Draper James Cookie Policy

Effective Date: June 2026

This Cookie Policy (“Policy”) describes the different categories of cookies or similar technologies (“Cookies”) that may be used by Cart.com, Inc. in connection with the Draper James site or application you are accessing or using (“Site/Application”) and how you can manage them.

Please note that, to the extent information collected through Cookies constitutes personal data, we process such data in accordance with our Privacy Notice.

What are Cookies?

Cookies are text files containing small amounts of information, which are downloaded to your computer or mobile device by websites/applications that you visit.

Who sets Cookies?

First-party Cookies: When you visit our Site/Application, it asks your browser to store cookies on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us.
Third-party Cookies: We also have Cookies on our Site/Application that are set by third parties. These are Cookies from a domain different than the domain of our Site/Application you are visiting. We use these third-party Cookies for, among other things, our advertising and marketing efforts.

How long will Cookies remain on my device?

The length of time that a Cookie remains on your device depends on whether it is a “session” or “persistent” Cookie.

Session Cookies last until you stop browsing. These are created temporarily. Once you close the browser, all session cookies are deleted.
Persistent Cookies last until they expire or are deleted.

See the section below (“Managing Cookies”) on how to manage Cookies and for more information on removing them before they expire.

How do we use Cookies?

Cookies serve a variety of purposes. They allow us to learn about use of our online services for the purpose of improving services, developing products and services, understanding users’ habits and satisfaction, and improving the functioning of our Site/Application. They also allow us to improve the browsing experience for users by customizing the Site/Application for users, facilitating navigation between webpages, saving content, and remembering users’ preferences.

Types of Cookies we use on our Site/Application and for what purpose

We use the following types of Cookies on our Site/Application:

Strictly Necessary Cookies

These cookies are fundamental in making our Site/Application work. For example, they enable basic functionality such as security and website accessibility. These cookies do not collect or store any personal data.

Analytics Cookies

These Cookies allow us to employ data analytics so we can measure and improve the performance of our Site/Application and provide more relevant content to you. For example, these Cookies may allow us to measure user engagement with our Site/Application and statistics related to our Site/Application. Such information helps us to understand how our Site/Application is used, and to enhance the content, quality, and features of the Site/Application.

Performance Cookies

These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Site/Application. They assist us in understanding which pages are the most and least favoured, and how visitors move around the Site/Application. All information these Cookies collect is aggregated and therefore anonymous.

Functional Cookies

These Cookies enable our Site/Application to provide functionality and personalization and they allow the Site/Application to remember choices you make and customised preference settings (e.g., language choices or preferred text size). These Cookies collect anonymous information and cannot track your movements on other sites. If you do not allow these Cookies, then some or all of our Site/Application may not function properly.

Targeting Cookies

These Cookies collect information about your browsing habits to make advertising relevant to you and your interests. They may be set through our Site/Application and/or by our third-party advertising partners. They may be used by those third parties to build a profile of your interests and show you relevant adverts on other sites. These Cookies may collect certain information about your devices, such as unique device identifiers, IP addresses, and browsing activity. If you do not allow these Cookies, you will experience less targeted advertising.

In the below table we list the Cookies we use on our Site/Application, the purposes for which we use them and their lifespan:

Type/Category	Name	Host	Purpose	Duration
Strictly Necessary	_ab	draperjames.com	Shopify — supports storefront experiment/A-B assignment.	2 weeks
Strictly Necessary	_secure_session_id	draperjames.com	Shopify — maintains a secure session across navigation on the storefront.	1 day
Strictly Necessary	cart	draperjames.com	Shopify — stores the contents of your shopping cart.	2 weeks
Strictly Necessary	cart_sig	draperjames.com	Shopify — verifies the integrity of the cart contents and prevents tampering.	2 weeks
Strictly Necessary	cart_ts	draperjames.com	Shopify — records the cart timestamp.	2 weeks
Strictly Necessary	cart_ver	draperjames.com	Shopify — records the cart version.	2 weeks
Strictly Necessary	checkout_token	draperjames.com	Shopify — token that maintains checkout continuity.	2 weeks
Strictly Necessary	storefront_digest	draperjames.com	Shopify — controls access to a password-protected storefront.	2 weeks
Strictly Necessary	cookieconsent_status	draperjames.com	Cookie-consent manager — stores whether you accepted the cookie banner.	1 year
Strictly Necessary	cookieconsent_preferences_disabled	draperjames.com	Cookie-consent manager — records that preference cookies are disabled.	1 day
Strictly Necessary	_shopify_m	draperjames.com	Shopify — stores marketing/communication consent preferences.	1 year
Strictly Necessary	_shopify_tm	draperjames.com	Shopify — short-lived marketing-consent session timer.	30 minutes
Strictly Necessary	_shopify_tw	draperjames.com	Shopify — marketing-consent tracking cookie.	2 weeks
Strictly Necessary	_tracking_consent	draperjames.com	Shopify — stores your tracking-consent preferences across visits.	1 year
Strictly Necessary	tracked_start_checkout	draperjames.com	Shopify — records the start of checkout for attribution.	1 year
Strictly Necessary	identity_state	draperjames.com	Shopify — tracks customer identity/login state.	1 day
Strictly Necessary	identity_customer_account_number	draperjames.com	Shopify — stores the customer account identifier.	12 weeks
Strictly Necessary	zCountry	zonos.com	Zonos — stores detected country for cross-border duty/tax and currency.	1 year
Strictly Necessary	zHello	zonos.com	Zonos — initializes the cross-border shopping session.	1 year
Performance	__attentive_id, __attentive_pv, __attentive_ss_referrer, _attn_	attentive.com	Attentive — visitor, page-view, and referrer identifiers for the SMS sign-up program.	Up to 1 year
Performance	__atuvc, __atuvs, __utma	addthis.com	AddThis — social-sharing usage and visitor-distinction counts.	Up to 2 years
Performance	_bcai_h, _bcai_i, _bcai_lpv, _bcai_spv, _bcai_v, _bcai_vn, _bcai_vs	draperjames.com	Black Crow AI — visitor/session identifiers for predictive shopper analytics.	Up to 1 year
Performance	_ga	draperjames.com	Google Analytics — distinguishes unique users by assigning a randomly generated client ID.	2 years
Performance	_ga_*	draperjames.com	Google Analytics 4 — persists per-property session state (instance: _ga_4CYJVPP8ZG).	2 years
Performance	_gat	draperjames.com	Google Analytics — throttles the request rate.	1 minute
Performance	_gat_UA-*	draperjames.com	Google Analytics (Universal Analytics) — throttles the request rate (instance: _gat_UA-55081038-1).	1 minute
Performance	_gcl_au	draperjames.com	Google Ads — conversion-tracking and click-attribution identifier.	90 days
Performance	_gq_fts, _qg_cm, QGUserId	draperjames.com	Appier — visitor identifiers for audience analytics and predictive marketing.	Up to 1 year
Performance	__kla_id	draperjames.com	Klaviyo — identifies a customer profile to personalize email and SMS communications.	2 years
Performance	_pin_unauth	draperjames.com	Pinterest — identifies unauthenticated visitors for conversion tracking and retargeting.	1 year
Performance	_scid, _scid_r, _scsrid_r	draperjames.com	Snapchat Pixel — visitor/session identifiers for ad conversion tracking.	Up to 13 months
Performance	_shopify_d	draperjames.com	Shopify — captures device/diagnostic data for analytics.	Session
Performance	_shopify_evids	draperjames.com	Shopify — deduplicates analytics events.	Session
Performance	_shopify_fs	draperjames.com	Shopify — records the first-seen timestamp for the analytics session.	30 minutes
Performance	_sp_id.*	draperjames.com	Snowplow — first-party domain user identifier for behavioral analytics (instance: _sp_id.3a39).	Up to 13 months
Performance	_sp_ses.*	draperjames.com	Snowplow — session identifier for behavioral analytics (instance: _sp_ses.3a39).	Session (~30 minutes)
Performance	_uetsid	draperjames.com	Microsoft Advertising (Bing UET) — session identifier for ad conversion tracking.	1 day
Performance	_uetvid	draperjames.com	Microsoft Advertising (Bing UET) — persistent visitor identifier for ad conversion tracking.	Up to 13 months
Performance	customer_auth_provider, customer_auth_session_created_at	draperjames.com	Shopify — records the customer authentication provider and session start.	Session
Performance	IR_11568, IR_gbd, IR_PI	impact.com	impact.com — affiliate click attribution and partner-program tracking.	Up to 1 year
Performance	yotpo_pixel	draperjames.com	Yotpo — identifies a visitor for the reviews/loyalty program.	Up to 1 year
Functional	_landing_page	draperjames.com	Shopify — records the landing page a visitor first arrived on for attribution.	2 weeks
Functional	_orig_referrer	draperjames.com	Shopify — records the original referring URL for attribution.	2 weeks
Functional	_s	draperjames.com	Shopify — analytics session identifier.	30 minutes
Functional	_shopify_s	draperjames.com	Shopify — identifies the current session for cart and checkout continuity.	30 minutes
Functional	_shopify_sa_p, _shopify_sa_t	draperjames.com	Shopify — stores analytics attribution parameters and timestamps for the session.	30 minutes
Functional	_shopify_y	draperjames.com	Shopify — persists customer identification across visits.	1 year
Functional	_y	draperjames.com	Shopify — visitor identifier used by storefront analytics.	1 year
Functional	cart_currency	draperjames.com	Shopify — stores the currency selected for the cart.	2 weeks
Functional	localization	draperjames.com	Shopify — stores the visitor's country/region for localized pricing and content.	2 weeks
Functional	secure_customer_sig	draperjames.com	Shopify — authenticates a returning customer who has logged in to their account.	20 years
Functional	shopify_pay_redirect	draperjames.com	Shopify — manages redirection through Shop Pay accelerated checkout.	1 hour, 3 weeks, or 1 year depending on value
Functional	_wchtbl_sid, _wchtbl_uid	draperjames.com	Third-party analytics vendor — session and visitor identifiers (provider listed only as 'Analytics' in source).	Session to 1 year
Functional	__cfduid	draperjames.com	Cloudflare — legacy security cookie identifying trusted web traffic (deprecated).	1 year
Functional	_cmp_a	draperjames.com	Shopify — supports the consent-management API.	1 day
Functional	_gid	draperjames.com	Google Analytics (Universal Analytics) — distinguishes users within a 24-hour window.	1 day
Functional	amazon-pay-connectedAuth, apay-session-set, language	amazon.com	Amazon Pay — authentication, session, and language state for Amazon Pay checkout.	Session to 1 year
Functional	dynamic_checkout_shown_on_cart	draperjames.com	Shopify — records that an accelerated-checkout button was shown on the cart.	30 minutes
Advertising	__adroll, __adroll_fpc, __adroll_v4, __ar_v4	adroll.com	AdRoll — visitor identifiers for retargeting and ad-campaign measurement.	1 year
Advertising	__attentive_cco, __attentive_dv	attentive.com	Attentive — consent and device identifiers for SMS marketing.	Up to 390 days
Advertising	_fbp	draperjames.com	Meta Pixel — identifies browsers for advertising and conversion measurement on Meta platforms.	3 months
Advertising	_fbc	draperjames.com	Meta Pixel — stores the most recent Facebook click ID when a visitor arrives via a Meta ad.	2 years
Advertising	_gads	draperjames.com	Google — ad selection and measurement identifier.	1 year
Advertising	_qg_fts	draperjames.com	Appier — identifier for predictive advertising and audience targeting.	1 year
Advertising	BizoID	linkedin.com	LinkedIn — visitor identifier for ad targeting and campaign measurement.	1 month
Advertising	GPS	youtube.com	YouTube — stores a unique session ID for geolocation on embedded video.	Session
Advertising	PREF	youtube.com	YouTube — stores preferences and personalizes embedded video/ads.	8 months
Advertising	IDE	doubleclick.net	Google DoubleClick — measures ad effectiveness and serves targeted ads.	2 years

Managing Cookies

You can manage or disable Cookies (except for strictly necessary Cookies) at any time by visiting our Cookie management tool available on our Site/Application and here. Browsers are different, so you should refer to the settings menu of your browser for instructions on how to change your Cookie preferences. If you choose not to receive Cookies, our Site/Application may not function properly and certain services may not be available.

To find out more information about Cookies in general and how to manage them, visit the website www.allaboutcookies.org.

Changes to this Policy

Cart.com, Inc. may amend this Policy from time to time. Please observe the effective date at the top of this page to see when this Policy was last revised. Changes to this Policy will be effective when we make available the revised version to our Site/Application.