Cookie Policy

What are cookies?

Cookies are small text files stored on your device. At SERENE we group them into four categories shown in the table below. Only Strictly Necessary cookies are set without your choice — everything else requires your consent.

Google Consent Mode v2

Consent Mode v2 lets Google tags adapt to your choices before you decide. Until you choose, all non-essential signals are sent as denied with limited, aggregated modeling only:

ad_storage, ad_user_data, ad_personalization → Marketing category
analytics_storage → Statistics category
functionality_storage + personalization_storage → Preferences category
security_storage → always granted (necessary)

Technical defaults injected by serene-consent-default in <head>: wait_for_update: 500, ads_data_redaction: true, url_passthrough: true. Updates are pushed via gtag('consent','update', …) and broadcast as the custom event serene:consent:update (consumed by Klaviyo gating).

Cookie table

Provider, names, purpose, duration and the Consent Mode signal it maps to. Marketing cookies (including Klaviyo) load only after you grant Marketing.

Category	Provider	Names	Purpose	Duration	Signal
Strictly Necessary	Shopify / SERENE	serene_cart, _shopify_y, _shopify_s, cart, secure_customer_sig, serene_consent	Core site function — cart, checkout session, security, load-balancing, and storing your consent choice. Always active.	Session to 1 year	security_storage: granted
Preferences	SERENE	localization, serene_consent (mirror)	Remember language/region and personalization choices.	1 year	functionality_storage + personalization_storage
Statistics	Google	_ga, _ga_*, _gid (only if consented)	Aggregate analytics (page views, product views, searches) via Google Analytics 4. In denied mode, Google tags run consent-aware with limited signals.	Up to 2 years (if consented)	analytics_storage
Marketing	Google / Klaviyo	_gcl_*, _fbp, IDE, klaviyo cookies (only if consented)	Ads, remarketing, conversion measurement and email personalization. Klaviyo script (serene-klaviyo-script) loads only after marketing consent.	Up to 2 years (if consented)	ad_storage + ad_user_data + ad_personalization

Shopify may set additional strictly-necessary cookies for fraud prevention and checkout integrity. Names above are representative and may vary by session.

Manage your preferences

Change your choices anytime — no need to clear cookies manually. Your preference is stored as the cookie and localStorage key serene_consent (version v1).

Also available in the footer → “Cookie preferences” (serene-consent-manage).

Banner: serene-consent-banner with actions serene-consent-accept-all / serene-consent-reject-all / serene-consent-customize.
Preferences modal: serene-consent-preferences with toggles serene-consent-toggle-* and details serene-consent-detail-*.
Quick toggles inside the modal: serene-consent-pref-accept-all / serene-consent-pref-reject-all, save as serene-consent-save.

Duration & storage

Consent cookie serene_consent: 1 year, SameSite=Lax, path=/, mirrored in localStorage for fast reads. On version bump, stale records are discarded and the banner is shown again.

To inspect: DevTools → Application → Cookies / Local Storage → key serene_consent → value is JSON: {"necessary":true,…,"decided":true,"v":"1","t":"ISO-date"}.

Your choices & browser controls

Besides the preferences above, you can block or delete cookies in your browser settings. Doing so may break cart or checkout (strictly necessary cookies). Withdrawing marketing consent flushes any queued Klaviyo events and prevents the Klaviyo script from loading; withdrawing analytics consent switches Google tags back to consent-aware mode.