | session |
Klaviyo 8
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| $last_referrer | Local storage | Stores most recent referrer URL for session attribution and analytics. (Storage type: localStorage) | Session |
| $referrer | Local storage | Stores initial referrer URL for user behavior and traffic source analysis. (Storage type: localStorage) | Session |
| __kl_key | Local storage | Klaviyo local storage key used for customer identification, email marketing tracking and personalization on Shopify stores. (Storage type: localStorage) | Session |
| __kla_id | Cookie | This cookie is used to collect information about the visitor's behaviour. This information will be stored on the website for internal use. | 2 years |
| external_id | Cookie | Holds an external identifier for user tracking. | Session |
| kl-post-identification-sync | Local storage | Syncs customer identification data for email marketing and retargeting. (Storage type: localStorage) | Session |
| klaviyoOnsite | Local storage | Saves and manages Klaviyo Data for proper functionality (Storage type: localStorage) (Storage type: localStorage) (Storage type: localStorage) (Storage type: localStorage) | Session |
| klaviyoPagesVisitCountV2 | Local storage | Statistics for Klaviyo direct marketing platform. (Storage type: localStorage) | Session |
Meta (Facebook and Instagram) 3
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _fbp | Cookie | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 4 months |
| lastExternalReferrer | Local storage | Stores the last external referrer for tracking user navigation. (Storage type: localStorage) | Session |
| lastExternalReferrerTime | Local storage | Stores the timestamp of the last external referrer for tracking. (Storage type: localStorage) | Session |
Shopify 4
| Name | Type | Purpose | Retained for |
|---|---|---|---|
| _shopify_marketing | Cookie | Contains marketing data for buyer surfaces such as the storefront or checkout. | 1 years |
| u_sclid | Local storage | Local storage item on Shopify domain; purpose cannot be determined from name or context. | persistent |
| u_sclid_r | Local storage | Local storage item on Shopify domain; purpose cannot be determined from name or context. | persistent |
| u_scsid_r | Local storage | Local storage item on Shopify domain; purpose cannot be determined from name or context. | persistent |
Your choices
You can accept or reject non essential cookies when you first visit, and change your mind at any time using the cookie settings button in the lower corner of any page. Rejecting them will not stop you shopping with us. Some parts of the site, such as reviews or loyalty points, may not display fully without the cookies that power them.
Most browsers also let you block or delete cookies in their own settings, and let you send a Global Privacy Control signal. We honour that signal where the law requires it.
Changes to this policy
We update this page when the technologies on our site change. The date at the top shows when it was last reviewed.
Contact
If you have a question about this policy or about how we handle your information, email support@vitalplanet.com or use our contact page. Our full Privacy Policy explains how we handle personal information more generally.