Cookie Policy
Last updated: 11 November 2026
At www.xtandco.com we use cookies and similar technologies. This page explains which ones, what they are for, how long they last and how you can accept, reject or change your choice.
Data controller: Anahi Xochitl Blanco Tristán (XT & Co), Tax ID 53904765X, Avenida del Santuario de Valverde 11, 28049 Madrid, Spain. Email: info@xtandco.com.
What cookies are
Cookies are small files a website stores in your browser to remember information about your visit. First-party cookies are set by us (through Shopify and our apps). Third-party cookies are set by other companies whose services we use.
How to change or withdraw your consent
You can change your choice at any time, as easily as you gave it:
You can also delete or block cookies in your browser settings. If you block strictly necessary cookies, the cart or checkout may not work.
Cookies we use
Strictly necessary
Always active. The store cannot work without them, so they do not need your consent.
Shopify · First-party
Make the store work: cart, checkout, payments, security, login, language and currency.
Duration: Session to 2 years
Cookies: _ab, cart, checkout_token, storefront_digest, _tracking_consent, shopify_pay_redirect, cart_currency, keep_alive, localization, _shopify_country, _storefront_u, customer_account_locale, hide_shopify_pay_for_checkout, master_device_id, discount_code, shopify_pay, shop_pay_accelerated, identity-state, identity_customer_account_number, profile_preview_token, login_with_shop_finalize, _abv, _checkout_queue_token, _identity_session, _master_udr123, _merchant_essential, _pay_session, _shopify_essential, _shopify_essential_, _shopify_test, auth_state_*, checkout, in_checkout_profile_preview, order, skip_shop_pay, theme, user, user_cross_site, _shop_app_essential, shopify_client_id
Consentmo · First-party
Remember your cookie choices.
Duration: 1 day to 1 year
Cookies: cookieconsent_preferences_disabled, cookieconsent_status
TrustedSite · Third-party
Site security.
Duration: 1 year
Cookies: trustedsite_visit
Statistics
Only with your consent. They help us understand how the store is used.
Google Analytics · Third-party
Count visits and see how the store is used.
Duration: 2 years
Cookies: _ga, _ga_B95KJ3YQK8, _ga_2X8L2DX20Y
Microsoft Clarity · Third-party
Understand how visitors navigate pages so we can make them easier to use.
Duration: Session to 1 year
Cookies: _clck, _clsk
Shopify · First-party
Store statistics (visits, sessions, sales).
Duration: 30 minutes to 2 years
Cookies: _shopify_s, _shopify_y, shop_analytics, _shopify_ga, _merchant_analytics, _shopify_analytics
Contentsquare · Third-party
Analyse page views and user experience.
Duration: Up to 13 months
Cookies: _cs_c, _cs_id, _cs_s
Marketing
Only with your consent. They let us show you relevant ads and measure our campaigns.
Google Ads · Third-party
Measure the results of our Google ads.
Duration: 3 months
Cookies: _gcl_au
Meta Pixel · Third-party
Show and measure our ads on Facebook and Instagram.
Duration: 4 months
Cookies: _fbp
Shopify · First-party
Record how you arrived at the store (campaign or website) for marketing reports.
Duration: 1 to 2 years
Cookies: _landing_page, _orig_referrer, _shopify_marketing, shopify_override_user_locale
Klaviyo · Third-party
Recognise newsletter subscribers to personalise our emails.
Duration: 2 years
Cookies: __kla_id
Uppromote · Third-party
Attribute visits from affiliate links.
Duration: Session
Cookies: _up_clid
Preferences
Only with your consent. They remember your choices and enable some features.
Swym · Third-party
Save your wishlist.
Duration: 30 minutes to 1 year
Cookies: swym-email, swym-session-id, swym-pid, swym-swymRegid, swym-o_s, swym-v-ckd
PayPal · Third-party
Support PayPal payments and their security.
Duration: 3 years
Cookies: ts_c
CreativeCDN · Third-party
Support payment services (PayPal).
Duration: 1 year
Cookies: ts
Google · Third-party
Check whether your browser accepts cookies.
Duration: 1 year
Cookies: test_cookie
Microsoft Azure · Third-party
Route your browser to the right server of a service we use.
Duration: Session
Cookies: ASLBSACORS
Amazon Web Services · Third-party
Route your browser to the right server of a service we use.
Duration: Session
Cookies: AWSALBCORS
International transfers
Some providers (for example Google, Meta, Microsoft or Klaviyo) may process data outside the European Economic Area. They do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
More information
Read our Privacy Policy to learn how we process your data and how to exercise your rights. If you have any questions, email us at info@xtandco.com.