What is the cart Cookie?
Set by Shopify (Shopify Inc.). Expires after 2 weeks.
Purpose
Stores the shopping cart token so that the cart contents persist across page loads.
Strictly necessary for the cart and checkout to function. No consent required.
Cookie Details
| Cookie Name | cart |
| Service | Shopify |
| Provider | Shopify Inc. |
| Category | Strictly Necessary |
| Duration | 2 weeks |
| Consent Required | No — strictly necessary |
Category: Strictly Necessary
Strictly necessary cookies are essential for the website to function and cannot be switched off. They are set only in response to actions made by you — such as logging in or filling forms. No consent is required.
GDPR Requirements
The cart cookie is strictly necessary and does not require user consent under GDPR and the ePrivacy Directive. It may be set when the user first visits your site.
However, you must still disclose this cookie in your cookie policy, explaining what it does and why it is necessary.
How to Handle This Cookie
- It can load freely — no need to block Shopify behind a consent gate for this specific cookie.
- Disclose it — list it in your cookie policy explaining it is strictly necessary for shopify functionality.
- Don't add a checkbox for it — strictly necessary cookies should not be listed as toggleable in your consent UI.
Other Shopify Cookies
| Cookie | Category | Duration |
|---|---|---|
| _shopify_y | Analytics | 1 year |
| _shopify_s | Analytics | 30 minutes |
| _shopify_sa_t | Marketing / Advertising | 30 minutes |
| _shopify_sa_p | Marketing / Advertising | 30 minutes |
| _shopify_fs | Analytics | 1 year |
| secure_customer_sig | Strictly Necessary | 1 year |
| _orig_referrer | Analytics | 2 weeks |
| _landing_page | Analytics | 2 weeks |
Is this cookie on your website?
Scan your website to see every cookie it sets, whether they're blocked before consent, and get a full GDPR compliance report.
Scan your website free →