GDPR Compliance
USA: US Privacy Requests, Do Not Sell or Share My Personal Information
CANADA: Canadian Privacy Rights (PIPEDA & Quebec Law 25)
AUSTRALIA & NEW ZEALAND: Privacy Rights (Australia & New Zealand)
BRAZIL: Central de Privacidade (LGPD)
JAPAN: 日本のプライバシー権利（APPI）
THAILAND: PDPA Compliance
SOUTH AFRICA: POPIA Compliance
REST OF THE WORLD: Personal Data Requests
EU:
We respect your privacy. If you are in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR). Use the following options to exercise your rights regarding the personal data we hold about you.
How we process your request When you submit a Data Subject Access Request (DSAR) via our compliance page, our compliance provider Consentmo processes your IP address and email solely for the purpose of fulfilling your request. For more details, please refer to Consentmo's Data Processing Policy.
Access to Personal Data
You can request a report containing all personal information we store about you via the link below. We will respond within 30 days.
Response time: We will respond within one month. If your request is complex, we may extend this period as permitted by law and will inform you accordingly.
Data Rectification
If your account details are inaccurate, update or correct them using the link below.
Right to be Forgotten
Use this option if you wish to remove your personal and other data from our store. Note that this process will delete your account, so you will no longer be able to access or use it.
Important: Some information may be retained if required by law or for legitimate purposes (e.g., taxes, fraud prevention, and security).
Manage Privacy Settings
You can customize your experience by precisely defining which types of cookies and technologies we may use (e.g., enable analytics, disable marketing). You can update these specific settings at any time.
Withdraw Consent
You have the right to withdraw your Shopify marketing consent for tracking technologies at any time. This applies to your future use of our store and stops data collection for optional purposes.
Right to Restriction of Processing / Right to Object
You can request the restriction or temporary suspension of the processing of your personal data under certain circumstances. Please contact us at You have the right to object to certain types of data processing, including direct marketing or processing based on legitimate interests. Contact us to submit your objection at
You can request the restriction or temporary suspension of the processing of your personal data under certain circumstances. Please contact us at {dpo_email} for assistance.
📧 info@purhair.de
Contact Information
For questions about your personal data or data protection rights, please contact our Data Protection Officer (DPO) at:
Email: info@purhair.de
Address: Max-Reger-Straße 170, 90571 Schwaig bei Nürnberg , Germany
Right to Complain
If you believe we have not addressed your concerns, you have the right to lodge a complaint with your national data protection authority.
Cookie List and Privacy Policy Table
| Name | Description | Category | Provider | Duration |
|---|---|---|---|---|
| _orig_referrer | Allows the merchant to identify where visitors come from. | Necessary | Shopify | 2 weeks |
| _landing_page | Records the visitor's landing page when coming from other websites. | Necessary | Shopify | 2 weeks |
| _ab | Used to control when the admin bar is displayed in the storefront. | Necessary | Shopify | 1 year |
| _secure_session_id | This cookie is generally provided by Shopify and is used to track a user's session during the multi-step checkout process and to link their order, payment, and shipping details. | Necessary | Shopify | 1 day |
| cart | Contains information about the user's shopping cart. | Necessary | Shopify | 2 weeks |
| cart_sig | This cookie is generally provided by Shopify and used in connection with checkout. It is used to verify the integrity of the cart and ensure the performance of some cart operations. | Necessary | Shopify | 2 weeks |
| cart_ts | This cookie is generally provided by Shopify and used in connection with checkout. | Necessary | Shopify | 2 weeks |
| cart_ver | This cookie is generally provided by Shopify and used in connection with the shopping cart. | Necessary | Shopify | 2 weeks |
| cart_currency | Used after checkout to initialize a new empty shopping cart with the same currency. | Necessary | Shopify | 2 weeks |
| checkout_token | Used by checkout to identify the user. | Necessary | Shopify | Session |
| Secure_customer_sig | Unknown | Necessary | Not available | Unknown |
| storefront_digest | Stores a digest of the storefront password, allowing merchants to view their storefront in password protection mode. | Necessary | Shopify | 1 year |
| cookieconsent_status | This cookie is linked to the Consentmo GDPR Compliance app and is used to store customer consent. | Necessary | Consentmo | 1 year |
| cookieconsent_preferences_disabled | This cookie is linked to the Consentmo GDPR Compliance app and is used to store customer consent. | Necessary | Consentmo | 1 day |
| _shopify_m | This cookie is generally provided by Shopify and is used to manage customer privacy settings. | Necessary | Shopify | 1 year |
| _shopify_tm | This cookie is generally provided by Shopify and is used to manage customer privacy settings. | Necessary | Shopify | 30 minutes |
| _shopify_tw | This cookie is generally provided by Shopify and is used to manage customer privacy settings. | Necessary | Shopify | 2 weeks |
| _tracking_consent | Used to store a user's preferences when a merchant has set privacy rules in the visitor's region. | Necessary | Shopify | 1 year |
| tracked_start_checkout | This cookie is generally provided by Shopify and used in connection with checkout. | Necessary | Shopify | 1 year |
| identity_state | This cookie is generally provided by Shopify and used in connection with customer authentication. | Necessary | Not available | 1 day |
| identity_customer_account_number | Stores an identifier to facilitate login between customer account and storefront domains. | Necessary | Shopify | 12 weeks |
| _customer_account_shop_sessions | Used in combination with the _secure_account_session_id cookie to track user sessions for new customer accounts. | Necessary | Shopify | 30 days |
| _secure_account_session_id | Used to track user sessions for new customer accounts. | Necessary | Shopify | 30 days |
| _shopify_country | Used for Plus stores where currency/country is determined via GeoIP to avoid further GeoIP queries. | Necessary | Shopify | 30 minutes |
| _storefront_u | Used to facilitate updating customer account data. | Necessary | Shopify | 1 minute |
| _cmp_a | Used to manage customer privacy settings. | Necessary | Shopify | 1 day |
| c | Unknown | Necessary | Shopify | Unknown |
| checkout | Used by checkout to identify the user. | Necessary | Shopify | 21 days |
| customer_account_locale | Used to track the customer domain locale during redirects. | Necessary | Shopify | 1 year |
| dynamic_checkout_shown_on_cart | Used in connection with payments. | Necessary | Shopify | 30 minutes |
| hide_shopify_pay_for_checkout | Set when a buyer closes the Shop Pay login window during checkout. | Necessary | Shopify | Session |
| shopify_pay | Used to log a buyer into Shop Pay when returning to checkout in the same store. | Necessary | Shopify | 1 year |
| shopify_pay_redirect | Used to accelerate the checkout process if the buyer has a Shop Pay account. | Necessary | Shopify | 1 year |
| shop_pay_accelerated | Indicates whether a buyer is eligible to use the accelerated Shop Pay checkout. | Necessary | Shopify | 1 year |
| keep_alive | Used when international domain redirection is enabled to determine if the request is the first of the session. | Necessary | Shopify | Session |
| source_name | Used in combination with mobile apps to provide a personalized checkout experience when browsing a compatible mobile app store. | Necessary | Shopify | Session |
| master_device_id | Merchant Authentication: Permanent device identifier, public version. | Necessary | Shopify | 1 year |
| previous_step | Used in connection with payments. | Necessary | Shopify | 1 year |
| discount_code | Stores a discount code received via URL parameter to apply it at the next checkout. | Necessary | Shopify | Session |
| remember_me | Used in connection with payments. | Necessary | Shopify | 1 year |
| checkout_session_lookup | Used in connection with payments. | Necessary | Shopify | 3 weeks |
| checkout_prefill | Used in connection with payments. | Necessary | Shopify | 5 minutes |
| checkout_queue_token | Used in connection with payments. | Necessary | Shopify | 1 year |
| checkout_queue_checkout_token | Used in connection with payments. | Necessary | Shopify | 1 year |
| checkout_worker_session | Used in connection with payments. | Necessary | Shopify | 3 days |
| checkout_session_token | Used in connection with payments. | Necessary | Shopify | 3 weeks |
| cookietest | Used to ensure our systems are functioning correctly. | Necessary | Shopify | 1 minute |
| order | Used to allow access to the buyer's order details page. | Necessary | Shopify | 3 weeks |
| identity-state | Stores a hash of the OAuth flow state between redirects. | Necessary | Shopify | 1 day |
| card_update_verification_id | Used in connection with payments. | Necessary | Shopify | 1 day |
| customer_account_new_login | Used in connection with user identification. | Necessary | Shopify | 20 minutes |
| customer_account_preview | Used in connection with user identification. | Necessary | Shopify | 7 days |
| customer_payment_method | Used in connection with payments. | Necessary | Shopify | 60 minutes |
| customer_shop_pay_agreement | Used in connection with payments. | Necessary | Shopify | 1 minute |
| pay_update_intent_id | Used in connection with payments. | Necessary | Shopify | 20 minutes |
| localization | Used to localize the cart to the correct country. | Necessary | Shopify | 2 weeks |
| profile_preview_token | Used to preview checkout customizations. | Necessary | Shopify | 5 minutes |
| login_with_shop_finalize | Used to facilitate login with Shop. | Necessary | Shopify | 5 minutes |
| preview_theme | Used in conjunction with the theme editor. | Necessary | Shopify | Session |
| shopify-editor-unconfirmed-settings | Used in conjunction with the theme editor. | Necessary | Shopify | 1 day |
| wpm-test-cookie | Used to ensure our systems are functioning correctly | Necessary | Shopify | Session |
| _shopify_essential | Contains essential information for the correct functioning of a shop, such as session and checkout information, as well as anti-tampering data. | Necessary | Shopify | 1 year |
| _shop_app_essential | Contains important information for the correct operation of Shop.app. | Necessary | Shopify | 1 year |
| shopify_client_id | Used by the website's Shopify platform to enable e-commerce functions. | Necessary | Shopify | 1 year |
| _s | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 30 minutes |
| _shopify_d | Unknown | Statistics | Not available | Unknown |
| _shopify_fs | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 30 minutes |
| _shopify_s | Used to identify a specific browser session/shop combination. Valid for 30 minutes after last use. | Statistics | Shopify | 30 minutes |
| _shopify_sa_t | This cookie is associated with Shopify's analytics suite for marketing and referrals. | Statistics | Shopify | 30 minutes |
| _shopify_sa_p | This cookie is associated with Shopify's analytics suite for marketing and referrals. | Statistics | Shopify | 30 minutes |
| _shopify_y | Shopify analytics. | Statistics | Shopify | 1 year |
| _y | This cookie is associated with Shopify's analytics suite. | Statistics | Shopify | 1 year |
| _shopify_evids | Unknown | Statistics | Not available | Unknown |
| __atuvc | Unknown | Statistics | Not available | Unknown |
| __atuvs | Unknown | Statistics | Not available | Unknown |
| __utma | Unknown | Statistics | Not available | Unknown |
| customer_auth_provider | This cookie is associated with Shopify's analytics suite. | Statistics | Not available | Session |
| customer_auth_session_created_at | This cookie is associated with Shopify's analytics suite. | Statistics | Not available | Session |
| _ga | This cookie name is associated with Google Universal Analytics | Statistics | Google Analytics | 2 years |
| _gat | This cookie name is associated with Google Universal Analytics. | Statistics | Google Analytics | 1 minute |
| _ga_83KHNW4KY9 | ID used to identify users | Statistics | Google Analytics | 2 years |
| _ga_FHL8FR1WNP | ID used to identify users | Statistics | Google Analytics | 2 years |
| _ga_PL4L0JB0GP | ID used to identify users | Statistics | Google Analytics | 2 years |
| _shopify_analytics | Contains analytics data for buyer interfaces such as storefront or checkout. | Statistics | Shopify | 1 year |
| _clck | This cookie is installed by Microsoft Clarity to store information of how visitors use a website and help in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form. | Statistics | Microsoft | 1 year |
| _clsk | This cookie is installed by Microsoft Clarity to store information of how visitors use a website and help in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form. | Statistics | Microsoft | Session |
| _ga_K0FGQ3CG24 | ID used to identify users | Statistics | Google Analytics | 2 years |
| _gads | Unknown | Marketing | Not available | Unknown |
| IDE | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Google's real-time advertising exchange | Marketing | Google DoubleClick | 2 years |
| GPS | This cookie is linked to YouTube, which collects user data about videos embedded in websites, aggregated with profile data from other Google services, to display targeted advertising to web visitors across a wide range of their own and other websites. | Marketing | Youtube | Session |
| PREF | This cookie, which may be set by Google or Doubleclick, may be used by advertising partners to create an interest profile to display relevant ads on other websites. | Marketing | Youtube | 8 months |
| BizoID | This is a first-party cookie from Microsoft MSN to enable user-based content. | Marketing | 1 month | |
| _fbp | Used by Facebook to provide a range of advertising products such as real-time bidding from third-party advertisers. | Marketing | Meta Platforms, Inc. | 3 months |
| _fbc | Unknown | Marketing | Not available | Unknown |
| __adroll | This cookie is linked to AdRoll | Marketing | Adroll Group | 1 year |
| __adroll_v4 | This cookie is linked to AdRoll | Marketing | Adroll Group | 1 year |
| __adroll_fpc | This cookie is linked to AdRoll | Marketing | Adroll Group | 1 year |
| __ar_v4 | This cookie is linked to AdRoll | Marketing | Adroll Group | 1 year |
| MUID | Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. | Marketing | Bing / Microsoft | 1 year |
| _uetsid | This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site. | Marketing | Bing / Microsoft | 30 minutes |
| _uetvid | This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. | Marketing | Bing / Microsoft | 16 days |
| __kla_id | When Klaviyo’s JavaScript is enabled, the __kla_id cookie can track and identify site visitors through an auto-generated ID. This cookie can temporarily hold personally identifiable information. Once a visitor is identified, the cookie can pass their data into Klaviyo. | Marketing | Klaviyo | 2 years |
| _gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | Marketing | 3 months | |
| _tt_enable_cookie | Tracking cookie used by TikTok to identify a visitor | Marketing | TikTok | 389 days |
| _ttp | Tracking cookie used by TikTok to identify a visitor | Marketing | TikTok | 389 days |
| _shopify_marketing | Contains marketing data for buyer interfaces such as storefront or checkout. | Marketing | Shopify | 1 year |
| ttcsid | Not available | Marketing | TikTok | Session |
| ttcsid_D3SVPOJC77UB8900T2K0 | TikTok conversion tracking and retargeting cookie for measuring ad performance and audience segmentation. | Marketing | TikTok | 1 year |
| _gid | This cookie name is associated with Google Universal Analytics. | Preferences | Google Analytics | 1 day |
| __cfduid | Unknown | Preferences | Not available | Unknown |
| __cf_bm | Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. | Preferences | Cloudflare | Session |
Dein Warenkorb
