Cookie Policy

Effective: May 9, 2026 Version: 1.0

Section 1

What Are Cookies

Cookies and similar technologies (localStorage, sessionStorage) are small data files stored on your device. They allow our shop to remember preferences, maintain session state, and measure site usage.

Section 2

Categories We Use

Essential Cookies (always active):

Session, security, CSRF, login persistence
Cart and checkout state
Cookie consent storage itself

Required for the shop to function. Cannot be disabled.

Analytics Cookies (opt-in):

Self-hosted Matomo and XF Analytics
No data shared with Google, Facebook, or third-party processors
Activated only with your consent

Advertising Cookies (opt-in):

Google Ads conversion tracking (only if explicitly enabled)
Off by default; off when GPC is detected

Section 3

Managing Your Preferences

The cookie banner shown on first visit
The "Manage cookies" footer link
Your browser's privacy settings
Enabling Global Privacy Control — we honor it automatically

Section 4

Global Privacy Control

When your browser sends the GPC signal (navigator.globalPrivacyControl=true), we automatically force analytics and advertising off in compliance with CPRA § 7025. The cookie banner reflects the GPC state.

Section 5

Third-Party Services

Stripe — payment processing only at checkout. Stripe sets its own cookies for fraud prevention. See Stripe Privacy Policy.
Self-hosted Matomo — first-party analytics, no third-party processors.

Section 6

Consequences of Disabling Cookies

Disabling essential cookies will break login, prevent CSRF protection, and impair checkout. Disabling analytics has no functional impact.

Section 7

Updates

We may update this Cookie Policy. Material changes that affect consent will reset preferences and re-display the banner.

Contact

For privacy or legal questions, contact legal@xcoldpro.com. To file a verifiable consumer privacy request, use subject line "Privacy Request" or "Do Not Sell".