What is the `_secure_session_id` cookie?no consent needed

Set by Shopify (Shopify Inc.). Expires after 24 hours.

Strictly necessary — it can load freely

Cookies essential to the service are exempt from consent under ePrivacy Art. 5(3) — but _secure_session_id must still be disclosed in your cookie policy.

Purpose

Keeps track of the visitor's session in the Shopify storefront.

Cookie details

Cookie name: _secure_session_id
Service: Shopify
Provider: Shopify Inc.
Category: Strictly Necessary
Duration: 24 hours
Consent: Not required

GDPR requirements

Strictly necessary cookies are essential for the website to function and cannot be switched off. They are set only in response to actions made by you — such as logging in or filling forms. No consent is required.

For _secure_session_id to be compliant, it must be:

May be set as soon as the visitor arrives — no consent needed
Still disclosed in your cookie policy, with what it does and why it is necessary
Not shown as a toggle in your consent banner

How to handle it

1
Let it load freely
No consent gate is needed for this cookie.
2
Disclose it
List it in your cookie policy as strictly necessary for Shopify.
3
Keep it out of the toggles
Strictly necessary cookies shouldn't be switchable in your consent UI.