Cookie Policy
Effective Date: 1 May 2026 | Last Updated: 1 May 2026
This Cookie Policy explains what cookies and similar tracking technologies are used on femologist.com, why we use them, who sets them, and how you can control them. It is intended to give you a complete and specific picture of our cookie use in one place.
This Cookie Policy works alongside our Privacy Policy, which describes more broadly how we collect and use personal information, as well as our Terms of Service. Information about cookies in the Privacy Policy is intentionally kept as a summary; this document is the authoritative, detailed reference. Where this Cookie Policy and the Privacy Policy address the same topic, this document governs for cookie-specific matters.
If you have questions about this Policy, contact us at: privacy@femologist.com
1. What Cookies Are and How They Work
Cookies are small text files that a website places on your device (computer, phone, or tablet) when you visit. They are stored in your browser and sent back to the website on subsequent visits, allowing the site to recognize you and remember information about your preferences or behavior.
Cookies set directly by us at femologist.com are called first-party cookies. Cookies set by other companies whose code or services we include on our Site (such as Google, Meta, and Klaviyo) are called third-party cookies. Third-party cookies may allow those companies to recognize your device across different websites you visit, not just ours.
Session cookies are temporary and are deleted from your device when you close your browser. Persistent cookies remain on your device for a set period, ranging from a few days to several years, or until you delete them manually.
Alongside cookies, we and our service providers use related technologies including web beacons (also called pixels or pixel tags), which are tiny invisible images embedded in web pages and emails that allow us to detect when a page has been loaded or an email opened, and local storage, which allows websites to store small amounts of data directly in your browser for functionality and performance purposes. These technologies function similarly to cookies and are covered by this Policy.
2. Why We Use Cookies
We use cookies for four distinct purposes, each described below. The first category, strictly necessary cookies, is essential for the Site to function and cannot be turned off.
Strictly necessary cookies keep the Site running. Without them, your shopping cart would not hold items, checkout would not work, and you could not log in to your account. Because these cookies are technically essential, they operate without your consent.
Analytics cookies tell us how visitors use our Site: which pages are popular, how long people spend browsing, and where people tend to leave. This information is aggregated and used to improve the Site experience. We use Google Analytics and Shopify’s built-in analytics for this purpose.
Marketing and advertising cookies allow us to measure whether our advertisements are working and to show you relevant ads on other platforms such as Facebook, Instagram, Google search, and Bing. They also allow us to personalize email communications through Klaviyo based on your browsing behavior. Under California law, some uses of these cookies may constitute the “sale” or “sharing” of your personal information. See Section 4 for opt-out options.
Functionality cookies support features that make the Site more useful: your loyalty rewards balance, your subscription account state, and back-in-stock notification requests. These are not strictly essential but meaningfully improve your experience.
3. Cookies We Use
The tables below list the specific cookies and tracking technologies active on our Site, grouped by purpose. We update these tables when we add or remove cookies. The effective date of this Policy reflects the most recent update.
3.1 Strictly Necessary Cookies
These cookies are required for the Site to function. You may be able to block them through your browser settings, but doing so will prevent you from using core features including checkout and account login.
| Cookie / Technology | Set By | Purpose | Type | Duration |
|---|---|---|---|---|
| _shopify_session | Shopify | Maintains your shopping session, cart contents, and checkout state | Session | Session |
| _shopify_y | Shopify | Anonymous visitor analytics used by Shopify to distinguish unique visitors | Persistent | 1 year |
| cart | Shopify | Stores the contents of your shopping cart | Persistent | 2 weeks |
| secure_customer_sig | Shopify | Authenticates your logged-in customer account session | Persistent | 20 years |
| _shopify_fs | Shopify | First-party session identifier for Shopify storefront analytics | Persistent | 30 minutes |
| keep_alive | Shopify | Keeps your session alive during checkout to prevent timeouts | Session | Session |
| checkout_session_token | Shopify | Secures and identifies your checkout session | Session | Session |
| locksmith_* | Locksmith | Manages access control for password-protected or restricted pages on our Site | Varies | Varies |
3.2 Analytics Cookies
These cookies help us understand how visitors interact with our Site. All data collected is used in aggregate to improve Site performance and content. Google Analytics on our account is configured with a 14-month data retention period, after which data is automatically deleted. No individually identifying information is sent to Google Analytics; IP addresses are anonymized before transmission.
| Cookie / Technology | Set By | Purpose | Type | Duration |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors for traffic analysis. Assigned a randomly generated client ID. | Persistent | 14 months |
| _ga_[ID] | Google Analytics | Stores and counts page views for this specific Google Analytics property | Persistent | 14 months |
| _gid | Google Analytics | Distinguishes users; used to throttle request rate | Persistent | 24 hours |
| _shopify_sa_p | Shopify Analytics | Tracks marketing and referral parameters for attribution | Persistent | 30 minutes |
| _shopify_sa_t | Shopify Analytics | Tracks referral source, campaign, and marketing attribution data | Persistent | 30 minutes |
3.3 Marketing and Advertising Cookies
These cookies are set by our advertising partners and by Klaviyo, our email marketing platform. They allow us to measure ad conversions, build retargeting audiences, and personalize email content based on your browsing behavior on our Site. The data collected by these cookies may be shared with the third parties identified below and combined with other data they hold about you from other websites you have visited.
| Cookie / Technology | Set By | Purpose | Type | Duration |
|---|---|---|---|---|
| _fbp | Meta / Facebook | Identifies browsers for advertising measurement; used by the Facebook Pixel to track visits and conversions | Persistent | 90 days |
| _fbc | Meta / Facebook | Stores Facebook click ID from ad click parameters for attribution reporting | Persistent | 90 days |
| _gcl_au | Google Ads | Stores and tracks conversion information for Google Ads campaigns | Persistent | 90 days |
| IDE | Google / DoubleClick | Used by Google advertising to serve and measure ads across the web | Persistent | 13 months |
| _uetsid / _uetvid | Microsoft / Bing Ads | Used by Microsoft Bing to build a profile of visitor interests and serve relevant ads | Persistent | Session / 13 months |
| _kx | Klaviyo | Tracks visitor behavior on Site for email personalization and campaign attribution | Persistent | Varies |
| __kla_id | Klaviyo | Identifies known Klaviyo profiles browsing the Site; enables personalized email triggers | Persistent | 2 years |
California residents: The use of marketing cookies to build advertising audiences may constitute a “sale” or “sharing” of personal information under the California Privacy Rights Act. You have the right to opt out. See Section 4.
3.4 Functionality Cookies
These cookies support features that are not strictly essential but that improve your experience on the Site, including the Femologist Rewards program widget, subscription account management via Recharge, and back-in-stock notifications.
| Cookie / Technology | Set By | Purpose | Type | Duration |
|---|---|---|---|---|
| _fbp | Meta / Facebook | Identifies browsers for advertising measurement; used by the Facebook Pixel to track visits and conversions | Persistent | 90 days |
| _fbc | Meta / Facebook | Stores Facebook click ID from ad click parameters for attribution reporting | Persistent | 90 days |
| _gcl_au | Google Ads | Stores and tracks conversion information for Google Ads campaigns | Persistent | 90 days |
| IDE | Google / DoubleClick | Used by Google advertising to serve and measure ads across the web | Persistent | 13 months |
| _uetsid / _uetvid | Microsoft / Bing Ads | Used by Microsoft Bing to build a profile of visitor interests and serve relevant ads | Persistent | Session / 13 months |
| _kx | Klaviyo | Tracks visitor behavior on Site for email personalization and campaign attribution | Persistent | Varies |
| __kla_id | Klaviyo | Identifies known Klaviyo profiles browsing the Site; enables personalized email triggers | Persistent | 2 years |
4. Your Cookie Choices and How to Opt Out
You have several ways to control which cookies are active on your device. We describe each method below, along with what it does and does not cover.
4.1 Cookie Opt Out
You may exercise your right to opt out of the sale or sharing of your personal information, as provided under the California Privacy Rights Act (CPRA), the California Consumer Privacy Act (CCPA), and similar privacy laws in Virginia, Colorado, Connecticut, Texas, and other US states. To do so please visit our Opt Out page at: femologist.com/pages/ccpa-opt-out
4.2 Browser Settings
All major browsers allow you to manage, block, or delete cookies through their settings. Blocking all cookies will prevent strictly necessary cookies from functioning and will likely break the shopping cart, checkout, and account login on our Site. Blocking only third-party cookies is a more targeted option that reduces advertising tracking while preserving core Site functionality.
Browser-specific instructions can be found at the following links. Note that these links are provided for your convenience and are maintained by the browser developers, not by Femologist.
Chrome: support.google.com/chrome/answer/95647
Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari (Mac): support.apple.com/guide/safari/manage-cookies-sfri11471/mac
Safari (iOS): support.apple.com/en-us/HT201265
Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406
4.3 Advertising Opt-Out Tools
The advertising partners whose cookies we use participate in industry opt-out frameworks. Using these tools tells participating companies that you do not want them to use your data for targeted advertising, but it does not delete cookies already on your device and does not prevent all tracking; it specifically opts you out of interest-based advertising profiles.
Digital Advertising Alliance (DAA): optout.aboutads.info | covers US-based advertising networks
Network Advertising Initiative (NAI): optout.networkadvertising.org
Google Ads settings: adssettings.google.com
Meta / Facebook ad preferences: facebook.com/ads/preferences
Google Analytics opt-out extension: tools.google.com/dlpage/gaoptout | prevents your data being included in Google Analytics reports
4.4 Global Privacy Control (GPC)
Global Privacy Control is a browser-level signal that communicates your preference to opt out of the sale or sharing of your personal information. We recognize and honor GPC signals. If your browser sends a GPC signal when you visit our Site, we will automatically treat your visit as an opt-out of marketing cookies and will not load advertising or tracking cookies that constitute a sale or sharing of personal information under applicable law. This applies even if you have not separately interacted with our Cookie Opt Out form.
GPC is supported in browsers including Firefox, DuckDuckGo, and Brave, and via browser extensions for Chrome and other browsers. More information is available at: globalprivacycontrol.org
4.5 Do Not Sell or Share My Personal Information
California residents have a specific legal right to opt out of the sale or sharing of their personal information, which includes the use of marketing and advertising cookies as described in Section 3.3 of this Policy. You can exercise this right by clicking the “Do Not Sell or Share My Personal Information” link in our website footer, or by enabling GPC in your browser. These three methods are equivalent in effect. Opting out does not disable strictly necessary or functionality cookies, and does not affect our ability to send you transactional emails related to your orders and account.
4.6 Email Tracking
Marketing emails we send through Klaviyo contain web beacons (tracking pixels) that tell us when an email has been opened and which links were clicked. This information is used to measure campaign effectiveness and, for known Klaviyo profiles, to trigger personalized browsing-based emails. You can prevent email tracking by disabling images in your email client, which prevents the pixel from loading. You can opt out of Klaviyo marketing emails entirely by clicking the unsubscribe link in any email we send. Note that transactional emails (such as order confirmations, shipping notifications, and subscription billing reminders) are sent regardless of your marketing email preferences and may contain functional tracking to confirm delivery.
4.7 Mobile Devices
On mobile devices, you can limit interest-based advertising through your device settings. On iOS, navigate to Settings > Privacy & Security > Tracking and disable “Allow Apps to Request to Track.” On Android, navigate to Settings > Google > Ads and enable “Opt out of Ads Personalization.” These settings control mobile app tracking and may not affect browser-based tracking on our Site, which is managed through the options described above.
5. Third-Party Cookies and Our Responsibility
Many of the cookies described in Section 3 are set by third parties whose code we include on our Site. While we take care to select reputable partners and to describe their cookies accurately in this Policy, we do not control how those third parties collect or use data once it has been collected by their cookies. Each third party operates under its own terms and privacy policy.
The relevant privacy policies for our main cookie-setting partners are as follows. We encourage you to review these if you want to understand how those companies use data collected through their cookies on our Site.
Google: policies.google.com/privacy
Meta: facebook.com/privacy/policy
Microsoft: privacy.microsoft.com/en-us/privacystatement
Klaviyo: klaviyo.com/legal/privacy-notice
Shopify: shopify.com/legal/privacy
Smile.io: smile.io/privacy
Recharge: rechargepayments.com/privacy
6. Consent and Legal Basis for Cookies
For visitors from the European Economic Area and the United Kingdom, our use of non-essential cookies is based on your consent, which we obtain through our cookie banner before any non-essential cookies are loaded. You have the right to withdraw your consent at any time by submitting a request through our Cookie Opt Out form. Withdrawal of consent does not affect the lawfulness of any cookie use that occurred before you withdrew consent.
Strictly necessary cookies are used on the basis of our legitimate interest in operating a functional e-commerce website, and do not require consent. Their use is proportionate to that purpose and cannot reasonably be achieved by less privacy-intrusive means, since they are technically required for checkout and account functionality.
For visitors from California and other US states with opt-out rights for targeted advertising, the mechanism for exercising those rights is described in Section 4.
7. Cookie Duration and Data Retention
Cookie lifespans are shown in the tables in Section 3. To summarize the key retention points: session cookies are deleted when you close your browser, most analytics cookies expire within 14 months consistent with our Google Analytics configuration, most advertising cookies expire within 90 days to 13 months as set by the respective platforms, and functionality cookies tied to active account features (such as loyalty rewards) may persist for up to one year.
Deleting cookies from your browser will remove them from your device immediately, but they may be re-set the next time you visit our Site if you have not updated your browser’s preferences or if they are strictly necessary cookies.
Personal data associated with cookie identifiers (for example, a browsing history linked to a Klaviyo profile or a Google Analytics client ID) is subject to the data retention periods described in our Privacy Policy, which may differ from the cookie’s own lifespan.
8. Changes to This Cookie Policy
We update this Cookie Policy when we add, remove, or change the cookies we use. The effective date and last updated date at the top of this document reflect the most recent version. We will not make material changes to how we use consent-based cookies without first updating this Policy and, where required, re-obtaining your consent through the cookie banner.
If you have questions about any change, please contact us at privacy@femologist.com before the effective date and we will be happy to explain what is changing and why.
9. Contact Us
If you have questions about this Cookie Policy, want to exercise your privacy rights, or want to report a concern about our use of cookies, please contact us:
Email: privacy@femologist.com
Mail: Privacy Officer, Femologist Inc., 16870 W Bernardo Drive, Suite 400, San Diego, CA 92127
For rights requests specific to California (Do Not Sell or Share) or other state privacy laws, please also see our Privacy Policy at femologist.com/pages/privacy-policy for the full process and response timeframes.

