Cookie Policy

Last updated: 6 November 2026

This cookie policy explains how Pappelina AB ("Pappelina", "we", "us") uses cookies and similar technologies on pappelina.com: what they do, who provides them and how long they remain on your device.

Who is responsible

Pappelina AB (company registration no. 556656-6187), Krontallsvägen 26, 791 47 Falun, Sweden, is the data controller for personal data collected through cookies and similar technologies on this website. Where a third party sets its own cookies (for example Google, Meta or Microsoft), that third party may also be responsible for its own processing.

What are cookies and similar technologies?

Cookies are small text files that are stored on your device when you visit a website. We also use similar technologies, which this policy refers to collectively as "trackers":

  • Local storage: data stored in your browser that stays until it is deleted.
  • Scripts: code from us or third parties that runs in your browser and may read or set cookies.
  • Pixels: small images or code snippets that send information to a third party when a page loads.

Session trackers are deleted when you close your browser. Persistent trackers remain for the period stated in the tables below, or until you delete them. First-party trackers are set by us; third-party trackers are set by other companies.

Your consent

When you first visit our website, we ask for your consent before using any trackers that are not strictly necessary. Under the Swedish Electronic Communications Act (2022:482) and the GDPR, we only use preference, statistics and marketing trackers if you have consented to them. You can accept all, reject all or choose per category, and you can change or withdraw your consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it.

We use Google Consent Mode. If you decline statistics or marketing trackers, Google tags do not set or read cookies for those purposes, but they may send cookieless signals (such as the fact that a page was loaded, and technical information such as browser type) to Google, which Google uses in aggregated form to model conversions.

Trackers we use

We currently use 194 trackers, grouped by category and provider below. Select a provider to see details.

Strictly necessary 112 trackers

Required for the website and the services you request to work, for example the shopping cart, checkout, log-in, security and remembering your cookie choices. These technologies cannot be switched off in our cookie settings, but you can block them in your browser, which may stop parts of the site from working. Legal basis: necessary to provide the service you have requested (no consent required).

Shopify93
Name Purpose Expiry Type
_secure_session_id Used in connection with navigation through a storefront. Session Cookie
cart Used in connection with shopping cart. 14 days Cookie
cart_sig Used in connection with shopping cart. 14 days Cookie
cart_ts Used in connection with checkout. 14 days Cookie
cart_ver Used in connection with shopping cart. 2 weeks Cookie
cart_currency Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout. 14 days Cookie
checkout_token Used in connection with checkout. 14 days Cookie
secure_customer_sig Used in connection with customer login. 2 years Cookie
_shopify_m Used for managing customer privacy settings. 1 year Cookie
_shopify_tm Used for managing customer privacy settings. 30 minutes Cookie
_shopify_tw Used for managing customer privacy settings. 2 weeks Cookie
_tracking_consent Tracking preferences. 1 year Cookie
identity_state Used in connection with customer authentication. 1 day Cookie
identity_customer_account_number Used in connection with customer authentication. 12 minutes Cookie
_customer_account_shop_sessions Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts. 30 days Cookie
_secure_account_session_id Used to track a user's session for new customer accounts. 30 days Cookie
_shopify_country For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request. Session Cookie
_storefront_u Used to facilitate updating customer account information. 1 minute Cookie
c Used to determine if browser of user accepts cookies or not. 60 days – 10 years Cookie
checkout Used by checkout to identify the user. 21 days Cookie
customer_account_locale Used in connection with new customer accounts. 1 minute Cookie
dynamic_checkout_shown_on_cart Used in connection with checkout. 30 minutes Cookie
hide_shopify_pay_for_checkout Used in connection with checkout. Session Cookie
shopify_pay Used in connection with checkout. 1 year Cookie
shopify_pay_redirect Used in connection with checkout. Session Cookie
shop_pay_accelerated Used in connection with checkout. 1 minute Cookie
keep_alive Used in connection with buyer localization. 14 minutes Cookie
source_name Used in combination with mobile apps to provide personalized checkout behavior when browsing a compatible mobile app store. Session Cookie
master_device_id Used in connection with merchant login. 2 years Cookie
previous_step Used in connection with checkout. 1 year Cookie
discount_code Used in connection with checkout. Session Cookie
remember_me Used in connection with checkout. 1 year Cookie
checkout_session_lookup Used in connection with checkout. 3 weeks Cookie
checkout_prefill Used in connection with checkout. 5 minutes Cookie
checkout_queue_token Used in connection with checkout. 1 year Cookie
checkout_queue_checkout_token Used in connection with payments. 1 year Cookie
checkout_worker_session Used in connection with checkout. 3 days Cookie
checkout_session_token Used in connection with checkout. 3 weeks Cookie
cookietest Use it to make sure our systems are working properly. 1 minute Cookie
order Used to allow access to the data of the order details page of the buyer. 3 minutes Cookie
identity-state Used in connection with customer authentication. 24 hours Cookie
card_update_verification_id Used in connection with checkout. 20 minutes Cookie
customer_account_new_login Used in connection with customer authentication. 24 hours Cookie
customer_account_preview Used in connection with customer authentication. 7 days Cookie
customer_payment_method Used in connection with checkout. 1 hour Cookie
customer_shop_pay_agreement Used in connection with checkout. 1 hour Cookie
pay_update_intent_id Used in connection with checkout. 20 minutes Cookie
localization Used in connection with checkout. 1 year Cookie
profile_preview_token Used in connection with checkout. 5 minutes Cookie
login_with_shop_finalize Used in connection with customer authentication. 5 minutes Cookie
preview_theme Used in connection with the theme editor. Session Cookie
shopify-editor-unconfirmed-settings Used in connection with the theme editor. 16 hours Cookie
wpm-test-cookie Use it to make sure our systems are working properly. Session Cookie
_shopify_essential Stores technically necessary information for the secure and correct operation of the store, such as session, checkout and security information. 1 year Cookie
_shopify_evids Used by Shopify to support essential storefront and checkout functionality, including session continuity and event handling during your visit. Session Cookie
customer_auth_provider This cookie is associated with Shopify's analytics suite. Session Cookie
customer_auth_session_created_at This cookie is associated with Shopify's analytics suite. Session Cookie
_abv Persist the collapsed state of the admin bar. 1 year Cookie
_checkout_queue_token Used when there is a queue during the checkout process. 1 year Cookie
_identity_session Merchant authentication: Main session cookie for Identity authentication. This is the underlying Rails session cookie. It contains the SID. 2 years Cookie
_master_udr123 Device identifier used in connection with merchant (staff) login. Session Cookie
_merchant_essential Contains essential information for the correct functionality of merchant surfaces such as the admin area. 1 year Cookie
_pay_session The Rails session cookie for Shopify Pay. Session Cookie
_shopify_essential_ Contains an opaque token that is used to identify a device for all essential purposes. 1 year Cookie
_shopify_test Used to check cookie capabilities on the client. Session Cookie
auth_state_* Stores authentication state before redirecting customers to third party for authentication. 25 minutes Cookie
in_checkout_profile_preview Used to determine if a merchant is in a checkout profile preview session. Session Cookie
skip_shop_pay Disables Shop Pay as a payment method for a checkout. 1 year Cookie
theme Used to determine the theme of the storefront. 1 minute Cookie
user Used in connection with Shop login. 1 year Cookie
user_cross_site Used in connection with Shop login. 1 year Cookie
_shopify_cmp Shopify consent management platform cookie for GDPR consent handling. Session Cookie
_shop_app_essential Stores information needed for Shop and the Shop app to work correctly, including session and sign-in functions. 1 year Cookie
swiper-bundle.min.js Powers storefront carousels, product sliders and other swipe-enabled content components. — Script
preloads.js Preloads resources needed for Shopify checkout so that orders can be processed securely and smoothly. — Script
loader.init-shop-cart-sync.en.esm.js Supports Shopify cart synchronization and core storefront shopping functionality. — Script
load_feature-ed94c51f.js Shopify storefront script for loading essential site features. — Script
origin_trials-e8afbaf1.js Shopify script for enabling origin trials and essential browser features. — Script
pixel.modern.js Web Pixel Manager script to load analytics and marketing pixels. — Script
consent-tracking-api.js Processes the visitor's privacy and consent settings and controls which analytics and marketing functions may run, based on the consent given. — Script
webmcp-2a3bb74d.js Shopify storefront essential script for core functionality. — Script
standard-actions.js Shopify core storefront script for essential site actions and functionality. — Script
signInWithShop:cartSyncTransferAttemptedAt Local storage flag for Shopify Sign in with Shop cart sync status. Persistent Local storage
shopify:webmcp_adapter_loaded Records whether Shopify's internal WebMCP adapter has loaded. Used only for technical storefront functionality. Persistent Local storage
settings Stores technical site settings for the shop. Persistent Local storage
_shs_state Stores technical status information about the store session so that session-based storefront functions work correctly. Persistent Local storage
modern Provides Shopify's isolated sandbox for a custom pixel. Permitted storefront and checkout events can be passed through it to connected analytics or marketing services, in line with your consent. — Pixel
Shop Pay cart sync Synchronises the cart between the online store, Shop Pay and the Shop app so that products and quantities stay consistent when using accelerated checkout. — Pixel
consentmo-gcmv2-advanced-mode-integration Passes your consent choices to Google Consent Mode v2 so that Google services respect them. — Pixel
shopify-features Provides technically necessary Shopify platform features for the storefront, cart, customer account and other store functions. — Pixel
__st Shopify storefront object containing page and shop identifiers used by Shopify's own scripts. — Pixel
shopify-origin-trials Shopify origin trials script for enabling modern browser features and security. — Pixel
Subify-config Configuration used by the Subify subscriptions app. — Pixel
Consentmo10
Name Purpose Expiry Type
cookieconsent_status This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. 1 year Cookie
cookieconsent_preferences_disabled This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. 1 day Cookie
_cmp_a Used for managing customer privacy settings. 1 day Cookie
fbEventsScriptProxy Consentmo proxy that controls loading of the Meta (Facebook) events script so that it only runs in line with your consent choices. — Script
consentmo_ada.js Script from Consentmo for handling ADA compliance. — Script
consentmo_cookie_consent.js Script for managing cookie consent in compliance with GDPR. — Script
gdprCache Consent/preference storage required to remember user choices and operate the preference center. Persistent Local storage
csmADACountryDetection Determines the user's country for accessibility features. Persistent Local storage
csmConsentIdentifier Consent/preference storage required to remember user choices and operate the preference center. Persistent Local storage
consentHeader Stores information about the visitor's consent decision so that the chosen cookie and privacy settings can be applied. Persistent Local storage
Shopify (theme)9
Name Purpose Expiry Type
bodyScrollLock.min.js Third-party minified library to lock body scrolling, typically used with modals or drawers. — Script
pubsub.js First-party script for handling publish/subscribe events across the site. — Script
global.js Provides core theme functionality and storefront interactions across the website. — Script
cookies.js First-party script for cookie consent management and essential site functionality. — Script
predictive-search.js Provides predictive search results as shoppers enter product and collection search terms. — Script
hero-slider.js First-party script implementing hero section image/content slider for visual presentation. — Script
tab-manager.js First-party script handling tab navigation and content switching on product or info pages. — Script
cart.js Supports shopping cart functionality, including product additions, removals, quantity changes and cart updates. — Script
cart-info-bar-slider.js First-party script controlling cart information bar with sliding animations. — Script

Preferences 17 trackers

Remember your choices, such as language, country, region and currency, and provide enhanced features such as reviews, translations and our Instagram feed. Used only with your consent.

Shopify3
Name Purpose Expiry Type
_ab Used in connection with access to the store admin. Session Cookie
storefront_digest Used in connection with customer login. 1 year Cookie
shopify_override_user_locale Used as a mechanism to set User locale in admin. 1 year Cookie
AddThis2
Name Purpose Expiry Type
__atuvc This cookie is associated with the AddThis social sharing widget, it stores an updated page share count. 2 years Cookie
__atuvs This cookie is associated with the AddThis social sharing widget, which serves a similar purpose to other cookies set by the service. 2 years Cookie
Instafeed (NFCube)2
Name Purpose Expiry Type
instafeed-ce4e000199aece014f1c6f004930a55d.js Loads the Instafeed app, which displays our Instagram feed on the website. — Script
placeholder.png Instafeed performance cookie that serves as a visual placeholder for the app. — Pixel
Orbe2
Name Purpose Expiry Type
orbe.min.js Provides geolocation and localisation features so that visitors are shown the right storefront, domain, language or market for their country or region. — Script
orbeSession Stores session information about localisation and market settings so that the right store version, language, region or currency is kept during the visit. Persistent Local storage
Tapita2
Name Purpose Expiry Type
mpg_saved_language Stores selected language preference for personalized site experience. Persistent Local storage
mpg_saved_country Stores selected country preference for localization or shipping. Persistent Local storage
Google1
Name Purpose Expiry Type
PREF This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on. 10 years Cookie
Cloudflare1
Name Purpose Expiry Type
__cfduid Set by Cloudflare to identify trusted web traffic. It does not correspond to any user ID in the web application and does not store personally identifiable information. 5 years Cookie
MFYZ1
Name Purpose Expiry Type
storefront-script Loads storefront functionality provided by the MFYZ Shopify app. — Script
Lipscore1
Name Purpose Expiry Type
lipscore-v1.js Loads Lipscore product ratings and review widgets. — Script
Langify1
Name Purpose Expiry Type
langify-lib.js Loads Langify, which provides translated language versions of the website. — Script
Grouptify1
Name Purpose Expiry Type
swatch-scripts.js Displays colour and variant swatches that link related products. — Script

Statistics 41 trackers

Help us understand how visitors use the website, so that we can measure and improve its performance and content. Used only with your consent.

Shopify20
Name Purpose Expiry Type
_orig_referrer Track landing pages. 14 days Cookie
_landing_page Track landing pages. 14 days Cookie
tracked_start_checkout Shopify analytics relating to checkout. 2 years Cookie
_s This cookie is used to store for temporary session. Session Cookie
_shopify_d Shopify analytics. Session Cookie
_shopify_fs Shopify analytics. 2 years Cookie
_shopify_s Shopify analytics. 30 minutes Cookie
_shopify_sa_t Shopify analytics relating to marketing & referrals. 2 years Cookie
_shopify_sa_p Shopify analytics relating to marketing & referrals. 30 minutes Cookie
_shopify_y Shopify analytics. 1 year Cookie
_y Shopify analytics. 2 years Cookie
shop_analytics Contains the required buyer information for analytics in Shop. 1 year Cookie
_shopify_ga Contains Google Analytics parameters that enable cross-domain analytics measurement to work. Session Cookie
_merchant_analytics Contains analytics data for the merchant session. 1 year Cookie
_shopify_analytics Stores analytics information for Shopify Analytics, used to measure visits and interactions on the storefront and in checkout. 1 year Cookie
bb8a4071cw5df52f02p06561c06md4694b52m.js Shopify Web Pixels Manager script for analytics and customer event tracking. — Script
shop_events_listener-819172a8.js Shopify storefront script that listens for and reports shop events for analytics tracking. — Script
shopify-perf-kit-3.15.1.min.js Shopify performance monitoring kit for measuring site speed and metrics. — Script
__shopify_agent_context_events Buffers Shopify storefront-agent context events for analytics-permission-aware telemetry. Persistent Local storage
wpm-ri-6f8dcc8c-234d-401d-8546-f3528dea4193-1793975816-z Used by Shopify's Web Pixels Manager to manage delivery of analytics events. Session Local storage
Elevar9
Name Purpose Expiry Type
___ELEVAR_GTM_SUITE--sessionCount Counts the number of sessions for the visitor, used for analytics. Persistent Local storage
___ELEVAR_GTM_SUITE--sessionLandingPageTitle Stores the title of the landing page of the session, used for analytics attribution. Persistent Local storage
___ELEVAR_GTM_SUITE--userId Stores a pseudonymous visitor ID used to connect analytics events. Persistent Local storage
___ELEVAR_GTM_SUITE--cart Stores cart contents for e-commerce analytics events. Persistent Local storage
___ELEVAR_GTM_SUITE--sessionLandingPageUrl Stores the URL of the landing page of the session, used for analytics attribution. Persistent Local storage
___ELEVAR_GTM_SUITE--params Stores campaign parameters (such as UTM tags and ad click IDs) used for attribution. Persistent Local storage
___ELEVAR_GTM_SUITE--sessionId Stores a session ID used to group analytics events. Persistent Local storage
___ELEVAR_GTM_SUITE--cookies Stores copies of analytics and marketing cookie values used for server-side tracking. Persistent Local storage
___ELEVAR_GTM_SUITE--lastDlPushTimestamp Stores the time of the last data-layer event, used to manage analytics event timing. Persistent Local storage
Google Analytics5
Name Purpose Expiry Type
_ga ID used to identify users. 2 years Cookie
_gat Used to monitor number of Google Analytics server requests when using Google Tag Manager. 1 minute Cookie
_ga_1QRQPB0YBX Used to distinguish users for tracking website usage and performance. 2 years Cookie
_ga_KBDET1L8YW Used to distinguish users for tracking website usage and performance. 2 years Cookie
_gid ID used to identify users for 24 hours after last activity. 24 hours Cookie
Microsoft Clarity5
Name Purpose Expiry Type
_clck Set by Microsoft Clarity to store a unique visitor ID and help create analytics reports on how visitors use the website. 1 year Cookie
_clsk Set by Microsoft Clarity to connect multiple page views into a single session recording. 1 day Cookie
clarity.js We improve our products and advertising by using Microsoft Clarity to see how you use our website. — Script
tlz1eery6v Microsoft Clarity project tag that loads Clarity's usage analytics (heatmaps and session recordings). — Script
_cltk Set by Microsoft Clarity to support session and click tracking. Persistent Local storage
Google1
Name Purpose Expiry Type
__utma ID used to identify users and sessions. 2 years Cookie
Google Tag Manager1
Name Purpose Expiry Type
js Loads the Google tag used to send consent-controlled website measurement events to the configured Google destination. — Script

Marketing 24 trackers

Used by us and our advertising partners to show relevant ads on other websites and social media, and to measure the effectiveness of our campaigns. These technologies may track you across websites. Used only with your consent.

Meta Pixel6
Name Purpose Expiry Type
_fbp Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. 3 months Cookie
_fbc Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. 3 months Cookie
478016993636998 Loads the Meta Pixel configuration used to measure the effectiveness of our Facebook and Instagram advertising and to show relevant ads. — Script
lastExternalReferrerTime Stores the timestamp of the last external referrer for Meta Pixel attribution and advertising measurement. Persistent Local storage
lastExternalReferrer Stores the last external referrer to determine how the visitor reached the website for Meta Pixel attribution and advertising measurement. Persistent Local storage
14591114_522455177963955_4105439473083351040_n.jpg Image loaded from Meta's servers as part of our Instagram feed. Loading it transmits technical data, such as your IP address, to Meta. — Pixel
Microsoft Advertising (UET)5
Name Purpose Expiry Type
MUID Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 1 year Cookie
MR Microsoft cookie used to collect information for analytics purposes. 6 months Cookie
SRM_B Microsoft Advertising cookie that identifies a browser across sites for advertising and measurement. 1 year Cookie
SM Microsoft cookie used to measure use of the website. Session Cookie
ANONCHK Used to store session ID for a users session to ensure that clicks from adverts on the Bing search engine are verified for reporting purposes and for personalisation. 10 minutes Cookie
Google Ads4
Name Purpose Expiry Type
_gads Google advertising cookie used to measure ad interactions and to limit how often the same ad is shown. 1 year Cookie
IDE This cookie is used for targeting, analyzing and optimisation of ad campaigns in DoubleClick/Google Marketing Suite. 13 months Cookie
_gcl_au Used by Google Ads to measure the efficiency of advertising across websites using their services. 3 months Cookie
_gcl_ls Google Ads conversion linker local storage for ad click and conversion tracking. Persistent Local storage
AdRoll4
Name Purpose Expiry Type
__adroll This cookie is associated with AdRoll. 1 year Cookie
__adroll_v4 This cookie is associated with AdRoll. 1 year Cookie
__adroll_fpc This cookie is associated with AdRoll. 1 year Cookie
__ar_v4 This cookie is associated with AdRoll. 1 year Cookie
Google3
Name Purpose Expiry Type
GPS Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. 1 day Cookie
NID This cookies is used to collect website statistics and track conversion rates and Google ad personalisation. 1 year Cookie
18512432973 Google Ads conversion and remarketing tag used to measure ad conversions and show relevant ads. — Script
LinkedIn1
Name Purpose Expiry Type
BizoID LinkedIn advertising cookie used to recognise visitors for LinkedIn ad targeting and measurement. 1 month Cookie
Shopify1
Name Purpose Expiry Type
_shopify_marketing Stores marketing-related information so that storefront and checkout interactions can be attributed to marketing activities and their effectiveness measured. 1 year Cookie

Third parties and transfers outside the EU/EEA

Some of our providers, including Google, Meta, Microsoft, LinkedIn, AdRoll and Shopify, may process data collected through trackers in countries outside the EU/EEA, such as the United States. Where this happens, the transfer relies on an adequacy decision (such as the EU–U.S. Data Privacy Framework, for certified companies) or on the European Commission's standard contractual clauses. For information about how each provider handles personal data, see their own privacy policies.

How to manage cookies in your browser

In addition to our cookie settings, you can block or delete cookies in your browser settings. Note that blocking strictly necessary cookies may mean that parts of the website, such as the cart and checkout, will not work. Guidance is available for Chrome, Safari, Firefox and Edge.

Changes to this policy

We update this policy when the trackers on our website change. The date at the top shows when it was last updated.

Contact

If you have questions about our use of cookies, contact us at info@pappelina.com or write to Pappelina AB, Krontallsvägen 26, 791 47 Falun, Sweden. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

To learn more about how we handle personal data, including your rights, see our Privacy Policy.