Cookies
Which cookies we set, why, and how to manage them.
Version 2.1 · Last updated: 9 October 2026 · Cookies measured on 7 October 2026
1. Who is responsible
The controller is ColdCake, company number (KBO) 1027149628. Questions about cookies go to info@coldcake.be. All business details are in the Legal notice. How we handle personal data is set out in the Privacy policy.
2. The rule
A cookie is a small file a website stores in your browser. The same rule applies to other storage in your browser, such as localStorage and sessionStorage. Without your consent a website may only store or read something on your device when that is strictly necessary for a service you ask for yourself, such as your cart. Everything else needs your consent (article 10/2 of the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, which implements article 5(3) of Directive 2002/58/EC). We ask for that consent in the cookie bar. You may withdraw it at any time (article 7(3) GDPR).
3. How we measured
On 7 October 2026 we opened coldcake.be in a new Chrome browser without cookies. We visited the homepage, this page, the builder and the contact page and clicked "Decline" in the cookie bar. In a second new browser we did the same with "Accept", and in a third we opened the EERSTECAKE20 discount link. After every step we read out all cookies, including those of other domains, and the browser storage. What follows is what the browser received then, with the retention period as the browser received it. We did not open the page behind the QR code that day; what follows about that page comes from the measurement of 21 September 2026 and from the code of that page.
4. Cookies before your choice and after "Decline"
The site sets these cookies even when you have not chosen yet or chose "Decline". Shopify, the shop platform behind coldcake.be, lists its cookies below among the cookies a shop and Shop need to work (shopify.com/legal/cookies, read on 21 September 2026).
_shopify_essential· Shopify, on coldcake.be · 1 year
Makes the session, cart and checkout work and stores your choice in the cookie bar.localization· Shopify, on coldcake.be · 1 year
Remembers the country and language of the shop.cart_currency· Shopify, on coldcake.be · 14 days
Remembers the currency of your cart.cart· Shopify, on coldcake.be · 91 days
Contents of your cart. Only set once you put something in the cart or use a discount link.discount_code· Shopify, on coldcake.be · until you close the browser
Remembers the discount code you chose with a discount link, such as the EERSTECAKE20 button. Only set when you use such a link or button._shop_app_essential· Shop (shop.app), a Shopify service, third party · 1 year
Makes signing in with Shop and paying with Shop Pay work.__cf_bm· Cloudflare for Cal.com, the appointment planner, third party · 30 minutes
Detects bots. Set on pages where the appointment planner is built in, such as the homepage and the contact page.
In this measurement the site set no _tracking_consent, _shopify_y, _shopify_s, locale_bar_accepted, _ga or Klaviyo cookie, and no page loaded a script from Meta, TikTok or Google Ads.
Your browser does fetch fonts from Google Fonts on every page, program code from cdnjs (Cloudflare) on some pages and from jsDelivr on the page behind the QR code. They set no cookie, but they do see your IP address (Privacy policy, 6).
5. Cookies only after "Accept"
These services only load when you choose "Accept" in the cookie bar, or switch on statistics or marketing in your preferences. In the code of the site, Google Analytics waits for your consent through Shopify's consent function. Before your choice and after "Decline", Google Analytics did not load and Klaviyo set no cookie (measured on 7 October 2026). After "Accept" on 7 October 2026 the browser received _ga, _ga_GEH5KLZJB9, _shopify_analytics, _shopify_marketing and shopify_client_id. The other names below, and the retention periods we did not measure, come from the providers themselves, read on 21 September 2026: Google, Klaviyo and Shopify.
_ga· Google Analytics 4, third party · 400 days (Google says 2 years, Chrome keeps a cookie for at most 400 days)
Statistics: tells visitors apart._ga_GEH5KLZJB9· Google Analytics 4, third party · 400 days, as above
Statistics: remembers your session._shopify_analytics,_shopify_y· Shopify, on coldcake.be · 1 year
Statistics about visits to the shop._shopify_s· Shopify, on coldcake.be · 30 minutes
Statistics: your session._landing_page,_orig_referrer· Shopify, on coldcake.be · 2 weeks
Statistics: which page you arrived on and from where._shopify_marketing· Shopify, on coldcake.be · 1 year
Marketing data of the shop.shopify_client_id· Shopify, on coldcake.be · 1 year
Statistics: recognises your browser on a next visit to the shop.__kla_id· Klaviyo, third party · up to 2 years
Marketing: recognises you as a visitor for ColdCake's emails.
6. Other storage in your browser
Besides cookies, the site stores the following in your browser (measured on 7 October 2026; the three ColdCake items on the page behind the QR code come from the code of that page, because they only appear once the AR starts). "Tab" means: gone once you close the tab (sessionStorage). "Stays" means: stays until you delete it yourself (localStorage).
consentHeader· Shopify · tab
Your choice in the cookie bar, for this tab._shs_state· Shopify · tab
Technical flags from Shopify about your browser, without a name or address.shopify:webmcp_adapter_loaded· Shopify · stays
Technical flag with the value "true".signInWithShop:cartSyncTransferAttemptedAt· Shop · stays
Time at which Shop tried to transfer your cart.cc_draft_v…· ColdCake · 7 days
Keeps a half-finished cake from the builder on your own device, so you can continue later. What you typed about the recipient is only filled back in once you confirm the draft is yours.cc_vlucht_v1::…· ColdCake · tab
After you sent a cake to your cart: what you had filled in in the builder, so the builder warns you if you accidentally send the same cake a second time. No files.ccArGeluid,ccArAutoHerlaad,ccArSidOver· ColdCake, only on the page behind the QR code · tab
Whether the sound is on or off, whether the page has already reloaded itself once after an error, and the random number of your scan, so the notices stay together across that one reload.debug· the AR software on the page behind the QR code · stays
The log level of that software, without any data about you.ccSy· ColdCake · tab
The short address of the page and how far you had scrolled, so the page opens at the same spot after a reload.wpm-…,ri-…,__shopify_agent_context_events· Shopify · tab
Only after "Accept": technical data of the shop's pixels, and the addresses of the pages you viewed in this tab.
The page behind the QR code also sends notices about the scan to our database, without a cookie. What those notices contain is set out in the Privacy policy.
7. Changing or withdrawing your choice
- On a normal page of coldcake.be: click "Manage cookies" at the bottom. The cookie bar opens again and you choose again, also per type of cookie.
- The page behind the QR code has no footer. Open coldcake.be/en/pages/cookies and use "Manage cookies" at the bottom there. Your choice applies to all of coldcake.be, including the page behind the QR code.
- Always possible, also if the link opens nothing for you: delete the cookies of coldcake.be in your browser. Without the cookie
_shopify_essentialthe cookie bar asks for your choice again on your next visit (measured on 21 September 2026).
8. If you do not accept
The site works as usual: you can build, order and pay for a cake. You only get marketing emails if you sign up yourself.
9. Changes
We update this page when the site starts using other cookies. The date at the top shows when that last happened.
ColdCake · KBO 1027149628 · info@coldcake.be