Cookie Policy
Cookie Policy of Original Grain
This document informs Users about the technologies that help this Application to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Application.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent, depending on the applicable law. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Application uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How this Application uses Trackers
Necessary
This Application uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed by third parties
Shopify (Shopify Inc.)
Shopify is a platform provided by Shopify Inc. that allows the Owner to build, run and host an e-commerce website.
Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, shipping address, Trackers and Usage Data.
Place of processing: Canada – Privacy Policy.
Trackers duration:
- _ab: 3 years
- _customer_account_shop_sessions: 1 month
- _identity_session: 3 years
- _master_udr: duration of the session
- _merchant_essential: 2 years
- _orig_referrer: 14 days
- _pay_session: duration of the session
- _s: 30 minutes
- _secure_admin_session_id: 4 months
- _secure_admin_session_id_csrf: 4 months
- _shopify_country: duration of the session
- _shopify_d: duration of the session
- _shopify_essential: 2 years
- _shopify_essential_: 2 years
- _shopify_evids: duration of the session
- _shopify_fs: 1 year
- _shopify_m: duration of the session
- _shopify_s: 30 minutes
- _shopify_test: 1 minute
- _shopify_tm: duration of the session
- _shopify_tw: duration of the session
- _storefront_u: 1 minute
- _tracking_consent: duration of the session
- _y: 1 year
- auth_state_*: 25 minutes
- c: 2 years
- cart: 14 days
- cart_currency: 14 days
- cart_ver: 14 days
- checkout_queue_checkout_token: 2 years
- checkout_queue_token: 2 years
- checkout_session_token: 21 days
- checkout_worker_session: 3 days
- customer_account_new_login: 20 minutes
- customer_account_preview: 7 days
- customer_auth_provider: indefinite
- customer_auth_session_created_at: indefinite
- discount_code: duration of the session
- keep_alive: duration of the session
- localization: 14 days
- login_with_shop_finalize: 5 minutes
- master_device_id: 2 years
- shopifyChatData: duration of the session
- shopify_pay: 2 years
- source_name: indefinite
- storefront_digest: 2 years
PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: billing address, browser information, company name, data relating to the point of sale, device information, email address, first name, geographic position, identification document, income information, IP address, job position, last name, latitude (of city), longitude (of city), operating systems, order ID, payment info, phone number, profession, profile picture, purchase history, shipping address, time zone, Trackers, Usage Data, username and various types of Data as specified in the privacy policy of the service.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Trackers duration:
- LANG: 8 hours
- __paypal_storage__: indefinite
- akavpau_ppsd: duration of the session
- enforce_policy: duration of the session
- l7_az: duration of the session
- nsid: duration of the session
- ts: duration of the session
- tsrce: duration of the session
- x-cdn: duration of the session
- x-pp-s: duration of the session
Stripe (Stripe, Inc.)
Stripe is a payment service provided by Stripe, Inc.
Personal Data processed: email address, first name, last name, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- 1: indefinite
- __Host-LinkSession: 2 years
- __stripe_mid: 1 year
- __stripe_sid: 30 minutes
- _mf: indefinite
- dashboard.banner-dismissals: duration of the session
- link.auth_session_client_secret: duration of the session
- m: 2 years
- pay_sid: 1 year
Cloudflare Bot Management (Cloudflare, Inc.)
Cloudflare Bot Management is a malicious bot protection and management service provided by Cloudflare, Inc.
Personal Data processed: app information, Application opens, browser information, browsing history, city, clicks, country, county, custom events, device information, device logs, geography/region, interaction events, IP address, keypress events, language, latitude (of city), launches, longitude (of city), metro area, motion sensor events, mouse movements, number of sessions, operating systems, page events, page views, province, scroll position, scroll-to-page interactions, search history, session duration, session statistics, state, touch events, Trackers, Usage Data, video views and ZIP/Postal code.
Place of processing: United States – Privacy Policy.
Trackers duration:
- __cf_bm: 3 seconds
- __cfruid: duration of the session
- _cfuvid: indefinite
- cf_clearance: 30 minutes
- cf_ob_info: 3 seconds
- cf_use_ob: 3 seconds
- cfmrk_cic: 3 months
Cloudflare (Cloudflare, Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Application, i.e., communication between this Application and the User's browser, while also allowing analytical data from this Application to be collected.
Personal Data processed: Trackers and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Trackers duration:
- _cfuvid: indefinite
- cf_clearance: 30 minutes
Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Experience
This Application uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
Trackers managed by third parties
Vimeo video (Vimeo, LLC)
Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Application to incorporate content of this kind on its pages.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- player: 1 year
- sync_active: duration of the session
- vuid: 2 years
Google Fonts (Google LLC)
Google Fonts is a typeface visualization service provided by Google LLC that allows this Application to incorporate content of this kind on its pages.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
YouTube video widget (Google LLC)
YouTube is a video content visualization service provided by Google LLC that allows this Application to incorporate content of this kind on its pages.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- PREF: 8 months
- VISITOR_INFO1_LIVE: 8 months
- VISITOR_PRIVACY_METADATA: 7 months
- YSC: duration of the session
- YtIdbMeta:databases: duration of the session
- iU5q-!O9@$: indefinite
- yt-player-headers-readable: duration of the session
- yt-remote-cast-available: indefinite
- yt-remote-cast-installed: indefinite
- yt-remote-connected-devices: duration of the session
- yt-remote-device-id: duration of the session
- yt-remote-fast-check-period: indefinite
- yt-remote-session-app: indefinite
- yt-remote-session-name: indefinite
- ytidb::LAST_RESULT_ENTRY_KEY: duration of the session
Mailchimp widget (Intuit Inc.)
The Mailchimp widget is a service for interacting with the Mailchimp email address management and message sending service provided by Intuit Inc.
Personal Data processed: email address, first name, last name, phone number, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- cookies.js: duration of the session
Measurement
This Application uses Trackers to measure traffic and analyze User behavior to improve the Service.
Trackers managed by third parties
Google Analytics (Universal Analytics) (Google LLC)
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the performance of this Application.