Cookie policy — Neverover

1. What cookies and similar technologies are

Cookies and similar technologies are small files and tags that let a website recognise your device and remember your actions.

Cookies — small text files stored on your browser or device when you visit a site.
Pixels and web beacons — tiny, often invisible tags (such as the Meta Pixel) that tell us how you interact with our pages or emails.
Local storage — a way for the site to store data in your browser so it persists between visits.
Software development kits (SDKs) and tags — code from our analytics and advertising partners that runs on the page to collect events such as "viewed product" or "added to cart".

Cookies can be first-party (set by us) or third-party (set by a partner such as Google or Meta). They're also either session cookies, which disappear when you close your browser, or persistent cookies, which stay until they expire or you delete them. Because some of these technologies can identify your device or you, the law often treats the data they hold as personal data — which is why we ask for your consent before setting the non-essential ones, as explained below and in our Privacy Policy.

2. Why we use them

We use these technologies to:

keep your shopping cart saved as you move between pages;
let you log in securely to your account;
protect the store and your payments from fraud;
remember your choices, such as language, currency, and region;
understand which products and pages are popular so we can improve;
show you relevant ads on other platforms, where you've allowed it.

3. Cookie categories

We group cookies into four categories so you can choose exactly what you allow. The table below sets out what each category reads, whether it needs your consent, and what happens if you switch it off.

Category	What it reads & does	Consent	If you disable it
Strictly necessary	Session IDs, security tokens, and your cart contents — the basics that make the store and checkout work	Not required (exempt — needed for a service you asked for)	Core features break: you can't log in, hold items in your cart, or check out
Functional	Your preferences, such as language, currency, and region	Required for non-essential preferences	The site forgets your choices and reverts to defaults on each visit
Analytics	How you navigate the site — pages viewed, time on site, where visitors come from	Required	We can't measure site health or see which products are popular, so improvements are slower
Marketing	Persistent identifiers used to measure ads and to target you across other sites	Required (prior, explicit)	You'll see generic rather than personalised ads, and we can't measure ad performance

Strictly necessary cookies are always on because the store cannot run without them. Every other category is off until you opt in (where opt-in applies to you — see Section 5).

4. The cookies we use

Here's a representative list of the cookies you may encounter on our store. The exact set can change, so the live, up-to-date list — with current names and durations — is maintained by our consent tool, which you can open at any time from our preference centre.

Name	Provider	Purpose	Category	Duration
_shopify_essential	Shopify	Keeps the store and checkout working	Strictly necessary	1 year
cart	Shopify	Remembers items in your basket	Strictly necessary	2 weeks
secure_customer_sig	Shopify	Securely recognises you when logged in	Strictly necessary	1 year
__stripe_mid	Stripe / Shopify Payments	Fraud prevention for payments	Strictly necessary	1 year
__stripe_sid	Stripe / Shopify Payments	Session-based fraud detection at checkout	Strictly necessary	30 minutes
localization	Shopify	Remembers your country and currency	Functional	1 year
_shopify_y	Shopify	Visitor analytics	Analytics	1 year
_shopify_s	Shopify	Session analytics	Analytics	30 minutes
_ga	Google	Distinguishes visitors for analytics	Analytics	2 years
_gid	Google	Distinguishes visitors (short-term)	Analytics	24 hours
_fbp	Meta	Ad delivery and retargeting	Marketing	3 months
_gcl_au	Google	Ad conversion measurement	Marketing	3 months
_ttp	TikTok	Measures and improves ad campaign performance	Marketing	13 months
_pinterest_ct_ua	Pinterest	Tracks conversions from Pinterest ads	Marketing	1 year
__kla_id	Klaviyo	Email and SMS marketing engagement	Marketing	2 years

When you first visit, our cookie banner lets you decide what you allow. How it works depends on where you are.

If you're in the EU / UK

We ask for your prior opt-in consent before setting any non-essential cookie. Our banner lets you accept all with one click, reject all just as easily as accepting, or choose by category (for example, allow analytics but reject marketing). No boxes are pre-ticked for optional cookies, and strictly necessary cookies don't need consent and are always on. We record your choice so we don't have to ask on every page, and we'll ask you again after about 12 months, or sooner if we add a materially new use. You can change or withdraw your choice at any time — withdrawing is as easy as giving consent — by reopening the preference centre from our footer.

If you're a US resident

We use an opt-out model. Cookies may be set by default, and you can stop the sharing of your data for behavioural advertising at any time through our Do Not Sell or Share link. We honour Global Privacy Control (GPC) signals from your browser as a valid opt-out request for that browser and device.

6. Third-party cookies

Some cookies are set by trusted partners who help us run analytics and marketing. When these are active they may receive identifiers and browsing events from your device, and their use of that data is governed by their own policies:

Meta — the Meta Pixel measures ad performance and supports retargeting. See Meta's Privacy Policy.
Google — Google Analytics (GA4) and Google Ads measure traffic and conversions. See Google's Privacy Policy.
TikTok — the TikTok Pixel measures the effectiveness of our TikTok ads. See TikTok's Privacy Policy.
Pinterest — the Pinterest Tag measures conversions from Pinterest ads. See Pinterest's Privacy Policy.
Klaviyo — measures engagement with our email and SMS. See Klaviyo's Privacy Policy.

Because these partners are based in the United States, the data involved is transferred under the safeguards described in our Privacy Policy (such as the EU–US Data Privacy Framework or Standard Contractual Clauses).

7. How to control cookies

You can change your mind at any time:

Our preference centre — reopen the cookie banner from the link in our footer to update or withdraw consent by category.
Browser settings — most browsers let you block or delete cookies in their "Privacy" or "Security" settings, and let you clear cookies already stored.
Industry opt-outs — use Your Online Choices (EU), or the NAI and DAA tools (US), to opt out of interest-based advertising.
Global Privacy Control — enable GPC in your browser to signal your privacy preference automatically to sites you visit; we treat it as a valid opt-out of sale and sharing.

A note on Do Not Track (DNT): because there is no agreed industry standard for how sites should respond to DNT browser signals, we do not currently respond to them. We do honour GPC, which has a clearer legal status, as described above. Remember that cookie choices are stored per browser and device, so you'll need to set them again on each device, and if you clear your cookies. Blocking strictly necessary cookies may stop parts of the store, such as checkout, from working.

8. Changes to this policy

We may update this Cookie Policy as our technology or the law changes. When we do, we'll update the "last updated" date at the top, and where a change introduces a materially new use of cookies we'll ask for your consent again. Please check back from time to time.

9. Contact us

For any question about cookies or your privacy, email our privacy team at privacy@neverover.com.